Omnibook Stuck at HP logo after Windows Update KB5121003

[JoshR95]

Brand new laptop. After going thru setup, Windows Update runs. When Windows Update KB5121003 is applied, Omnibook X Flip (Ryzen AI 465) notebook hangs at HP logo on boot.

Identical symptoms to:

https://learn.microsoft.com/en-us/answers/questions/5982539/windows-11-kb5121003-installation-and-bo...

and

https://www.reddit.com/r/techsupport/comments/1vuztj2/brand_new_hp_laptop_becomes_stuck_on_bootlogo/

[Mr_RadhaTech]

Do this:

1. Hold the power button for about 10 seconds until the Nitro turns off.
2. Turn it on.
3. When the Acer logo or Windows spinning dots appear, hold the power button again until it shuts down.
4. Repeat this interruption twice.
5. Turn it on a third time and let it continue. Windows should display Preparing Automatic Repair. 
6. Once in Windows RE, select Troubleshoot > Advanced options > Uninstall Updates.
7. Select and Uninstall the latest KB5121003 update you did. 
8. Now check

[Dan873]

Is HP looking at this? Seems a lot of people are getting this, particularly with HP Omnibooks and Omniflips 

 https://www.reddit.com/r/techsupport/comments/1vuztj2/brand_new_hp_laptop_becomes_stuck_on_bootlogo/ https://learn.microsoft.com/en-us/answers/questions/5982539/windows-11-kb5121003-installation-and-bo...

My theory is that Microsoft update expired boot certificates in the update that the BIOS on the laptop is incomputable with, but I'd like confirmation of that before I start updating the BIOS (which has it's own risks). Looks like my laptop has BOIS F.06  from April but there is a later one F.06 Rev.A that came out 2 weeks after. I'm wondering if that'll work, but I don't want to start hacking without someone from HP confirming the fix.

Anyway the whole thing seems like a giant mess that's been going on for a few weeks now. Seems like between Microsoft and HP they somehow managed to brick a bunch of brand new laptops and that's not acceptable. I spent a lot of hours researching and trying to fix it, but the only thing that works is backing out the Windows update.  If my theory is right, until there's a BOIS update compatible with the new certificates, the only thing to do is pause Windows updates.

[YuyaPapa]

私の PC（HP OmniBook X Flip 14-kc0008AU）は、買ってあまり時間が経過しておらず、ソフトウェアもそれほど入れていないクリーンな状態ですが、 KB5121003 だけでなく、KB5120998 をインストールした後の再起動でも、HP ロゴが表示された状態から先に進みません。

[Dan873]

I just had a rather infuriating interaction with HP support on the issue. First I spoke with a bot who said HP is aware of the issue, but doesn't have a fix yet. I asked the bot when the fix will be out and it didn't know. I asked the bot if I could get notified when the fix was out and it said I couldn't. I asked it if there was a web site I could check periodically about the fix and it just gave me the general support site that doesn't have any info on the issue.

Then I asked to talk to a human who ignored my questions altogether and insisted that the only fix was to completely wipe the laptop and rebuild it from scratch.  Zero stars for HP support, people and bots are basically clueless. I should have bought a MacBook. They are a lot  more expensive, but you don't have to put up with stuff like this.

[PacoAG]

A solution i've tested and confirmed, which i found on reddit.

After it is frozen, power it off. When you power it on again it should diagnose and attempt repairs which is when it uninstalls the massive KB5121003 update.

Once that happens and it boots to windows follow these steps:

Open settings-search encryption in the top search bar.
If Device encryption settings appears select it and turn off encryption should take a few minutes.
Then restart the omnibook and start pressing F10 (on the black screen before the HP logo) to go to the bios.
Go to the Boot menu
Disable secure boot by selecting it with the arrow keys, pressing enter, selecting disable, and pressing enter again
Now press F10 and answer yes
After a reboot, enter the 4 digit code and press enter
Once windows boots, go install (KB5121003) and restart the omnibook.
After it finished and boots to windows, restart it again and start pressing F10 on the black screen before the HP logo) to go to the bios again.
Essentially go back to the bios boot menu and enable secure boot, pres F10 to save and exit.

Then, enable device encryption on Windows if you wish.

Good luck

[YuyaPapa]

有用な情報の提供、ありがとうございます。

この方法で、私も無事 Windows Update ができました！

[suburban_ghetto]

Hey. Thank you! You found my post in Reddit [teacherweary8307]. Thank you for sharing it as so many people ran into this issue after that update.

[Dan873]

Thanks for sharing. I haven't tried it yet. My theory is that there is an incompatibility between the boot certificates in the update and the BOIS on the laptop and that every future update will have the same issue until HP releases a BOIS with a fix.  Do you know if you encrypt the drive again do subsequent Windows updates work?

 I contacted HP support to ask if they are working on a fix and a bot told me they are aware of the problem, and it had something to do with the BIOS, but no details as to when it'll be fixed. Then I asked to talk to a human so I could ask them instead and they were worse than the bot. They wouldn't answer the question: do you know when this will be fixed, just ignored me and said I would have backup everything on the laptop to an external drive, factory reset the laptop, and then reinstall all the apps and copy all the data back. Your fix sounds much better.  I don't think HP support's fix would have worked and would have taken hours to get the laptop back to where it was and I would still be stuck with the same issue.  I kind of wish I didn't buy an HP. The laptop is good, but everything else, not so much. Community is really good though.

[suburban_ghetto]

After encrypting the drive there have been zero issues on multiple Omnibook X Flips.  The only thing I noticed within the secure boot menu is there is 2 different types of secure boot available to choose from. My money is on that new feature causing something once the security update is applied. I'll have to open up the bios on one of these devices to check what those 2 options are.