Thank you both.
In Custom mode, I deleted all except DBT, disabled Secure Boot, saved. Rebooted, ran Update, hit error.
So I rebooted via safe mode.
Ran Update, got the same wrong signature permission error.
Rebooted into Bios, enabled Secure Boot. Boot into Windows. Ran Check, seems like...