# Remote OS update for a fleet of devices with secure boot **URL:** \ **Category:** Product support\ **Tags:** security, raspberrypi4, balenacloud\ **Created:** [August 26, 2024, 4:27pm UTC](https://forums.balena.io/t/remote-os-update-for-a-fleet-of-devices-with-secure-boot/371228 "2024-08-26T16:27:48Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![bartvanderhoeven12](https://avatars.discourse-cdn.com/v4/letter/b/13edae/32.png) [@bartvanderhoeven12](https://forums.balena.io/u/bartvanderhoeven12)\ **Post date:** [August 26, 2024, 4:27pm UTC](https://forums.balena.io/t/remote-os-update-for-a-fleet-of-devices-with-secure-boot/371228/1 "2024-08-26T16:27:48Z")
Hi, I found that it is possible to enable secure boot with BalenaOS. Now I’m wondering how this works together with remote updates through balenaCloud. My intention is to provision a fleet of Raspberry Pi CM4 devices with secure boot and disk encryption enabled. My understanding is that every device that uses secure boot has its own key that is used to verify whether a new image, signed with that same key, can be flashed. So it seems to me that when you deploy an OS update to a fleet of devices, you would need to generate signed images for every individual device, so the image matches the stored key. Am I understanding this correctly? And if so, can balenaCloud manage the signing process in some way? Maybe I’m just misunderstanding the provisioning process of secure boot devices. Please let me know! Thank you in advance ---
**Author:** ![mpous](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/mpous/32/4742_2.png) [@mpous](https://forums.balena.io/u/mpous)\ **Post date:** [August 28, 2024, 8:58am UTC](https://forums.balena.io/t/remote-os-update-for-a-fleet-of-devices-with-secure-boot/371228/2 "2024-08-28T08:58:57Z")
Hello @bartvanderhoeven12 thanks for your message and welcome to the balena community! First of all, we are currently working on secure boot for balenaOS on CM4 however it’s not ready yet. We will take care of the signing and the OS updates will work as they do today, you will not need to worry about signing the OS image. Does this solve your questions? ---
**Author:** ![bartvanderhoeven12](https://avatars.discourse-cdn.com/v4/letter/b/13edae/32.png) [@bartvanderhoeven12](https://forums.balena.io/u/bartvanderhoeven12)\ **Post date:** [August 28, 2024, 12:39pm UTC](https://forums.balena.io/t/remote-os-update-for-a-fleet-of-devices-with-secure-boot/371228/3 "2024-08-28T12:39:56Z")
Thank you for the reply, that is exactly what I needed to know! ---
**Author:** ![WestCoastDaz](https://avatars.discourse-cdn.com/v4/letter/w/858c86/32.png) [@WestCoastDaz](https://forums.balena.io/u/WestCoastDaz)\ **Post date:** [September 17, 2024, 6:32pm UTC](https://forums.balena.io/t/remote-os-update-for-a-fleet-of-devices-with-secure-boot/371228/4 "2024-09-17T18:32:17Z")
@mpous Do you have an update on when you expect this do be ready for production? ---
**Author:** ![Hanyu](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/hanyu/32/8548_2.png) [@Hanyu](https://forums.balena.io/u/Hanyu)\ **Post date:** [March 14, 2025, 9:37am UTC](https://forums.balena.io/t/remote-os-update-for-a-fleet-of-devices-with-secure-boot/371228/5 "2025-03-14T09:37:13Z")
I’ts been 8 months. Any news for 2025? ---
**Author:** ![myarmolinsky](https://avatars.discourse-cdn.com/v4/letter/m/9dc877/32.png) [@myarmolinsky](https://forums.balena.io/u/myarmolinsky)\ **Post date:** [March 17, 2025, 7:01pm UTC](https://forums.balena.io/t/remote-os-update-for-a-fleet-of-devices-with-secure-boot/371228/7 "2025-03-17T19:01:21Z")
Hi, we have recently posted an update on the dedicated feature request topic for this feature here: [Enable secure boot and disk encryption for CM4 - #9 by TMH](https://forums.balena.io/t/enable-secure-boot-and-disk-encryption-for-cm4/373392/9) I suggest following that topic for notifications of future updates