What do I do to get the secure boot certificate update for my Elitebook 840 G5 Notebook if OS not

[Adefoor]

What do I need to do to update the Secure Boot certificate in my BIOS on my EliteBook 840 G5 Base Model Notebook if the OS isn't listed on the HP support page? My WinVer says I'm running Windows 11 Pro  Version 25H2 ( OS Build 26200.8737) . When I go to select the OS version on the HP support site, that option isn't listed. Somebody, please guide me .

[Paul_Tikkanen]

Ensure that your notebook has the latest BIOS update installed that is listed on the support page (01.31.00).

If you don't, it is OK to run the BIOS update on W11 25H2, because the BIOS update is good for W10 and W11.

See these links for some information for how to update the secure boot certificates:

HP Business PCs - Prepare for new Windows Secure Boot certificates | HP® Support

how to manually/force apply updated secure boot certificates without a firmware update? - Microsoft ...

Also check the secure boot status messages in Windows:

Go to Settings>Privacy and Security>Windows Security>Device Security and check the Secure Boot Status.

It should show one of the following messages:

If you see this message in the Secure Boot section:    What you should do:

Secure Boot is on and all required certificate updates have been applied. No further certificate changes are needed.	No action is needed.
Secure Boot is on, but your device is using an older boot trust configuration that should be updated.	Make sure your device has the latest Windows updates installed. Restart if prompted.
Secure Boot is on, but your device is affected by a known issue. To reduce risk, Secure Boot certificate updates are temporarily paused while Microsoft and partners work toward a supported resolution. The update will resume automatically once resolved.	No action is needed. The certificates update will resume automatically once the issue is resolved.
Secure Boot is on, but your device is using an older boot trust configuration that should be updated. There is not yet enough data to classify your device for automatic update. Visit the link below for more information.	Your device might need additional validation before the update can proceed automatically.  Visit aka.ms/getsecureboot for more information.
Secure Boot is on, but your device does not support the automated Secure Boot certificate update due to hardware or firmware limitations. Contact your device manufacturer for assistance.	Contact your device manufacturer for assistance.
Secure Boot is on, but this device can no longer receive required updates for the Windows boot experience.	Your device is still using an old certificate after the expiration dates. Visit aka.ms/getsecureboot for guidance.