Event details

Join us in May for our fourth Ask Microsoft Anything (AMA) about updating Secure Boot certificates on your Windows devices before they start expiring in June of 2026. If you've already bookmarked Sec...
Heather_Poulsen
Updated May 18, 2026
AMA
Technical Takeoff
Dave_Sl's avatar
Dave_Sl
Copper Contributor
May 18, 2026

Why do HP state "If your HP Commercial PC is listed as a supported platform, update the BIOS to the minimum version to ensure that the SMBIOS Type1 version field contains the SBKPFV3 substring on Secure Boot-enabled PCs. This substring allows cumulative updates from Microsoft to append the KEK and DB with new certificates throughout 2026." - Is this a string that the Windows OS process is looking for, or something that the BIOS needs in order to accept the update? thanks

IvanCardim's avatar
IvanCardim
Icon for Microsoft rankMicrosoft
May 18, 2026

It is something the Windows OS is looking for - this was coordinated with HP to indicate the firmware supports the operations to be attempted on specific devices.