Make sure you've updated before the deadline.
Microsoft confirms systems without updated Secure Boot certificates will boot normally but lose some security protections.
So... my Asus mobo (ROG Strix Z390-E Gaming) is from 2018, and while the code Andrew provided for PowerShell shows I'm OK for the new cert, I get "False" for Default ...