I have the exact same board. BIOS v. 4505 will give you every updated Secure Boot certificate. Just something to consider.
And I've never had Windows Update offer me a bios update, so I'm surprised they offered you one, and a very old one at that.
PS...