On the Intune Secure Boot Status Page - https://intune.microsoft.com/#view/Microsoft_EMM_ModernWorkplace/SecureBootReport.ReactView - all of my 900+ devices are showing as Certficate Status = "not applicable".

3rd party scripts are helping to confirm that updated certs are in place on my devices, but I would like to see the official status page working properly.

What are the pre-requsite factors needed in order to make this report on our devices provide accurate statuses on my laptops?