I'm really surprised if the machine doesn't support multi-signature. The patch was already merged into edk2 upstream back to 2013. If so, you should worry the quality of the firmware...