This is an issue with secure boot. In the Terminal, type:


diskutil apfs updatepreboot /


This will fix the secure booting and allow all future updates.