Secure Boot certificate updates are broken on some PCs, Microsoft confirms

From PC World: On June 24th, several older Microsoft certificates expired, meaning that many Windows 10 and 11 users need to update their computers. Without properly updated certificates, Windows Secure Boot will stop working and can no longer guarantee secure startups.

However, it’s now confirmed that Microsoft has temporarily suspended the issuance of new certificates for certain PCs, including a number of HP models. The company explains on this support page:

On the vast majority of PCs, the full set of Secure Boot certificates install automatically through Windows Update. Some devices require a firmware update from the PC manufacturer before you can install the necessary Secure Boot updates. Many OEMs are actively releasing these firmware updates through their standard update channels. If a firmware update is required, check your OEM’s Secure Boot support page for next steps.

In some cases, Windows Security might indicate that Secure Boot certificate updates are temporarily paused or blocked by displaying one of these messages:

1) Devices in this group are affected by a known issue. To reduce risk, Secure Boot certificate updates are temporarily paused while Microsoft and partners work toward a supported resolution. Contact your device manufacturer for assistance.

2) Secure Boot is on, but your device does not support the automated Secure Boot certificate update due to hardware or firmware limitations. Contact your device manufacturer for assistance.

View: Full Article