Forum Discussion
Secure Boot Certificate Updates via InTune Policy
We are currently having issues applying the settings required to install secure boot cert updates using the InTune policy method. A brief overview to quickly explain : We are a reasonably large comp...
`slmgr /dli` can show the OEM channel even when subscription activation supplies Enterprise features, so use `DISM /Online /Get-CurrentEdition` as the authoritative edition check. If it reports Professional, verify the user has a qualifying subscription, the device is Entra joined, and subscription activation has completed before assigning the Secure Boot policy. That separates an edition prerequisite from an Intune policy delivery issue.