Event details
if I build a new device how can I ensure the image I am using has the latest updates "without needing to set availableupdates 0x5944 key along with needing to run scheduled task "
availableupdates key will not change what is on your disk (which would be deployed by your image). It will change your firmware configuration.
When you build a new device and the device is Logo certified for Win11 25H2, it has to have the new certificates in the firmware already. When you are building a "new device" from old already used hardware, it might have the certificates already from its past use.
Still availablaupdates key is only needed if your device is not yet in the high confidence list. Otherwise it will get the updates even if the key is still set to 0x0.
And maybe your image deployment software has (or will get) an option to deploy the certificates to UEFI as well when deploying the image (fwupd for Linux can do it, for example, and it is also possible from WinPE by a script).
