openSUSE Tumbleweed users currently need to disable Secure Boot to be able to install firmware updates provided by fwupd
EDIT: Update August 2024:
A new signed Shim for openSUSE Tumbleweed has been rolled out. Disappointing that the issue was pending for more than a year before it got sorted.