Your Linux PC has a Secure Boot problem - what to do first (and the workaround to avoid)

Secure Boot has always been a nuisance for Linux users, but Microsoft's expiring 2011 certificate authorities are making it a real pain.