Secure Boot update still pending on deadline day

After checking the registry keys on 2x VMs which run services for a number of important customers I found they both have:

UEFICA2023Error 2147942750

Apparently this means they're pending a reboot.

https://blog.mindcore.dk/2026/04/secure-boot-certificate-update-intune/

I can't reboot the VM inside working hours, can they be rebooted after the deadline or do I need to disable Secure Boot on the VMs?

I'm concerned I'll have to disable Secure Boot before they're next rebooted for Windows updates.