Secure Boot Certificate Update unavailable

[bookworm2192]

I have a laptop whose serial number has now been reassigned. It's an HP Envy Notebook 17-k207tx, and the secure boot certificate expiry is a problem. This is the message in Windows Security Center:

"Secure Boot is on, but your device does not support the automated Secure Boot certificate update due to hardware or firmware limitations. Contact your device manufacturer for assistance."

The advice was clear, so I'm asking what I can do about this? I'm sure there's a method of updating them manually, but I don't know what it is or where to find it.

Any help is appreciated, thanks!

[Paul_Tikkanen]

In order to get the automatic secure boot certificate updates, your PC had to been made in 2019 or later and the hardware must meet Microsoft's minimum W11 hardware requirements, which yours does not meet.

You may be able to manually update the secure boot certificates in Windows, but they won't be able to be entered into the BIOS.

You can see this link for how to try manually installing the 2023 secure boot certificates, but the message you posted will not change.

how to manually/force apply updated secure boot certificates without a firmware update? - Microsoft ...

I have successfully installed the 2023 secure boot certificates in 3 PC's that don't meet Microsoft's minimum W11 hardware requirements and they all have the same message that you posted.

That is because the BIOS's in my PC's are too old and your PC's BIOS is too old.