How to Update HP Secure Boot Certificates Before June 2026

Select Language:

If you’re seeing errors related to Windows UEFI certificates on your HP ENVY 17, you’re likely facing a known compatibility issue caused by Microsoft’s phased rollout of the 2023 certificates on older hardware. Here’s what you need to know and what steps you can take.

First, your device’s BIOS is quite old, with the latest update from 2017. Because of this, HP has stopped providing BIOS updates for this model, and your system doesn’t support the newer Microsoft certificates natively. That means it isn’t possible to update the BIOS to include the 2023 UEFI CA certificates.

Next, some users consider restoring factory keys as a solution. However, this isn’t recommended. Restoring factory keys simply replaces your Secure Boot database with the original ones from 2011. It doesn’t add support for the 2023 certificates, which are larger and require a more recent firmware update—something your BIOS can’t handle. In fact, attempting to restore these keys can lead to errors because your system’s firmware isn’t designed to accommodate these larger certificates. The specific error code 0x800700c1 points to a limitation in your BIOS firmware where the Secure Boot database space is too small for the new certificates.

The best advice here is to do nothing. Microsoft’s update is designed to “fail gracefully” on older systems, meaning your system remains stable and secure with its original settings. Since your system boots normally in UEFI mode with Secure Boot active, there’s no immediate harm. The error logs you see are just telemetry data, recording the failed attempt to update Secure Boot. These logs do not affect your system’s performance or security and can be safely ignored.

If your system is otherwise running smoothly and you haven’t encountered other issues with Windows updates, there’s no need to worry. The certificate problem is purely informational and doesn’t impact your device’s usability.

In summary, the safest solution is to leave your BIOS as is. Your system remains secure and fully functional, and there’s no need for risky BIOS modifications or attempts to force updates that your hardware can’t support. If you continue to experience issues beyond this, it might be time to consider hardware upgrades or contact HP support for further assistance.

Thanks for being part of the community! If this advice helped you, click the thumbs-up icon. If it fully resolved your problem, select “Accept as Solution” so others can benefit.