Access the UEFI/BIOS settings on your system, disable the Secure Boot feature and clear all Secure Boot keys to ensure a proper setup.
sudo grub-install --target=x86_64-efi --efi-directory=/boot/efi --bootloader-id=archlinux --modules="tpm" --disable-shim-lock
If you don't have the TPM2 module, omit --modules="tpm"
sudo grub-mkconfig -o /boot/grub/grub.cfg