If you didn't know, Microsoft is only company that can create certificate for OS/bootloader to allow Secure boot. If you try to make your own certificate that allow you to modify database of secure boot certificates or create own certificate then Microsoft tell you that you will not receive windows updates.