Comandos Securety Boot: 

1º: Set-ItemProperty -Path “HKLM:\SYSTEM\CurrentControlSet\Control\SecureBoot” -Name “AvailableUpdates” -Value 0x40

2º: Start-ScheduledTask -TaskName “\Microsoft\Windows\PI\Secure-Boot-Update”

3º: [System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023'