Autopatch is one of the ways, and it is not a requirement. You can inventory the devices in your environment using the sample powershell in:

aka.ms/getsecureboot->IT Managed section (on left Nav)

Sample Secure Boot Inventory Data Collection script

Copy and paste this sample script and modify as needed for your environment: The Sample Secure Boot Inventory Data Collection script.