Event details
DELL
We're in process to update firmware on our "DELL" fleet, while the majority of the devices already have the certificates updated via Intune.
For devices still on old firmware versions, what are the major risks of keeping them with older firmware but with certificates updated?
What's the best option to manage DELL firmware updates via Intune, giving the user the option to delay reboot ?
Updating certificates alone is supported, but the risk of staying on older firmware leaves devices without the latest firmware improvements, security fixes, and recovery capabilities. The recommended Dell patch also automatically updates the certs to match the certs from Windows Update (https://www.dell.com/support/kbdoc/en-us/000390990/secure-boot-transition-faq#General).
A management method through Intune is to deploy and manage Dell Command | Update (DCU) with Intune software deployment, and then subsequently https://www.dell.com/support/manuals/en-us/command-update/admx_rg/settings-control?guid=guid-51412b32-2987-4237-a28f-158d5d0dd83d&lang=en-us, which also provides options for user-controlled reboot deferrals.