EliteBook 850 G7

[Misty731]

Hello,

I updated my laptop from 22H2 to 25H2 using the Windows media tool.  I didn't do a clean install and kept my files.

Every time I turn my laptop on HP Sure start says updating and once everything is loaded a message keeps telling me I need to do a restart.

I don't know a lot about computers and would appreciate it if I could get some advice on how to solve it.  I did read somewhere to go into Bios and uncheck Sure start but I don't want to do something if it's wrong.

Regards

Misty731

[Samrit26]

Hello,

Hi Misty — you’re right to be cautious, and you did the right thing by not disabling things blindly in BIOS. What you’re seeing is a known HP Sure Start behavior after a major Windows in-place upgrade, and it’s fixable.

I’ll explain what’s happening in plain language, then give you safe steps. Nothing below will risk your data.

---

What’s actually happening (plain explanation)

HP Sure Start is a firmware-level security feature that checks the BIOS and boot components every time the system starts.

When you upgraded Windows (22H2 → newer build) without a clean install:

• Windows replaced boot components

• Sure Start detected changes

• It keeps trying to “finalize” its update

• The process never fully completes, so it asks for a restart every boot

This is a sync issue between Windows and HP firmware, not malware and not user error.

---

Important reassurance

• ✅ Your files are safe

• ✅ Your BIOS is not damaged

• ❌ Disabling Sure Start in BIOS is not recommended unless instructed by HP

• ❌ Reinstalling Windows is not required

---

Step 1 – Update HP firmware components (most important fix)

Windows Update alone does not update HP security firmware.

Do this:

1. Open HP Support Assistant

   • (If not installed, download it from HP’s website)

2. Open it and click Updates

3. Install ALL updates shown, especially:

   • BIOS updates

   • HP Firmware

   • HP Sure Start / Security Controller updates

4. Restart when prompted

👉 This resolves the restart loop in most cases.

---

Step 2 – Let Sure Start finish one full cycle

After updates:

1. Restart the laptop

2. If you see “HP Sure Start updating”

   • Let it finish

   • Do NOT power off

3. Log into Windows

4. Restart one more time

After this, the message usually stops.

---

Step 3 – Clear TPM (safe, guided step)

If the message still appears, the Trusted Platform Module needs resyncing.

⚠️ This does not delete files.
⚠️ You may need your Windows PIN afterward.

Steps:

1. Press Windows + R

2. Type tpm.msc → Enter

3. Click Clear TPM

4. Restart when prompted

Windows will recreate the security keys cleanly.

---

Step 4 – BIOS reset to defaults (safe)

This resets security state without disabling features.

1. Restart laptop

2. Tap F10 to enter BIOS

3. Choose Restore Defaults

4. Save & Exit

⚠️ Do NOT disable Sure Start
⚠️ Do NOT change Secure Boot settings

---

What NOT to do

• ❌ Don’t disable HP Sure Start

• ❌ Don’t toggle Secure Boot randomly

• ❌ Don’t reinstall Windows yet

• ❌ Don’t flash BIOS unless HP Support Assistant offers it

---

When this becomes a support case

If after all steps:

• Sure Start still asks for restart every boot

Then the Sure Start NVRAM state is stuck, and HP support must reset it with service tools.