Event details
How can I easily check which devices got the updates and which not? Is it clear that newer hardware gets the update and older hardware don't get the updates?
There are PowerShell scripts posted here to check the UEFI variables, or you can check for the event ids mentioned in the webinar.
It does not need to be older hardware that does not get the updates. It depends on how well the UEFI has been programmed by the vendor and how closely they worked with Microsoft to submit the new KEK updates.
And for the confidence buckets in the LCU it depends on how common your device is and if anyone using it has telemetry enabled.
On the other hand,, everything that is Logo certified for Windows 11 25H2 should already include the certificates.
