The ubuntu-signed element installs linux-signed-image-generic that provides signed kernel that can be used for deploy in UEFI secure boot mode.
ubuntu-signed
linux-signed-image-generic