Event details
Have questions about how device manufacturers support the Secure Boot certificate update process? Join OEM Secure Boot Office Hours to connect directly with OEMs and get answers to your questions. Th...
Heather_Poulsen
Updated Jul 15, 2026
Swartz99
Jul 15, 2026Tin Contributor
Any OEM, is there going to be a date where a device that still has 2011 certs will never be able to update to the 2023 certs?
Juergen_Bayer
Jul 15, 2026Tin Contributor
HP's answer: On HP commercial platforms from 2019 and newer, the latest BIOS version includes updated Secure Boot UEFI variables for the default databases, with the 2023 certificates added. After installing this BIOS version, the active Secure Boot databases can be reinitialized to include the 2023 certificates. As a result, these devices will always be capable of having the Secure Boot 2023 certificates present in the Secure Boot active databases.