Request for Manual Secure Boot Certificate Update Script for EOSL Device (HP EliteBook 840 G5)

[IngoTman]

Hello,I am managing an HP EliteBook 840 G5 which has reached its EOSL (End of Service Life) status. I need to update the system manually to support the new Windows Secure Boot 2023 CA certificates, as it will not receive any further automated BIOS updates for this issue.According to HP's official advisory (Document ID: ish_13070353 - "HP Business PCs - Prepare for new Windows Secure Boot certificates"), HP has developed a solution and a manual process/script for out-of-service life commercial systems.The system meets all the mandatory requirements:It is a commercial HP PC (EliteBook 840 G5).It is running a supported operating system with the latest Windows Updates installed.BitLocker will be suspended prior to running the tool.Could a support representative or moderator please provide me with the manual script/remediation package and instructions to update the Secure Boot certificates on this EOSL device?Thank you in advance for your assistance!

[VikramTheGreat]

Hi @IngoTman,

Welcome to the HP Support Community.

Thank you for providing the details and the HP advisory reference.
 

I checked the HP advisory “HP Business PCs – Prepare for new Windows Secure Boot certificates” (Document ID: ish_13070353-13070429-16: HP Business PCs - Prepare for new Windows Secure Boot certificates | HP® Support). The HP EliteBook 840 G5 is not included in the supported product list provided in that advisory.
 

The manual remediation process/script described by HP is intended only for the specific models listed in the advisory. Since the EliteBook 840 G5 is not on that list, we cannot provide or recommend applying that package to this model as an unsupported workaround.
 

In other words, although the EliteBook 840 G5 is a commercial HP system and may meet the general Windows requirements, the model itself must be included in HP's supported list for the Secure Boot certificate remediation to apply.
 

I recommend continuing to use the latest BIOS and Windows updates available for the EliteBook 840 G5 and following any future HP guidance specifically published for this model.

I hope this helps.

Take care and have an amazing day!

[Dric059]

Ist there a solution for Elitebook 840 G5 in between?

is HP working on it?

thx Cédric 

[IngoTman]

No

[ForumGuy]

@Dric059

Yes, there is a solution to manually update your notebook to SecureBoot UEFI CA 2023 certificates.

Follow the guidelines here Solved: Enabling new UEFI 2023 CA certificates in pre-2018 HP comput... - HP Support Community - 962...

You have to be extremely careful if your notebook has HP Sure Start.

You should carefully read Jupitero's post and all of my posts under the name ForumGuy.  Important: Read all posts before taking any action.

I updated my notebook with HP Sure Start to Microsoft UEFI CA2023 certificates and revoked Microsoft PCA 2011 certificate for full protection - though I do not need protection for my notebook since I do not have any valuable information in it.  I did it just for fun.

Hope this helps.