Event details
The Intune-Policy still cannot be used, as I get an error on most of the clients: "Enable Secureboot Certificate Updates - Error 65000".
All of the clients are EntraOnly-Joined Win11 Enterprise 24h2/25h2. Windows is activated with M365 License. Will you fix this policy before June 26?
MicrosoftHi SCCM_Terror,
we recently discovered an issue with Windows 11 23H2 Enterprise-Pro where you would still get this error. A fix for this is planned for the April updates. It should be working with Windows 11 24H2 and 25H2.
Sorry for the inconvenience.
Arden
Still seeing the 65000 error on Windows 11 25H2. Followed MS doc
https://support.microsoft.com/en-us/topic/microsoft-intune-method-of-secure-boot-for-windows-devices-with-it-managed-updates-1c4cf9a3-8983-40c8-924f-44d9c959889d but issue remains.
Resolution
The Microsoft Intune licensing service was updated on January 27, 2026, to allow Secure Boot configuration settings deployment on Pro editions of Windows 10 and Windows 11. Devices that received their Microsoft Intune license before this date will need to renew their license to resolve this issue. Licenses are automatically renewed every month, so this issue will be resolved for all devices by February 27, 2026. To resolve this issue immediately, you can renew the license on your device by running the following commands on the user's behalf (under the user's context):
- ClipDLS.exe removesubscription
- ClipRenew.exe
