shim is not currently signed for aarch64. This is due to some issues around being able to natively build PE-COFF binaries properly on aarch64. This problem is nearly resolved so let's track that here.
The upstream toolchain PE-COFF issue is being tracked here: https://sourceware.org/bugzilla/show_bug.cgi?id=26206