Make sure you've updated before the deadline.

For what it's worth, secure boot doesn't have to be some kind of trap where only MS lets you install Linux. For example, on my systems I have secure boot enabled, but I also want to load locally ...

So... my Asus mobo (ROG Strix Z390-E Gaming) is from 2018, and while the code Andrew provided for PowerShell shows I'm OK for the new cert, I get "False" for Default ...