Certificate Deployment via Controlled Feature Rollout
- Policy ID
- SecureBoot_MicrosoftUpdateManagedOptIn
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2012, Windows 8 or Windows RT
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Secure Boot
Description
For enterprises that desire assistance in deploying the new Secure Boot certificates to their devices, this setting can be enabled.
Note: The device must be sending required diagnostic data to Microsoft to use this feature.
For more information, see: https://aka.ms/GetSecureBoot
Registry
ComputerHKEY_LOCAL_MACHINE
- MicrosoftUpdateManagedOptInREG_DWORD