All these suggestions are dumb.
Here's the fix. Disable secure boot in BIOS, install the updates, re-enable secure boot.
Microsoft, it's sooooooooooooooooooooooooooooooo beyond dumb that we have to do this to install your updates. Your help department sucks, and these so called "experts" that work for you are anything but.
To everyone else, you're welcome.