After BIOS update to F.34 Rev A on HP ENVY Curved All-in-One - 34-b010

[Rew452]

Ya, I saw some of the same but was for specific Intel products.

Thanks

[Rew452]

OK,
After doing some research I can say SGX was enabled on my previous HP firmware BIOS (v.33) as I have Cyberlink PowerDVD which was installed back in June 2019 and has work for playback of Bluray's and DVD's. This requires SGX support.
On 01/06/2020 Windows Update installed the following update:

As usual I checked my event log to see if all went well and discovered this critical error. After this I went to HP and downloaded v.34 directly just in case there was a problem even though the update installation showed it was from HP and it was indeed v.34 BIOS and it installed without errors.
I have tried to contact HP but since my computer is not under warranty, they won't talk unless I pay their $99 for a call.
It is rather obvious that HP made changes to security from their own notes on the v.34 BIOS release.
If there is need for a software update neither MS or HP has posted it.

The point being if you get this update either from MS or HP Support Assistant, I would recommend HOLD OFF, as there seems to be issues.
So far I have reported it here and on MS Feedbak Hub.
Prior to this BIOS update I had no Critical events.

[Rew452]

Found a reference this morning that Intel  issued a fix early in December for the Plundervolt SGX Flaw!

I wonder if this flaw is why HP issued the v.34 BIOS update, also dated early December and said to address Security in it's notes ????

Rew

[Rew452]

It's interesting after almost a week no one from HP has bothered to reply to this thread as it has the potential to be a big Security concern.

The loss of Software Guard Extensions(SGX) support after a HP BIOS update seems to me, should be of major concern to HP.

Especially since many people don't check their Event logs and would not necessarily be aware of the error putting them at risk.

After researching my Win 10 software, it has and is fully update both before and after the update, yet it errors after this BIOS update with "AESMService: SGX is Disabled at AESM Service startup".

As far as I can determine the Intel SGX software on my installation is the latest and I have never had this issue show before this BIOS update to v.34.  My previous BIOS was v.33

[Rew452]

To show that there were no SGX errors prior to the BIOS v.34 update on 01/06/2020 from v.33

[Grzwacz]

Hi,

No doubt SGX should be running.

I have no other ideas on how to fix this.

I don't work for HP. Most folks in this forum don't work for HP.

The people working for HP are mostly here to moderate the forum.

You could contact HP Support but may have to pay a fee for assistance if your PC is out of warranty.

Sorry.

Regards

[Rew452]

Thanks, for your concern. I do understand.

I realize HP only monitors this but am hoping to get their attention as this is a serious issue and they really need to look into it.

I did update my Dell 2-1 and it had a BIOS update for what appears to be the same security issue. But they also update several parts of the Intel code in bios. I don't remember seeing HP's update do any of that. The Dell updated with out any SGX issues.

If I had to guess the HP update seems incomplete and they seem to have isolated themselves from their customers unless they do their extended warranties. Use to be you could at least email them specially if it's their BIOS issue.

Before I go though a lengthy reinstall of windows from scratch, it would be nice to confirm BIOS is right or I'll be wasting my time.

Since so far no one else has reported it, it's hard to say.

[Grzwacz]

Hi,

I have a Z390 MB, just updated to the latest BIOS; SGX is working correctly.

Also have a uninstall SGX option in Programs and Features. 

The MB manufacturer provides SGX software at it's Support site. I did not see a SGX download at your PC's support site.

Make a backup image of your current OS disk for recovery purposes.

Try uninstalling the software, if possible, in Programs and Features.

Restart your PC. Maybe W10 Update will reinstall this software and possibly fix the problem.

This may not help if the HP BIOS update is missing the necessary code needed to communicate with the OS.

Regards

[Rew452]

I thought of that but Apps and features does not show Intel's SGX software install, Is it called something else?

When searching Intel for software, it's all for their motherboards.

And I find nothing from HP as related to my HP Envy. I can only think it was installed by MS during an update.

Checking my Win update history I don't see anything there either.

Like I said, have no problem reinstalling windows but if I end up the same, lots of time wasted for nothing.

I always do backups, so maybe I'll do another and just reload Win 10 to see if solves the problem but again MS update will consume a lot of time so dammed if I do or not do.

[Rew452]

Well after giving up on a solution to resolve the problem, I gave in and re-installed Windows 10 yesterday and did not see the critical error. So somehow the SGX software support in Windows was damaged or could not handle the BIOS v.34 update from v.33.

It seems HP, MS and or Intel need to post info on how to repair or reinstall the SGX Software components on Windows 10 as this is really a pain having to not only reinstall Windows but all the software one uses.

No Real Solution!