System lockup upon shutdown (after BIOS update), PCIe related.

[sadegroo]

I have experienced this exact bug since the last windows update:
https://learn.microsoft.com/en-us/answers/questions/5736018/ongoing-issues-with-shutting-down-laptop...
I have done the workaround (disable VTd in BIOS) that works and this "fixed" the reboot issue, but broke the fingerprint scanner.

However, (while trying to diagnose the above bug) since updating to BIOS "HP W97 Ver. 01.08.02 (30/12/2025)", I have had issues with the OEM card reader from Realtek.
Shutdown is stuck in an infinite loop. This problem is OS independent, since trying to shutdown from Linux causes the same issue.
Linux actually shows an infinite scrolling list of the same PCIe error, while being stuck in shutdown:

PCIe Bus Error: severity=Correctable, type=Data Link Layer, (Transmitter ID) device [10ec:525a] error status/mask=00001000/00006000

On windows, this is event ID17 (WHEA-logger):

A corrected hardware error has occurred.

Component: PCI Express Endpoint
Error Source: Advanced Error Reporting (PCI Express)

Primary Bus:Device:Function: 0x57:0x0:0x0
Secondary Bus:Device:Function: 0x0:0x0:0x0
Primary Device Name:PCI\VEN_10EC&DEV_525A&SUBSYS_8CA0103C&REV_01
Secondary Device Name:

I have already tried unsuccessfully:

• Updated all drivers via HP image assistant
• Updated all intel an nvidia drivers
• Reset BIOS settings to factory default
• run the system board diagnostic in BIOS (PCIe PASSED)
• Cleared CMOS by unplugging battery and button cell

What has worked is a combination of:

1. Physically unplugging the PCIe ribbon cable going to the SD card reader
   AND
2. Disabling SD card reader in BIOS
   AND
3. Deleting windows driver for SD card reader

Safe to say this is not an optimal workaround. In the current situation both the fingerprint scanner and the SD card reader are inoperable.
Having the SD card reader (which is functional) plugged in means a shutdowns can only be completed by hard resetting (holding power button)

Possibly unrelated but since last windows update, This error started appearing:
event 1801 (TPM-WMI):
Updated Secure Boot certificates are available on this device but have not yet been applied to the firmware. Review the published guidance to complete the update and maintain full protection. This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:HP;FirmwareVersion:W97 Ver. 01.08.02;OEMModelBaseBoard:8CA0;OEMManufacturerName:HP;OSArchitecture:amd64;
BucketId: (redacted)
BucketConfidenceLevel:
UpdateType:
For more information, please see https://go.microsoft.com/fwlink/?linkid=2301018.

Item | Value ---------------------------------------|--------------------------------------------------------------- OS Name | Microsoft Windows 11 Enterprise Version | 10.0.22631 Build 22631 Other OS Description | Not Available OS Manufacturer | Microsoft Corporation System Name | G-NB133202 System Manufacturer | HP System Model | HP ZBook Power 16 inch G11 Mobile Workstation PC System Type | x64-based PC System SKU | 946E2AV Processor | Intel(R) Core(TM) Ultra 9 185H, 2300 MHz, 16 Core(s), 22 Logical Processor(s) BIOS Version/Date | HP W97 Ver. 01.08.02, 30/12/2025 SMBIOS Version | 3.4 Embedded Controller Version | 7.79 BIOS Mode | UEFI BaseBoard Manufacturer | HP BaseBoard Product | 8CA0 BaseBoard Version | KBC Version 07.4F.00 Platform Role | Mobile Secure Boot State | On PCR7 Configuration | Elevation Required to View Windows Directory | C:\WINDOWS System Directory | C:\WINDOWS\System32 Boot Device | \Device\HarddiskVolume1 Locale | United States Hardware Abstraction Layer | "10.0.22621.6489" Time Zone | Romance Standard Time Installed Physical Memory (RAM) | 64.0 GB Total Physical Memory | 63.4 GB Available Physical Memory | 42.8 GB Total Virtual Memory | 74.2 GB Available Virtual Memory | 52.6 GB Page File Space | 9.50 GB Page File | C:\pagefile.sys Kernel DMA Protection | Running Virtualization-based security | Running Virtualization-based security Services | Base Virtualization Support, Secure Boot, UEFI Code Readonly, | SMM Security Mitigations 1.0, Mode Based Execution Control, | APIC Virtualization Virtualization-based security: HVCI | Hypervisor enforced Code Integrity Windows Defender Application Control | Enforced