Ask Microsoft Anything: Secure Boot - April 23, 2026

Event details

It's time for our fourth Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...

Pearl-Angeles

Updated Apr 15, 2026

AMA

RichP1930

Brass Contributor

Apr 22, 2026

We have Autopatch enabled on our devices and the April update has already been deployed. yet autopatch still reports a large qty of devices needing the cert update. Is autopatch going to push those updates or do we need to configure a setting?

Mabel_Gomes

Microsoft

Apr 23, 2026

You will need an Intune policy do deploy the AvailableUpdates registry key to trigger Secure Boot Update tasks on demand. See details here: Microsoft Intune method of Secure Boot for Windows devices with IT-managed updates - Microsoft Support.