• ×
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
  • ×
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
Guidelines
Join the HP Community Solve‑a‑thon | Help Others & Share Your Solutions | Live on Zoom | 2:30 PM to 2:30 AM IST | Every Wednesday Click here to know more
Check out our WINDOWS 11 Support Center info about: OPTIMIZATION, KNOWN ISSUES, FAQs, VIDEOS AND MORE.
HP Recommended

@Resistencia

 

BIOS updated:

BIOS Version: HP V72 Ver. 01.10.00, 26.08.2025

 

According to the manual:

https://techcommunity.microsoft.com/blog/windows-itpro-blog/updating-microsoft-secure-boot-keys/4055...

 

I checked if the Secure Boot DB was updated by running:

[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match ‘Windows UEFI CA 2023’

I got 'false'. But I should have gotten 'true'.

 

But I don't set the registry key and don't  run task from this manual.

 

HP Recommended

Did you check the BIOS version with the Device Manager firmware?

HP Recommended

You should find the file at the following link. If you do not have it, it may be because providing this record is prohibited in your country's region.

HP Recommended

If your computer starts up fine, I see no reason to touch things that could damage it, but if you wish, you can follow these steps:

 

How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-...

HP Recommended

@Resistencia

 

Firmware version:

Screenshot 2025-09-24 201605.png

HP Recommended

@Resistencia

 

"If your computer starts up fine, I see no reason to touch things that could damage it, but if you wish, you can follow these steps:"

 

In general, I think so too. But I have doubts that Secure Boot works properly with this error.

HP Recommended

Click on driver, not on the firmware tab.

 


@movoodoo wrote:

@Resistencia

 

Firmware version:

Screenshot 2025-09-24 201605.png


 

HP Recommended
HP Recommended

As I imagined, Windows has not updated it. Usually, after you update the BIOS, Windows Update sends a driver that matches the BIOS version. In your case, it has not sent it, but this does not affect the fact that your BIOS complies with the UEFI certification.

 

So when compare windows in events, it gives that “false” certificate error.

HP Recommended

Another thing in digital signer should say “compatible with Windows UEFI.”  but windows  has not updated

† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the <a href="https://www8.hp.com/us/en/terms-of-use.html" class="udrlinesmall">Terms of Use</a> and <a href="/t5/custom/page/page-id/hp.rulespage" class="udrlinesmall"> Rules of Participation</a>.