Comment on
Microsoft's Secure Boot UEFI bootloader signing key expires in September, posing problems for Linux users
Reply in thread
Tools to do that exists. fwupd is a tool to update firmwares. I just tested it on a thinkpad and went from 351 keys to 518 secureboot keys.
GNOME Software also uses fwupd, that should take care of a good chunk of users.