If you open the Windows Security app and go to the Device Security page, you can check whether Secure Boot certificate is up ...
If BitLocker is asking for Recovery Key after Windows Update, and you don't have the BitLocker Recovery Key, see this post ...