Change the Secure Boot template from "Microsoft Windows" to "Microsoft UEFI Certificate Authority" as per this screenshot