Skip to main content

Remediate SecureBootCompliance2026

Summary

This script uses the agnostic script Remediate SecureBootCompliance2026 to run the Automate implementation of the PS1 on the Windows 2026 agents, so that it can remediate UEFI Secure Boot compliance for Windows 2026 by ensuring systems have the required 2023 UEFI certificates (KEK and DB), enabling Microsoft-managed certificate updates, and reporting the remediation status. It validates Secure Boot, configures registry keys for automatic updates, monitors servicing status, and logs results.

Dependencies

Sample Run

Sample Run

Global Parameters

NameRequiredExampleDescription
DebugFalseTrue/FalseIf set to True, then it will display the complete log before the script comparator; else, it will return after the script output analysis.
ScriptEngineEnableLoggerFalseTrue/FalseIf set to True, then the script log will show the complete script execution analysis step-by-step; otherwise, the step-by-step analysis will be hidden in the script log.

Output

Changelog

2026-06-19

  • Initial version of the document