Windows updates can often re-enable secure boot apparently, so first thing to do is check that, assuming you can still boot to Windows.
I do not use Windows any more so I don't know the details of...