Event details

Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. We recently published the first version of the Secure Boot playbook, o...
Heather_Poulsen
Updated Dec 09, 2025
AMA
BlueSakura's avatar
BlueSakura
Brass Contributor
Dec 10, 2025

Update: Never mind, I was a goof, I was querying the wrong registry key. 

To follow up on asaund28's comment, when I looked at my environment even brand new devices are showing that registry the UEFICA2023Status regkey is NotStarted. Even on brand new devices we've deployed. Does NotStarted also mean the device may not need it? 

or was i querying the wrong registry key?

  • BlueSakura's avatar
    BlueSakura
    Brass Contributor
    Dec 10, 2025

    Thanks for checking, I figured I was querying the wrong key, but I was incorrect. It was the right key.