Hello everyone!
To make it predictable, measurable, and safe, I published an Intune Remediation to help the community handle Microsoft’s Secure Boot certificate update in a clean, repeatable way. 🚀 

You can also adapt it for SCCM.

What you get (ready to use):
✅ Detection + Remediation scripts
✅ Idempotent + guarded logic (no pointless re-triggers)
✅ Clear outputs for easier reporting/troubleshooting
✅ A short README with usage notes + operational tips
✅ Can handle “In Progress” and pending reboot (AvailableUpdates = 0x4100) states

Secure Boot remediation (README) 👉 https://github.com/SimoneTermine/MicrosoftIntune/tree/main/scripts/00-Devices/Remediations/SecureBoot_UpdateCerts