Event details
We have verified that all of our end user systems have the required BIOS updates. All of our end user systems receive their updates from Windows Update for Business (via Intune). We have also verified that none of our systems are getting the required Secure Boot updates. Will our systems get the required updates via Windows Update for Business automatically before the June expiration date?
MicrosoftFor client devices, the High Confidence updates began rolling out in January and will continue over the coming months. We expect that most client devices will receive the new Secure Boot certificates through this process. If you have opted in to Microsoft Update Managed updates and have enabled diagnostic data, those updates are also rolling out over the coming months.
It is important to monitor the status of devices in your environment to ensure they are receiving updates. Pay close attention to Event 1801, which may indicate that a device needs attention.
Server devices and other non‑client devices such as IoT systems require customer‑managed deployment. For guidance on how to update these devices, see Secure Boot Certificate updates:
Secure Boot Certificate updates: Guidance for IT professionals and organizations.
Arden - Microsoft