Skip to main content

Secure Boot CA2023 Autofix Targets

Summary

This monitor identifies Windows devices that require Secure Boot CA2023 remediation and are eligible for automated remediation.

It uses audit data stored in the pvl_boot_environment_details custom table to find devices where Secure Boot is enabled but the required 2023 UEFI certificates are not yet enrolled.

The monitor triggers the Remediate SecureBootCompliance2026 script through the △ Custom - Autofix - Secure Boot CA2023 Autofix Targets alert template.

When the monitor issues the remediation, the script reports the outcome as a ConnectWise ticket according to its ticketing configuration. See the ticketing section of the Remediate SecureBootCompliance2026 document for the tickets your board can receive.

Dependencies

Suppression

The monitor uses the script state written by the Remediate SecureBootCompliance2026 script to avoid repeatedly targeting the same device.

Script State VariableValueEffect
Boot_Environment_RemediationAppliedExcludes the device from this monitor.

If remediation needs to be run again on a device, remove or reset the Boot_Environment_Remediation script state for that computer.

The script state is written after a successful run. If a run fails, the state is not written and the device stays eligible, so the monitor retries it on a later cycle.

Target

Global

Alert Template

△ Custom - Autofix - Secure Boot CA2023 Autofix Targets

This alert template executes the Remediate SecureBootCompliance2026 script against devices detected by the monitor.

Changelog

2026-08-04

  • Initial version of the document.