Request for Manual Secure Boot Certificate Update Script for EOSL Device (HP EliteBook 840 G5)

[Dric059]

Where can I get the official  "EOSL_Products_package_V5.zip" if I am a private person that bough the laptop from my previous company?

[VikramTheGreat]

Hi @Dric059,

Welcome to the HP Support Community.

The EOSL_Products_package_V5.zip file is not available for the HP EliteBook 840 G5, and HP does not provide this ZIP file through the Community.

Since no supported download is listed for this model, there is no package we can provide for manual installation. Please do not download the file from an unofficial or third-party source.

The HP EliteBook 840 G5 is not listed among the models receiving the standard BIOS update referenced in the HP document. For commercial PCs that have reached End of Service Life and require the manual Secure Boot certificate process, HP’s guidance is to contact HP for assistance. HP also notes that some configurations might not be able to receive the updated certificates.

Please refer to HP Business PCs - Prepare for new Windows Secure Boot certificates | HP® Support and review the section Support for HP Commercial PCs outside of service life.

Take care and have an amazing day!

[Dric059]

I got some one on the phone for HP assistance  and receive that email without any links. However there is no link in the email and I cannot find anything about this file and my previous  IT colleagues also nothing on its business account.

Dear Cedric Cheminay,

I hope you are doing well. For EOSL products that do not display the SBKPFV3 value, HP has developed a PowerShell script that adds the 2023 certificates to the KEK and db databases outside the Microsoft process.

Before proceeding, please be aware that you assume full responsibility for any issues that may arise from using this solution. Updates for EOSL products are provided “AS IS,” have limited testing, and may not work as intended. It is recommended to perform phased or ring testing before deploying this solution broadly.

To begin, please confirm the following:

1. Your computer is not supported with a BIOS update on this topic by checking the supported products list on the public article. If your computer is supported, please follow the instructions provided there instead of using this script.
2. Your computer is up to date with the latest BIOS version.
3. BitLocker is suspended and remains suspended throughout the entire process.

Please download the following files:

- EOSL_Products_Package_V5.zip  

- MS 2023 Secure Boot Certificates – EOSL Instructions.pdf

After downloading, unzip and extract the EOSL_Products_Package_V5.zip file to a temporary folder. The package contains multiple files and subfolders.

Next, locate and run the enroll-sb-vars.ps1 script in a PowerShell window with administrator privileges. The script supports two optional parameters:

- MS3PUC: Adds third-party Secure Boot certificates.

- MSUpdBootMgr: Initiates the process allowing Microsoft to update the Windows Boot Manager file.

Before adding certificates, the script will verify that all prerequisites are met. It will provide output on each step of the update process and notify you of the success or failure of adding the 2023 certificates.

After running the script, please reboot your computer. Some systems may require two reboots for the changes to take effect.

For additional guidance and troubleshooting, please refer to the ReadMe file or the Customer Instructions PDF included in the package.

If you have any questions or need further assistance, please feel free to reach out.

Best regards,  

HPservicessupport

[VikramTheGreat]

Hi @Dric059,
 

For the HP EliteBook 840 G5, there is no publicly available download option for the EOSL_Products_Package_V5.zip file or the referenced PowerShell script on the product’s driver page. The files mentioned in the email are not included as downloadable attachments or links.
 

Please review the following HP document sharing it again: HP Business PCs - Prepare for new Windows Secure Boot certificates | HP® Support
 

The Frequently Asked Questions section explains the guidance referenced by HP Phone Support, including information for products that have reached End of Service Life and do not receive a BIOS update for this topic.
 

Because access to the EOSL package and assistance with the manual certificate-update script are limited through the HP Support Community, please contact HP Phone Support again and reference the existing support case and email. Ask the support representative to confirm whether the package can be supplied for the HP EliteBook 840 G5 and to provide the missing files or an approved download method.
 

For security, do not download or run this package from an unofficial or third-party source.

This might require one-on-one interaction to fix the issue via remote assistance.

To contact us, click here: https://support.hp.com/us-en/contact.

Step 1: Sign in to the HP Support page using your HP account or create a new account by clicking on “Create Account.”

Step 2: Enter the device serial number, select the product, and click on “other” from the options.

Step 3: Click on “Continue to contact options,” and choose your country/region and language.

Step 4: The support options will now populate based on the warranty status of your device.

Please feel free to contact us here anytime you need any further assistance.
 

Have a great day!

[Dric059]

I did already, I got that email and erase my case. How often will I need to call!