PatchManagement: Bulletin MSAF-09072026 secureboot shows 'successful' download but missing installation files

Products

• IT Management Suite

Issue/Introduction

Symptoms

When working with bulletin MSAF-09072026 - Secureboot in ITMS Patch Management, the following behavior is observed:

• PM Import completes successfully.
• The download status shows as 'Successful'.
• No installation files are available or visible when attempting to distribute the patch via a policy.
• The package status may remain 'Missing' or appear empty despite the successful download report.

Cause

This behavior is by design for this specific bulletin. MSAF-09072026 is a detection-only package related to Microsoft's Secure Boot certificate expiration and CA update initiative.

Because it is detection-only, there is no binary payload to download or install. The purpose of this package is to identify devices that may require Secure Boot certificate updates associated with Microsoft's transition to the Windows UEFI CA 2023 certificates.

Resolution

There is no remediation or installation file required for this bulletin.

• Do not attempt to manually download or upload files for this package.
• The package does not deploy Secure Boot certificates or make any changes to the target system.
• Use the results of this detection to identify endpoints that require manual or separate administrative action to update Secure Boot certificates as per Microsoft's transition guidelines.

 

Related Articles

• Distribute and Report On Compliance Regarding Software Updates That Cannot Be Automatically Downloaded From the Vendor