Request for EOSL manual Secure Boot certificate update solution — ProBook 440 G5

[anonymous_usern]

Per HP document ish_13070353-13070429-16 ("HP Business PCs – Prepare for new Windows Secure Boot certificates"), HP provides a manual update solution for Commercial PCs outside of service life. I request this solution for my device, which meets the stated requirements:
• Product: HP ProBook 440 G5, baseboard 837D
• BIOS: Q85 Ver. 01.31.00 Rev.A (latest published; released 2025-02-11)
• OS: Windows 10 Enterprise 22H2, enrolled in the Extended Security Updates (ESU) program
• Hardware: meets Windows 11 system requirements (8th-gen Intel Core, TPM 2.0)
• Secure Boot: enabled and healthy
Current certificate state: the Windows UEFI CA 2023 is already applied to the UEFI DB and the boot manager is 2023-signed. The remaining updates — KEK 2023, Microsoft UEFI CA 2023 (3P), and Option ROM UEFI CA 2023 — are blocked by Windows servicing with Event ID 1802, SkipReason KI_7 (known HP firmware issue per Microsoft KB5083344), BucketConfidenceLevel "Temporarily Paused". Since the 450 G5 is not on the supported-platforms BIOS list, no firmware update will lift this block, so the manual EOSL process is the applicable path.
Please advise the procedure and provide the necessary update packages.

[Pallipurath]

Hi @anonymous_usern 

Welcome to the HP Support Community.

Thank you for posting your query.

HP ProBook 440 G5.

For HP Commercial PCs that are outside of service life (EOSL), HP’s Secure Boot certificate document states:

• There is a manual update solution for EOSL commercial PCs.

To use it, Systems must:

• Run Windows 11, Windows 10 IoT LTSC, or Windows 10 with Extended Security Updates (ESU).
• Meet the system requirements for Windows 11 or Windows 10 IoT LTSC.
  • Some product configurations might not be able to receive the updated certificates.
  • EOSL solutions are provided as is with limited testing, and customers assume responsibility for any issues.

HP ProBook 440 G5 meets the ESU requirement you listed, but the actual manual update solution (tools, steps, or package) is not detailed in the available content here.

Next action for your request.

• Confirm your ProBook 440 G5 meets Windows 11 / Windows 10.
• The EOSL manual Secure Boot certificate update assistance:
  • Reference document: “HP Business PCs – Prepare for new Windows Secure Boot certificates.
  • State that your device is an EOSL commercial PC and you are requesting the manual Secure Boot certificate update solution described under “Support for HP Commercial PCs outside of service life.

Click here.

Hope this helps, Please revert if the issue persists.

Take care and have an amazing day!