Question about updating secure boot certificates on several laptops I own.

[FranciscoJ]

Good morning

Your post has been changed because invalid HTML was found in the message body. The invalid HTML has been removed. Please review the message and submit the message when you are satisfied.

CND13421VS

5CG1044HM5

CND8346C5T

[Paul_Tikkanen · Accepted solution]

Hi:

When you get that message, just click on 'Post' again and the message should post.

Regarding the subject of your post:

The first two notebooks should automatically get the secure boot certificate updates.

The last one, since it was made in 2018, may not.

See these links for more information for how to update the secure boot certificates:

HP Business PCs - Prepare for new Windows Secure Boot certificates | HP® Support

how to manually/force apply updated secure boot certificates without a firmware update? - Microsoft ...

Also check the secure boot status messages in Windows:

Go to Settings>Privacy and Security>Windows Security>Device Security and check the Secure Boot Status.

It should show one of the following messages:

If you see this message in the Secure Boot section:       What you should do

Secure Boot is on and all required certificate updates have been applied. No further certificate changes are needed.	No action is needed.
Secure Boot is on, but your device is using an older boot trust configuration that should be updated.	Make sure your device has the latest Windows updates installed. Restart if prompted.
Secure Boot is on, but your device is affected by a known issue. To reduce risk, Secure Boot certificate updates are temporarily paused while Microsoft and partners work toward a supported resolution. The update will resume automatically once resolved.	No action is needed. The certificates update will resume automatically once the issue is resolved.
Secure Boot is on, but your device is using an older boot trust configuration that should be updated. There is not yet enough data to classify your device for automatic update. Visit the link below for more information.	Your device might need additional validation before the update can proceed automatically.  Visit aka.ms/getsecureboot for more information.
Secure Boot is on, but your device does not support the automated Secure Boot certificate update due to hardware or firmware limitations. Contact your device manufacturer for assistance.	Contact your device manufacturer for assistance.
Secure Boot is on, but this device can no longer receive required updates for the Windows boot experience.	Your device is still using an old certificate after the expiration dates. Visit aka.ms/getsecureboot for guidance.

[FranciscoJ]

Oh, sorry, I hadn't seen that the post had been published like that.

Thank you so much for the clarification! Have a good day. Best regards.

[Paul_Tikkanen]

You're very welcome.

You have a good day too!

Cheers,