Secure Boot Certificates

[sec-tester1]

We have a number of systems on V70 Ver. 01.12.00 for 840 14 inch G10 Notebook.  However, they are not updating with Secure Boot.  I saw that there was an HP article about  - Bitlocker Recovery Loops.  Is this version included in this article.  The bios update is from March and not April.  The article says bios updates from early April.  Should this bios version be able to update the secure boot?

[VikramTheGreat]

Hi @sec-tester1,

Welcome to the HP Support Community.
 

Thank you for posting your query. I will be glad to help you.

I reviewed the document you referenced: HP Business PCs - Prepare for new Windows Secure Boot certificates | HP® Support.

Based on the information in that HP document, the BIOS version listed for the HP EliteBook 840 14-inch G10 Notebook PC (V70 family) is 01.10.00. The article specifically identifies the BIOS versions that contain support for the new Windows Secure Boot certificates.

Since your systems are currently on V70 Ver. 01.12.00, that version is newer than the version referenced in the document. In general, one would expect later BIOS releases to include fixes and functionality from earlier supported releases, but I would recommend confirming the behavior rather than assuming the Secure Boot certificate update has been applied successfully.

A few things to check:

• Have you reviewed the complete HP document and verified that all prerequisites listed there have been met?
• Are the systems fully updated with the required Windows updates referenced in the article?
• When you say the systems are "not updating with Secure Boot," are you seeing a specific error message, BitLocker recovery loop, or a failure during certificate deployment?
• Is Secure Boot currently enabled and active in the BIOS on the affected systems?
• Are all affected devices running the same BIOS version (01.12.00) and Windows build?

The BitLocker recovery loop advisory in the document primarily references systems affected during the Secure Boot certificate preparation process. Since your BIOS version (01.12.00) is not the version specifically called out in the table (01.10.00), additional details about the failure would be helpful to determine whether you're seeing the issue described in the article or a different Secure Boot update problem.

Please share:

• The exact Secure Boot update failure message.
• Whether BitLocker recovery is occurring.
• The Windows version/build installed.
• A screenshot of the update result, if available.

Take care and have an amazing day!