Create an OSD variable for Secure Boot - _SMSTSSecureBootState
Create an OSD variable for Secure Boot called _SMSTSSecureBootState. It should have three values depending on the state and the currently running OS: Enabled, Disabled, NA. This can be used during a TS to determine if Secure Boot should be enabled. Currently, a TS variable has to be defined and set based on if the registry key exists or not.
Updating status to started – see https://docs.microsoft.com/en-us/configmgr/core/understand/find-help#send-a-suggestion for an explanation of each status value.
Our 1912 Technical preview is now release.
For more information
Bruce Sa commented