Surestart prompt after BIOS update to 1.15

[MikerPlichta]

After applying a BIOS update to 1.15 using HPBIOSUPDREC64.exe and supplying an encrypted password file, most of the time, SureStart complains about changes and prevents bootup. 

"HP Sure Start detected an unauthorized change to Critical BIOS Settings. 

When it times out after 60 seconds, it defaults to entering setup.  If I click OK, it just reboots and returns to the SureStart screen.  

We have to go into the BIOS and turn off SureStart protection before the OS can boot.  This, in turn, requires a random 4 digit code, requiring a person to complete, the opposite of what we want.  After all that, it boots normally.  

This essentially prevents us from updating computer BIOS's as we have nearly 1200 of these.  

[MikerPlichta]

More investigation shows that Surestart was disabled on the factory installed BIOS 1.02.  These computers update their BIOS's with no problem.  Other laptops on BIOS 1.05 or 1.08 with Surestart enabled will not without hand to hand combat.  

The 5 models we are buying this year (Z2 Mini G3, 800 G3 SFF, zbook 15u, g5, zbook 14u G5, Elitebook 850 G5) all have Surestart enabled by default so I'm worried that we'll have more problems down the line.  Some of them don't even have the option to disable it.  

I'm going to open a case with HP.