Event details
Could you talk about the device's local Secure Boot enforcement mode (Strict, Standard, Audit etc.) please? Someone in our team mentioned it today - that if devices are in Strict mode they won't boot without the new certificate? I've not seen this mentioned in the MS docs I've read. Thank you 🙂
- Pearl-Angeles
Community Manager
Thanks for your participation in the AMA! Panelists covered this topic at around 9:10.
Posting the link from the footnote (windowsforum) would have been more useful than a screenshot of Copilot, as it would allow to see the original discussion and what actually was talked there. And do not forget that copilot can be wrong and often is when you use terms that are not official (like Secure Boot Strict Mode - There is Setup Mode and User Mode, but no Strict Mode in Secure Boot specification. Some UEFI also have "Custom mode" vs. "Vendor mode" which refers whether to use platform keys from the UEFI vendor or your own ones. But no Strict Mode).
