u/Additional-Olive4804

Hi

I am a bit confused about the new microsoft secure boot certificate.

in our environment, almost 94% of devices were showing the up-to-date status in the secure boot report. i am worrying about the confidence level. it has only a few devices shown as "high confidence", while most of the devices show "Under Observation - More Data Needed" with a few with "No Data Observed - Action Required". See image: https://imgur.com/a/W1bqYVZ

My worry is, do we have to do anything? or will microsoft manage itself?

We used Microsoft's recommended method to manage the secure boot certificate transition.

https://techcommunity.microsoft.com/blog/windows-itpro-blog/secure-boot-playbook-for-certificates-expiring-in-2026/4469235#community-4469235-_option1