Secure Boot Certificates Update

[Paul_Tikkanen]

You are correct.

Your PC will get every other W11 update but one that allows you to go to the next build, since the PC does not meet all of Microsoft's minimum W11 Intel hardware requirements of an Intel 8th gen core processor or newer, a TPM 2.0 security device, and an OS installed in UEFI mode with secure boot enabled.

If your PC's TPM chip is still on TPM version 1.2 as many Zbook G3's were when they came to market, you can upgrade the firmware to 2.0.

Let me know if you need info on that.

It is not too difficult to do.

I ran the update on my HP Elitedesk 800 G3 Desktop Mini PC which had a TPM 1.2 security device, and the only shortcoming was its Intel i5-6500T processor.

[Bobcat4363]

Thank you for the help with Microsoft's enablement package update process. Before I upgraded my unsupported platform to Windows 11 Pro a few years ago, I ensured that Secure Boot was ON, UEFI mode was ON, and TPM was 2.0 leaving just my processor as the last piece blocking some future updates. At Windows 11 version 25H2 and the latest build, I followed your suggestion to download the file and manually install KB5121794. Everything went flawlessly, and I am at 26H2.

[Paul_Tikkanen]

Anytime. 

Happy to have been of assistance. 

Glad your PCs TPM 2.0 device is up to date, and W11 26H2 is installed