Secure Boot doesn't get in the way, I think. I had it disabled for some reason, but I enabled it to test it for you, and my Debian Linux boots just fine.
I have no idea about the crypto key situation unfortunately.
You have to test with win11 (in dual boot with your fav distro) and some software requiring UEFI secure boot (maybe its status is displayed somewhere in win11 settings).
That said, this shows the sabotage of dual boot by microsoft making it hell, this is proof, and thinking that all motherboard BIOSes will have properly tested secure boot configuration is a dream.
I have no idea about the crypto key situation unfortunately.