Event details

Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they expire in June of 2026. We recently published the first version of the Secure Boot playbook, o...
Heather_Poulsen
Updated Dec 09, 2025
AMA
HigherEdArchitect's avatar
HigherEdArchitect
Copper Contributor
Dec 10, 2025

With the new Windows events being generated, for Windows Server SKUs (primarily VMs) without Secure Boot enabled, why are Microsoft-Windows-TPM-WMI events - specifically event 1801 - being generated?  The device with secure boot disabled at the hyper visor layer doesn't update nor meet the requirements.