Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. We recently published the first version of the Secure Boot playbook, o...
Heather_Poulsen
Updated Feb 19, 2026
Event details
Update: Never mind, I was a goof, I was querying the wrong registry key.
To follow up on asaund28's comment, when I looked at my environment even brand new devices are showing that registry the UEFICA2023Status regkey is NotStarted. Even on brand new devices we've deployed. Does NotStarted also mean the device may not need it?
or was i querying the wrong registry key?
Thanks for checking, I figured I was querying the wrong key, but I was incorrect. It was the right key.