Event details

It's time for our second Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. If you've already bookmarked Secure Boot play...
Heather_Poulsen
Updated Feb 12, 2026
AMA
Dom_Cote's avatar
Dom_Cote
Iron Contributor
Jan 28, 2026

NICE! You may have saved us a LOT of work my friend!

I'll try this on M365 managed PCs and report back how your script works or can/must be adapted. (if I find time)

Dom_Cote's avatar
Dom_Cote
Iron Contributor
Jan 28, 2026

OK - forget it. 🤣
The bug mentioned here Microsoft Intune method of Secure Boot for Windows devices with IT-managed updates - Microsoft Support on Windows Pro (Business) devices is real. 🙄

All device in our test ring are stuck on the dreaded Intune error 65000 (unspecific licensing issue), none have attempted to update yet. (How come all our VMs are already updated? 🤔)

Until Microsoft gets this to work on Pro devices, we'll have to wait.

Fun fact: Since the bug lies with Intune, no amount of local log or registry crunching will give you any hint at what's going on.

  • Chris_Cramp's avatar
    Chris_Cramp
    Brass Contributor
    Jan 29, 2026

    Dom_Cote​ 

    That's a +1 for me 

    Maybe I am luckier than you 2 out of the 54 client computers I have managed under Intune have Succeeded in the Secure Boot Certificate policy I created all the rest have the 65000 error. Let's hope Microsoft fixes this issue soon😔

    • Dom_Cote's avatar
      Dom_Cote
      Iron Contributor
      Jan 29, 2026

      I'm not worried yet tbh. We still have a few months time. But yeah - it'd be great to get some clarity on when we can expect this to start working. Because there will always be a few stubborn devices that need manual attention, as we know.