I don't think you can install VeraCrypt, at least for system encryption, unless the installer is signed
According to further up the thread, you can if you disable secureboot.
alt Hacker News
According to further up the thread, you can if you disable secureboot.