When there are already Platform Keys enrolled, then you need to change them to Default Keys before enabling Secure Boot.