HP Connect renew expired Certificate and SPM Key Pair

[RemcoVr]

In the connect.admin.hp.com portal, ive configured some BIOS policies, for both setting a BIOS policy and to secure the BIOS with the HP Sure Admin app. I realised that several pc's keeps asking for a reboot to configure the HP BIOS settings. After i logged into the HP Connect portal, i saw that the certificate and SPM Key Pair are expired. 

There is no button te renew the certificate. How am i suppose to renew the certificate, and is there a reason why HP keeps asking for a reboot on the same HP computers? I changed the script settings in the Endpoint Manager to Once instead of every day. I also saw that the BIOS isn't protected anymore with the QR code when going to the BIOS with F10.

[kalemargret]

Hi, I hope It helpful for you.

To resolve your issues:

1. **Renew Certificate:**
- Log into the HP Connect portal.
- Generate a new SPM Key Pair and certificate.
- Deploy the new certificate to your HP computers.

2. **Reboot Issue:**
- The expired certificate may cause repeated reboots. Renewing the certificate should help.
- Check and update BIOS policies to ensure they are applied correctly.  😊

3. **QR Code Protection:**
- Reconfigure BIOS settings to enable QR code protection.
- Verify settings and check HP documentation or support for guidance.

If problems persist, contact HP Support for further assistance. 😊

[RemcoVr]

Hi Kale/others,

Thanks for your reply. I generated a new SPM key, but i cannot see an option to apply the SPM secret. After generating in the Secret list, on the second tab Policies Applied To, there is no option to choose the Azure group i want to apply it to. When i click the pencil icon, it brings me back to the secret settings, so not where to apply them.

Any suggestions?

[Markinsonjays]

To renew an expired certificate and SPM key pair in HP Connect, you can try these steps:

1. Access HP Connect: Log in to your HP Connect dashboard.
2. Navigate to Security Settings: Go to the section where certificates and key pairs are managed.
3. Renew the Certificate: Look for the expired certificate in the list and select the option to renew it. If the option isn’t available, you may need to generate a new certificate.
4. Update SPM Key Pair: Similarly, find the section for the SPM (Security Platform Module) key pair and generate or update it as necessary.
5. Apply Changes: Save or apply the new certificate and key pair, and ensure that all systems using them are updated accordingly.

[RemcoVr]

- There is no security settings. The certificates are managed under Secrets. 

-There is no option to renew the certificate, also the expired ones cannot be edited or deleted.

- I am able to create a new SPM Secret, but i am not able to apply it.

[Markinsonjays]

Oh! I thought it might work, Now the only option left is to consult with their support then.