HP Wolf Security issues with updates, Console, Event Viewer errors logged

[MooseSquirrel1]

Always fails download of cloud recovery updates and doing for a long time.

Recently more issues related to the console. "Unsupported modules detected" View Details, Please update to the latest version of the HP Wolf Secujrity Console in order to safely load the followiing modules(s)

HP.SecurityDashboard.KrytponModules

I went to support and reinstalled all parts related to security and it did not help. Was running 25H2 at that point. System updated overnight a few days ago to 26H2. Same condition. 

Many related errors in event viewer.

A service that is part of HP Security Update Service was not found in the current machine.
HP Security Update Service, Service: SecurityUpdateService. (4004)

HP Sure Recover: Failed download of HP recovery image files.
Exception thrown with RecoveryError=0xC3F68000 (108)

HP Sure Recover: Failed download of recovery agent files.
Exception thrown with RecoveryError=0xC3F62000 (102)

Warning,  This PC is not compliant due to this list of errors:
>HP Security Update Service
Error in: SecurityUpdateService
WatchedServiceNotInstalled  (3422)

HPSureRun Exception
Type: Exception
Message: No HpSrComp drivers found in driver store.
at HP.HEP.PersistDriver.Controller.FindPersistDirInStore()
at HP.HEP.PersistDriver.Controller.GetVersionInStore()
at HP.HEP.PersistDriver.Controller.InstallFromPackageDir()
at HP.HEP.PersistDriver.Controller.Install()
at HP.HEP.PersistDriver.Controller.CleanInstall()
at HP.HEP.PersistDriver.Controller.ResetWatchedItem(Boolean alreadyDisposed)
at HP.HEP.PersistDriver.Controller.get_WatchedItemMem()
at HP.HEP.PersistDriver.WatchedItem..ctor()  (0)

At a loss of how to proceed since reinstalling security sections from support did not help. All updates installed.

[Pallipurath]

Hi @MooseSquirrel1 

Welcome to the HP Support Community.

Thank you for providing the specific Event Viewer errors and console logs. The issues you are experiencing are caused by two root problems operating in tandem:

1. Storage Partition Missing/Inaccessible for HP Sure Recover:The error codes 0xC3F68000 (SrImagePartitionNotAvailable) and 0xC3F62000 (SrAedPartitionNotAvailable) indicate that HP Sure Recover cannot locate or access the local recovery partitions (SR_IMAGE and SR_AED) required to store agent and recovery image files. This typically occurs when drive partitions have been altered, corrupted, or encrypted by BitLocker without proper GPT attributes during major Windows upgrades.
2. Driver Store & Component Registration Mismatch:The Event Viewer logs (SecurityUpdateService 4004, WatchedServiceNotInstalled 3422, and HPSureRun Exception: No HpSrComp drivers found in driver store) show that essential low-level persistence drivers (HpSrComp) and watching services are absent from the Windows driver store. Reinstalling security components individually without following the mandatory SoftPaq dependency order fails to properly re-register these core drivers and causes the console to flag unsupported Krypton modules (HP.SecurityDashboard.KryptonModules).

Clear Drive Partition Locks (If BitLocker or Partition Error Exists)

1. Open an elevated Command Prompt (Run as Administrator).
2. Run diskpart and list volumes using list volume.
3. If SR_AED or SR_IMAGE partitions exist in an invalid state, select the volume (select volume X) and run del vol override to clear corrupted attributes so HP Sure Recover can re-partition during boot.
4. Ensure HP Sure Recover is enabled in BIOS (f10 setup > Advanced > Sure Recover).

Perform the Ordered Clean SoftPaq Reinstallation

To register the missing HpSrComp drivers in the driver store and restore all dashboard tiles, install the following SoftPaqs in this exact sequence:

1. Install HP Wolf Security Console SoftPaq:
   • Version: 11.0.18.218 Rev A (or latest available)
   • Purpose: Establishes the core Wolf Security Dashboard framework.
2. Install HP Wolf Security for Business SoftPaq:
   • Version: 4.4.2.1075 Rev A (or latest available).
   • Purpose: Installs Sure Click and Sure Sense modules (Malware Prevention & Threat Containment).
3. Install HP Sure Recover SoftPaq:
   • Version: 10.1.11.28 Rev A (or latest available).
   • Purpose: Restores the OS Resiliency module/tile and recovery download agent files.
4. Install HP Sure Run SoftPaq:
   • Version: 5.0.3.29 Rev A (or latest available).
   • Purpose: Registers the missing HpSrComp driver into the Windows driver store, restores SecurityUpdateService, and resolves Application Persistence errors.

Re-Enable Cloud Recovery Updates

1. Open HP Wolf Security Console.
2. Click the OS Resiliency tile.
3. Turn on Check for OS Image and Agent Updates.
4. Turn on Enable Windows OS upgrades to the next licensed version.
5. Restart the computer to let the services initialize and synchronize

HP Sure Recover Administrator Guide

HP Business PCs – Upgrade to Windows 11 using HP Sure Recover 

HP Commercial Desktops, Notebooks, and Mobile Workstations – Wolf Pro Security Management Tile Missi...

Take care and have an amazing day!

[MooseSquirrel1]

Thanks so much. I am having a bit of difficulty with your advice.

Checking my drive which was setup with a HP Recovery stick when it was 11 pro I find the following. And I foolishly added another partition much later and would like to add it back to the C partition but it is after another partition so I just leave it as 😧

Partition 1      System       100MB   hidden,      Volume 3, Ltr blank, Label blank, FAT32, healthy,

Partition 2      Reserved     16MB   hidden, no volume associated

Partition 3      Primary       898GB  hidden no,  Volume 1, Ltr C, Label blank, NTFS, healthy, boot

Partition 4      Recovery  1161MB hidden,       Volume 4, Ltr blank, Label blank, NTFS, healthy

Partition 5      Primary           31GB  hidden no, Volume 2, Ltr D, Label New Volume, NTFS, Healthy

Should partitions with labels  SR_AED or SR_IMAGE  appear having used the HP Cloud Recovery tool?

Does this look correct?

I do remember there was an issue that required expanding the recovery partition because of MS but nothing to do with labeling.

How much space is required for the needed partition? I ask because to download it to USB stick requires over 14 GB on the last one I made.  Is it the one labeled Recovery? 

I do have a FTP address in the bios that is pointed to for Recovery Agent.

[Pallipurath]

Hi @MooseSquirrel1 

Thank you for responding.

HP Sure Recover Partition-Based Recovery and Enhanced Local Storage specifically require a dedicated 32 GB storage area on local drives greater than 256 GB to retain an offline copy of the recovery image. When local recovery or scheduled background updates are actively provisioned, the system uses the designated SR_AED partition for the recovery agent and the SR_IMAGE partition for the OS image. Consequently, deleting or merging this 31 GB partition clears the local recovery cache, disabling offline local drive reimaging and forcing the system to rely on a network-based recovery if the operating system fails.

Should SR_AED or SR_IMAGE partitions appear?

No. These partitions do not appear on a standard drive restored using the HP Cloud Recovery USB tool. Those specific partition labels are created only if local Partition-Based Recovery or scheduled background recovery tasks are actively configured on the system.

 Does your partition layout look correct?

Yes, your drive layout is completely normal and correct:

• Partition 1 (100 MB FAT32, System): EFI boot partition required by Windows.
• Partition 2 (16 MB, Reserved): Microsoft Reserved partition.
• Partition 3 (898 GB, C:): Your main Windows OS drive.
• Partition 4 (1161 MB / ~1.16 GB, Recovery): Standard Windows Recovery Environment (WinRE) for basic boot repair.
• Partition 5 (31 GB, D:): The extra partition you manually created.

Which partition is the 14 GB download?

• The ~1.16 GB "Recovery" partition is NOT the 14 GB download. It only holds minimal Windows repair tools.
• The 14+ GB download is the full HP operating system image stored on your USB stick.
• Local disk requirement: If HP Sure Recover's local Partition-Based Recovery is enabled to cache the image on your internal hard drive, it requires 32 GB of space on drives over 256 GB.

What is the BIOS FTP address for?

The FTP/HTTP address in your BIOS is used by HP Sure Recover Network-Based Recovery to download recovery files directly over the network when you press F11 at startup.

How to merge your 31 GB (D:) partition back into C:

Since 😧 is located right after C: and Partition 4, you can safely merge its space back into C: using Windows:

• Right-click the Start button and select Disk Management.
• Right-click Volume 2 (D:) and select Delete Volume (ensure any files on 😧 are backed up first).
• Right-click your C: drive and select Extend Volume, then click Next through the wizard to reclaim the 31 GB.

"HP Business PCs – Reinstalling Windows using HP Sure Recover (f11)"

"HP Sure Recover Administrator Guide" 

Please follow the link for detailed information.

Have a good day.