Secure Boot update still pending on deadline day

Hi, I would avoid disabling Secure Boot unless you have a very specific rollback plan. For servers, I’d first confirm the relevant cumulative update, servicing stack, and firmware updates are installed, then check the Secure Boot and Code Integrity related events after reboot. If this is about a Secure Boot DB or DBX update, firmware behavior can vary by hardware vendor, so checking the vendor’s guidance matters too. I’d test the update on one noncritical server of the same model before touching the wider group. If the update still shows pending after a clean reboot cycle, I’d open a Microsoft support case rather than weakening boot security across production servers.