Secure Boot Certificate Update unavailable

[bookworm2192]

I have a laptop whose serial number has now been reassigned. It's an HP Envy Notebook 17-k207tx, and the secure boot certificate expiry is a problem. This is the message in Windows Security Center:

"Secure Boot is on, but your device does not support the automated Secure Boot certificate update due to hardware or firmware limitations. Contact your device manufacturer for assistance."

The advice was clear, so I'm asking what I can do about this? I'm sure there's a method of updating them manually, but I don't know what it is or where to find it.

Any help is appreciated, thanks!

[Paul_Tikkanen]

In order to get the automatic secure boot certificate updates, your PC had to been made in 2019 or later and the hardware must meet Microsoft's minimum W11 hardware requirements, which yours does not meet.

You may be able to manually update the secure boot certificates in Windows, but they won't be able to be entered into the BIOS.

You can see this link for how to try manually installing the 2023 secure boot certificates, but the message you posted will not change.

how to manually/force apply updated secure boot certificates without a firmware update? - Microsoft ...

I have successfully installed the 2023 secure boot certificates in 3 PC's that don't meet Microsoft's minimum W11 hardware requirements and they all have the same message that you posted.

That is because the BIOS's in my PC's are too old and your PC's BIOS is too old.

[bookworm2192]

Thanks for your response!

If I manually update the certificates in the BIOS, will they be reflected in either Windows 10 or the Linux install I intend to do? I'm fairly sure I have enough knowledge to do the cert install given that this laptop is from about 2012 and there's nothing on it that I care about, but are there steps I need to take after that? Should I look for a tutorial on YouTube maybe?

[Paul_Tikkanen · Accepted solution]

You're very welcome.

I gave you the link which has the instructions to manually update the secure boot keys in Windows using Powershell.

I did it in a few seconds.

Here is a video that also shows you how to manually update the secure boot keys.

How to Manually Install the SECURE BOOT DB Update (Windows UEFI CA 2023) on Windows 11 - YouTube

[bookworm2192]

Cheers, appreciate the help! Happy timezone! Take care of yourself, especially if you're experiencing the heat wave!

[Paul_Tikkanen]

Anytime.

Glad to have been of assistance.

Yes, it's going to be very hot here starting tomorrow and continuing for at least a week.

We use the Fahrenheit scale here, but the temps will be ranging from 34 C to 36 C with a heat index (temperature + humidity) of up to 43 C.

This is normal for the St. Louis, Missouri, USA metropolitan area.

Enjoy the rest of your weekend!

Cheers,

Paul

[bookworm2192]

Okay, having actually tried this method, it didn't work, and what the rest of the internet is saying is my BIOS firmware is too old. I cannot update it, this is a 15-year-old laptop, so I'm just gonna disable secure boot and stick a Linux distro that doesn't require that functionality on it and be done with it. Thanks for your help anyway!