If secure boot is enabled on your host, it is not allowed to load any unsigned drivers. Therefore, vmmon and vmnet modules cannot be loaded. This prevents virtual machine to power on.
To fix this, you will have to generate a key pair using the openssl to sign vmmon and vmnet modules:
$openssl req -new -x509 -newkey rsa:2048 -keyout VMK.priv -outform DER -out VMK.der -nodes -days 36500 -subj "/CN=VMware/"
(Use any name you want instead of VMK.)
Sign the modules using the generated key by running these commands:
$sudo /usr/src/linux-headers-`uname -r`/scripts/sign-file sha256 ./VMK.priv ./VMK.der $(modinfo -n vmmon)
$sudo /usr/src/linux-headers-`uname -r`/scripts/sign-file sha256 ./VMK.priv ./VMK.der $(modinfo -n vmnet)
Import the public key:
$mokutil --import VMK.der
Confirm a password and reboot your machine. Follow the instructions to complete the enrollment from the UEFI console.