Event details
I have verified that the affected devices have the latest 2023 Secure Boot certificate in the database, Secure Boot is enabled, and TPM is updated and functioning correctly. However, these devices are still showing a "Secure Boot Status = Unknown".
What could be the possible causes for Secure Boot status being reported as Unknown despite meeting all the expected prerequisites? Possible areas to investigate include device reporting, inventory synchronization, certificate validation, firmware compatibility, WMI/MDM data collection, or backend data processing issues.
MicrosoftHi salmankhan1 , Good Morning... Are you using Autopatch reporting or Intune remediations for getting the overall secure boot update status. Can you execute
C:\Windows\SecureBoot\Scripts\Get-SecureBootRolloutStatus.ps1 from Admin powershell prompt and check what is the status reported? This script collects complete Secure Boot status and prints it on console.