How Should We Prepare for Upcoming Certificate Expirations in Windows Server?

We realized it’s a bit more complex than we thought. With over 50 different models and more than 20k endpoints, we need to upgrade the BIOS on many devices. While some can be done remotely, others will require manual work, and a few might even need replacements. Plus, we have to get this done before the registry option is available. It’s definitely a huge undertaking!

We’ve taken steps by enabling the registry keys via an Intune configuration and scheduling Dell Command Update to run weekly. This has put us in a good position, and we're almost ready to tackle the updates. Automation helps a lot!

You should definitely be proactive about this. There are tons of threads on this topic since it’s crucial to address these certs before they expire. Ignoring it now could lead to immediate issues down the line, making your systems more vulnerable to attacks. Don’t wait until it’s too late!

I’ve raised this issue to my manager a few times, but it seems they don’t see the urgency since the devices will still boot. I’ve been buried in other tasks, so I’m thinking about doing an inventory to understand the potential impact, but finding time has been tough!