Word of warning for people using Zorin with SecureBoot: updating the BIOS this way deleted/unenrolled the zorin MOK keys (though not the Ubuntu ones, oddly enough).
While it's easy enough to re-enroll the nvidia driver's MOK, I don't think the Zorin one is stored on system.