Windows Secure boot Audit

Purpose

This solution guides to display the status of key certificate and configurations in a dataview that will be needed before the current secure boot certificates expire.

Associated Content

Content	Type	Function
Windows Secure Boot	Role	Role to detect if a Windows agent has secure boot enabled
Windows Telemetry	Role	Role to detect if a Windows agent has telemetry enabled.
Windows DB Certificate	Role	Role to detect if a Windows agent has the updated 2023 DB Certificate.
Windows KEK Certificate	Role	Role to detect if a Windows agent has the updated 2023 KEK Certificate.
Windows Secure Boot Audit [Role]	Dataview	This dataview displays the status of key certificate and configurations that will be needed before the current secure boot certificates expire.

Implementation

• Import below roles:

  • Windows Secure Boot
  • Windows Telemetry
  • Windows DB Certificate
  • Windows KEK Certificate

• Import the dataview Windows Secure Boot Audit [Role]

• The computers will take some time to detect the role and slowly the dataview will start showing the secure boot details.