Manually installing 2023 secure boot certificates

[jeobsplyr]

I own an HP Elitebook 840 G5, current OS: Win 11, 25h2. Seems my Windows Security application indicates that Device Security has paused secure boot certificates while Microsoft and its partners work towards a resolution of a known issue.  It is my understanding that my device may or may not receive these new certificates, leaving my device at a reduced security state.  I have tried to be proactive knowing this.  I have tried numerous solutions found on the Net, to manually install the certificates.  None have been successful.  Does anyone have any information on how I can solve this issue?  Or do I have to reserve myself to the fact these certificates may never be available for my device? Any help would be greatly appreciated.

[Venom21]

Your laptop is from 2018 and I don't think it will get new secure boot update unless Microsoft introduce something else for older hardware. Which is unlikely.  This Link provides info on what will happen when Secure Boot Certificates expire.

You may have to ignore that secure boot error. 

[jeobsplyr]

Thank you for responding. Your response is like much of what I have read. But, do you know any way I could safely manually install the 2023 secure boot certificates on my hp elitebook 840 g5? Like I said, I am not real versed on pc technical issues, but, with straightforward information/instructions, I feel that I could perform any necessary tasks. Thanks again.

[Venom21]

We can’t provide detailed step‑by‑step instructions for manually installing the 2023 Secure Boot certificates on an HP EliteBook 840 G5.Adding or modifying Secure Boot certificates manually is an advanced operation and can be risky. If something goes wrong, it may cause issues such as:

- The system failing to boot
- Secure Boot becoming disabled or unstable
- The need to reset BIOS/UEFI settings or reflash the BIOS

Officially, HP does not recommend manually enrolling Secure Boot certificates on older platforms like the EliteBook 840 G5. The supported approach is to:

- Keep your BIOS and Windows fully updated
- Use any update package or guidance provided directly by HP Support for your specific model

If you still want to explore manual methods, you can search for guides on YouTube and technical communities (for example, HP forums, Microsoft Q&A, or reddit, Linux/UEFI communities). Please understand that:

- These methods are unofficial
- You would be doing this at your own risk
- HP does not recommend or support this approach

If maintaining full system stability and support is important to you, the safest option is to follow HP’s official guidance rather than attempting manual certificate installation.