Secure Boot SBAT Failure – Event 1796 / 0x800700C1

[That1_Guy]

I am experiencing a persistent Secure Boot / SBAT firmware update problem on an HP Pavilion Desktop TP01-1050.

System:

• HP Pavilion Desktop TP01-1050
• Product number: 13205AA
• System board: 8767
• Intel Core i5-10400
• Windows 11 25H2, OS Build 26200.6581
• BIOS: F.54

The computer originally became unresponsive and, after restarting, displayed:

"Secure Boot Violation — Invalid signature detected. Check Secure Boot Policy in Setup."

After selecting OK, it displayed:

"Boot Device Not Found — Please install an operating system on your hard disk. Hard Disk – (3F0)."

HP hardware diagnostics were run and the Samsung MZVLQ512HBLU-00BH1 SSD passed SMART, SSD Wear, and Short DST tests.

I discovered that disabling Secure Boot allows Windows to boot normally.

The Windows UEFI CA 2023 certificate is not present in the firmware Secure Boot DB.

Windows Secure Boot servicing currently reports:

WindowsUEFICA2023Capable: 0
ConfidenceLevel: High Confidence
UEFICA2023Status: InProgress
UEFICA2023Error: 0
UEFICA2023ErrorEvent: 0

The Secure-Boot-Update scheduled task exists and is enabled.

However, Windows repeatedly generates Microsoft-Windows-TPM-WMI Event ID 1796 approximately every 12 hours:

"The Secure Boot update failed to update SBAT with error Unknown HResult Error code: 0x800700C1."

This has been occurring repeatedly since at least September 23, 2026.

BIOS is already F.54.

Question:

Is there a known HP BIOS/UEFI compatibility issue with SBAT updates on system board 8767?

Is there an HP-supported firmware update, recovery utility, or other procedure that resolves Event 1796 / 0x800700C1?

I am currently leaving Secure Boot disabled because enabling it results in the Secure Boot Violation / 3F0 boot failure.

I have not cleared the Secure Boot keys or TPM.

[Pallipurath]

Hi @That1_Guy 

Welcome to the HP Support Community.

Thank you for posting your query.

I understand your concern regarding the recurring Event ID 1796 / 0x800700C1 and the fact that enabling Secure Boot results in the “Invalid signature detected” message followed by the 3F0 Boot Device Not Found error.

Since the system is currently on BIOS F.54 and Windows boots normally when Secure Boot is disabled, I would not recommend changing the Secure Boot keys or performing a BIOS recovery at this stage. The reported behavior appears to require further investigation of the Secure Boot/SBAT firmware update process.

Please try the following steps:

1. Keep Secure Boot disabled temporarily

• Since enabling Secure Boot currently prevents Windows from booting, leave it disabled while performing the Windows-side checks below.

2. Confirm the system is using UEFI mode

• Press Windows + R.
• Type msinfo32 and press Enter.
• Check BIOS Mode.
• Confirm that it shows UEFI.
• Please also check Secure Boot State and note the value shown.

3. Install all available Windows Updates

• Go to Settings > Windows Update.
• Select Check for updates.
• Install all available updates.
• Restart the computer.
• Check whether Event ID 1796 is generated again.

4. Check the Secure Boot servicing status

• Open Windows PowerShell/Terminal as Administrator and run:
• Confirm-SecureBootUEFI
• Then check the Secure Boot status again after Windows has completed its pending updates.

5. Run HP PC Hardware Diagnostics

• Shut down the computer.
• Turn it on and repeatedly press F2.
• Select System Tests.
• Run the available Extensive Test.
• If any failure is reported, note the Failure ID and provide it 
• Since the SSD diagnostics have already passed, please retain those results as well.

6. Check for a newer HP BIOS

• Because the system is already running BIOS F.54, check the HP support page for the exact product number 13205AA and system board 8767. If no newer BIOS is available, do not downgrade or repeatedly reinstall the same BIOS solely to address Event 1796.

Click Here for More information.

Take care and have an amazing day!

[That1_Guy]

Update / additional diagnostics

I have completed the additional troubleshooting and have more information about the failure.

HP Pavilion Desktop TP01-1050
Product: 13205AA
System board: 8767
BIOS: F.54
Windows 11 Pro 25H2
BIOS Mode: UEFI
Secure Boot: currently disabled
TPM: enabled
BitLocker: fully decrypted

The Samsung MZVLQ512HBLU-00BH1 SSD passed the HP SMART, Wear and Short DST tests.

The Microsoft Secure-Boot-Update scheduled task has been recreated and is enabled.

The Windows Secure Boot update files are present under C:\Windows\System32\SecureBootUpdates, including the 2023 DB update files and SbatLevel.txt.

However, Windows repeatedly generates Event ID 1796 with the following error:

The Secure Boot update failed to update SBAT with error Unknown HResult Error code: 0x800700C1.

This failure has continued through October 8, 2026.

The Secure Boot servicing registry currently shows UEFICA2023Status as NotStarted and AvailableUpdates as 0.

The Windows UEFI CA 2023 certificate is still not present in the firmware Secure Boot DB.

When Secure Boot is enabled on this system, the computer previously produced "Secure Boot Violation - Invalid signature detected" followed by "Boot Device Not Found - Hard Disk (3F0)."

Disabling Secure Boot allows Windows to boot normally.

BIOS F.54 is currently installed and appears to be the latest BIOS available for this system.

Can HP confirm whether system board 8767 and BIOS F.54 have a known compatibility issue with the Microsoft SBAT update resulting in Event 1796 and error 0x800700C1?

If so, is there an HP-supported firmware update or other procedure for this platform?

I am leaving Secure Boot disabled and have not cleared the Secure Boot keys or TPM.

[Pallipurath]

Hi @That1_Guy 

Thank you for responding.

Since the issue persists with BIOS F.54 and Windows continues to report Event ID 1796 with error code 0x800700C1, despite the Secure Boot update files and scheduled task being present, further investigation may be required to determine whether the issue is related to the system firmware or its interaction with Windows Secure Boot servicing.

As enabling Secure Boot previously resulted in an “Invalid signature detected” message followed by a Boot Device Not Found (3F0) error. I would request you to please share me the Serial Number of the unit via private message.

To access your private message, just click the little blue envelope icon on the upper right corner of your HP Community profile, next to your profile name. Alternatively, you can click on this link.  

You can use this link as well:  

Private Messages - HP Support Community 

Have a good day.