In our environment, this is happening on all HP AMD based machines with Sure Start Secure Boot Key Protection enabled. If we turn that off before the initial attempt to install the KB then the KB will install. After restart we can renable the Sure Start protection. Each machine we've done this to also has to be rebooted two more times after the patch install for the NIC to be come active properly again. During the time the NIC isn't working properly an "ipconfig /all" command won't show the NIC adapters, but they appear in Device Manager and in Control Panel/Network Connections. On PCs where the Sure Start protections are in force at the time of patch install we get the same error Mikael Sillman
did. Sure Start then resets the keys and the system will boot up. Subsequent attempts to install the patch fail. Most often the error code is 0x80242FFF.