Secure Boot certificate update for OmniDesk

[C-King]

I just updated my bios and still get Microsoft event ID 1801 and 1796 related to Secure Boot Certificates not applied to firmware yet.  Do I need to manually update or will windows update take care of the error events? or will a future bios update take care of issue?

 
Do you know if Is the Secure Boot certificate update compatible with:

• BIOS version: AMI F.06 7/16/ 2025

• BIOS mode: UEFI

• Secure Boot state: Enabled

• System Model: HP OmniDesk Desktop M03-0xxx

[Deep_World · Accepted solution]

Hi @C-King,

Welcome to the HP Support Community!

Thanks for reaching out!

We're thrilled to have the opportunity to assist you and provide a solution.
Please note :

1. Windows Update delivers updated Secure Boot DB/DBX certificates.
2. The BIOS/firmware is responsible for applying them.
3. Sometimes, the application of certificates only occurs during a future BIOS update or after a specific firmware handshake.

So typically, you do not need to manually update anything, and a future HP BIOS update may clear these event logs.

1. Check Secure Boot status in Windows

• Press Win + R, type msinfo32 and press Enter
• Verify:
  • Secure Boot State = On
  • BIOS Mode = UEFI

2. Verify BIOS Secure Boot keys

• Reboot and enter BIOS (F10)
• Look for options like Restore Factory Keys or Load Secure Boot Keys
• If available, restoring them can ensure Windows and firmware are synchronized

3. Keep Windows fully updated

• Check Optional Updates in Windows Update
• Sometimes the certificates are updated separately from standard updates
  
  I hope this helps.

I'm glad I could help! 😊 If this resolved your issue, please mark it as "Accepted Solution" and click "Yes" on "Was this reply helpful?" Your feedback not only keeps us going but also helps others find the solution faster! 

Take care and have an amazing day ahead! 

Best regards,

Deep_World