Event details

Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. We recently published the first version of the Secure Boot playbook, o...
Heather_Poulsen
Updated Dec 09, 2025
AMA
asaund28's avatar
asaund28
Copper Contributor
Dec 10, 2025

Hello, 

When reviewing https://support.microsoft.com/en-us/topic/registry-key-updates-for-secure-boot-windows-devices-with-it-managed-updates-a7be69c9-4634-42e1-9ca1-df06f43f360d

Towards the bottom it gets into detail regarding the registry keys and their values. I want to get an idea of what my environment looks like. It states that the WindowsUEFICA2023Capable is not recommended for general use. However, can it be used to query devices in my environment to get an accurate picture of how many devices have the certificate in the DB already? 

Thank you, 

  • Pearl-Angeles's avatar
    Pearl-Angeles
    Icon for Community Manager rankCommunity Manager
    Dec 10, 2025

    Thanks for your question! This was answered by panelists at 25:36 during the live AMA.