Secure Boot CA2023 Autofix Targets
Summary
This monitor identifies Windows devices that require Secure Boot CA2023 remediation and are eligible for automated remediation.
It uses audit data stored in the pvl_boot_environment_details custom table to find devices where Secure Boot is enabled but the required 2023 UEFI certificates are not yet enrolled.
The monitor triggers the Remediate SecureBootCompliance2026 script through the △ Custom - Autofix - Secure Boot CA2023 Autofix Targets alert template.
When the monitor issues the remediation, the script reports the outcome as a ConnectWise ticket according to its ticketing configuration. See the ticketing section of the Remediate SecureBootCompliance2026 document for the tickets your board can receive.
Dependencies
- Custom Table: pvl_boot_environment_details
- Script: Boot Environment Audit
- Dataview: Boot Environment Audit
- Script: Remediate SecureBootCompliance2026
- Solution: Boot Environment Audit
Suppression
The monitor uses the script state written by the Remediate SecureBootCompliance2026 script to avoid repeatedly targeting the same device.
| Script State Variable | Value | Effect |
|---|---|---|
Boot_Environment_Remediation | Applied | Excludes the device from this monitor. |
If remediation needs to be run again on a device, remove or reset the Boot_Environment_Remediation script state for that computer.
The script state is written after a successful run. If a run fails, the state is not written and the device stays eligible, so the monitor retries it on a later cycle.
Target
Global
Alert Template
△ Custom - Autofix - Secure Boot CA2023 Autofix Targets
This alert template executes the Remediate SecureBootCompliance2026 script against devices detected by the monitor.
Changelog
2026-08-04
- Initial version of the document.