UEFICA2023 Status stuck at InProgress and Secure Boot DB update not applying (TPM-WMI 1796/1801)

[ansky801]

I’m trying to apply the Secure Boot 2023 certificate update (UEFI CA 2023) on my system, but it does not complete.

System details:

• Device: HP EliteBook 840 G8
• BIOS Version: 01.23.00 (Nov 2025)
• OS: Windows 11 (fully updated)

Current state:

• Secure Boot: Enabled
• TPM: “Ready for use”
• UEFICA2023Status: InProgress

What I have tried:

1. Ran the scheduled task manually:

   Start-ScheduledTask -TaskName "\Microsoft\Windows\PI\Secure-Boot-Update"

2. Restarted the system multiple times (including double reboot cycle)
3. Waited after running the task before rebooting
4. Ensured BIOS is updated to the latest version
5. Verified Secure Boot is enabled and system is in standard mode

Verification result:
The following check returns False, indicating the update is not applied:

[System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023'

Event Viewer logs:
I consistently see TPM-WMI errors when running the task:

• Event ID 1796
• Event ID 1801

These appear during attempts to apply the Secure Boot update.

Issue:
It seems Windows is scheduling and attempting the update, but the firmware is not committing it. The status remains stuck at InProgress, and the UEFI CA 2023 certificate is not present.

Question:

• Is this expected behavior on certain firmware (e.g., HP Sure Start systems)?
• Does Event ID 1796 indicate firmware rejection of the Secure Boot update?
• Is there any way to force the update, or is this dependent on a future BIOS/firmware update?

Any clarification would be appreciated.