Create an OSD variable for Secure Boot - _SMSTSSecureBootState
Create an OSD variable for Secure Boot called _SMSTSSecureBootState. It should have three values depending on the state and the currently running OS: Enabled, Disabled, NA. This can be used during a TS to determine if Secure Boot should be enabled. Currently, a TS variable has to be defined and set based on if the registry key exists or not.
Updating status to complete.
The opt-in phase of our 2002 release (fast ring) is now live and contains the changes asked for with this item – the new read-only variable _TSSecureBoot
You can opt-in and then download 2002 through their Admin Console now.
Support Information: https://aka.ms/cmcssreleaseinfo
Bruce Sa commented