It looks like the new Intune Settings Catalog policies to manage the rollout of the new secure boot certs is not properly working. When trying to deploy the policy it returns an error code 65000, which is a generic error code that intune usually returns for a variety of reasons, sometimes when a pre-req is not met.

I've seen this error in multiple tenants and several different customer environments. Is this something that is on your radar?

This is the policy that I'm testing from Intune: