Event details
I tried running the Get-SecureBootRolloutStatus.ps1 it errors out that rollout has not been started. It seems it is relying on the other rollout PowerShell. What if I am just testing a single or a few machines? I just want to get the current status of the devices; I found that the Detect-SecureBootCertUpdateStatus.ps1 can be run without needing to do anything else to get status on a device or devices.
Prabhakar_MSFTMicrosoft
Hello Cliff_Hughes​ , Get-SecureBootRolloutStatus.PS1 requires that you have initiated the Secure boot certificate roll out in your enterprise. You are correct that Detect-SecureBootCertUpdateStatus.ps1 can be run independently. though we included all scripts in both client and server editions of windows, not all scripts are applicable. On Client devices, you just need to run Detect-SecureBootCertUpdateStatus.ps1 for the individual device status. At enterprise level, you will need to configure the rollout or aggregation reporting that will help get the overall status in an HTML report.
More details can be found at Sample Secure Boot E2E Automation Guide | Microsoft Support . This guide explains how to deploy the scripts for monitoring and rollout in your enterprise.