The Surface Pro X LTE (SQ2) is not currently listed among the Surface models that support manual UEFI deployment of the 2023 Secure Boot certificates, while the Wi‑Fi version is.
Since your device is fully updated and manual PowerShell installation was unsuccessful, I would not assume the Wi‑Fi model's UEFI procedure applies to the LTE version. Microsoft also notes that some devices may require firmware support before the certificates can be installed. Please refer to Surface Secure Boot Certificates
At this point, your best option is to:
- Ensure all Windows and Surface firmware updates are installed.
- Check whether Windows Security reports the certificates as pending or blocked by an issue.
- Contact Microsoft Surface Support to confirm whether the Surface Pro X LTE (SQ2) is expected to receive the update automatically or supports a different deployment method.
If you can share the exact message shown under Windows Security > Device Security > Secure Boot, the community may be able to provide more specific guidance.
If this answer was helpful, please click "Accept Answer" and vote for it. If you have additional questions regarding this answer, please click "Comment".
Note: Please follow the steps outlined in our documentation to enable email notifications if you wish to receive notifications regarding this discussion.