Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.os.windows-11 > #31996

Re: Microsoft intends to kill your computer, no Secure Boot updates for you.

From Paul <nospam@needed.invalid>
Newsgroups alt.comp.os.windows-11, alt.comp.os.windows-10
Subject Re: Microsoft intends to kill your computer, no Secure Boot updates for you.
Date 2026-05-20 20:18 -0400
Organization A noiseless patient Spider
Message-ID <10ulj14$d8dv$1@dont-email.me> (permalink)
References (8 earlier) <10uimhd$3irc0$1@dont-email.me> <10uka76$3vkup$1@dont-email.me> <10ukl6q.o1k.1@ID-201911.user.individual.net> <10ukfe3$1a8v$1@dont-email.me> <10ukiut$23i9$1@dont-email.me>

Cross-posted to 2 groups.

Show all headers | View raw

On Wed, 5/20/2026 11:11 AM, ....winston wrote:
> On 05/20/2026 10:11 AM, sticks wrote:
>> On 5/20/2026 8:50 AM, Frank Slootweg wrote:
>>> sticks <wolverine01@charter.net> wrote:
>>>> On 5/19/2026 5:00 PM, sticks wrote:
>>> [...]
>>>>> Well I'll be damned.  I then did a SFC /scannow and it did find some
>>>>> errors and fixed them.  Rebooted.  Went into the event viewer and
>>>>> instead of the FPM-WMI error it had 4 entries.  A pre-attestation check,
>>>>> a confirmation it is expected to pass attestation, TBS device identifier
>>>>> has been generated, and finally "The TPM was successfully provisioned
>>>>> and is now ready for use."
>>>>>
>>>>> We'll see if it error faults again.
>>>>
>>>> All for naught.  Back again this morning.  Disappointing
>>>>
>>>>
>>>> Log Name:      System
>>>> Source:        Microsoft-Windows-TPM-WMI
>>>> Date:          5/20/2026 6:53:06 AM
>>>> Event ID:      1796
>>>> Description:  The Secure Boot update failed to update SBAT with error
>>>> Unknown HResult Error code: 0x800700c1.
>>>
>>>    If it's any consolation, I also get this error, twice a day, since at
>>> least 15/01/2026.
>>>
>>>    The error comes with a "For more information, please see..." link [1],
>>> but that only mentions Event ID 1795, not 1796. However the 'Change log'
>>> of the document implies that 1796 *is* documented. Microsoft moves in
>>> mysterious ways! :-(
>>>
>>>    I think that this 'Error' is nothing to worry about.
>>>    IMO, if we got a dollar for every 'Error' in our Event Viewer logs, we
>>> would make Elon look like a pauper! :-)
>>>
>>> [1] 'Secure Boot DB and DBX variable update events'
>>> <https://support.microsoft.com/en-gb/topic/secure-boot-db-and-dbx- variable-update-events-37e47cf8-608b-4a87-8175-bdead630eb69>
>>
>> I know I can't do much more myself, and am not too worried about it. However, it does annoy me that the secure boot process is evidently missing some of the available data because of the update failure.  I find it difficult to believe HP cannot figure out a way to fix this error.
>>
>>
> Run this a Powershell admin window
> 
> ([System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023')
> 
>  - If the above command returns “true,” then your PC is using the new certificate
> 
> 
> If it returns true or false, the EventViewer error is normal.
>  a. can't update(thus fails) if already present or not installed
> 
> 

This is a known issue. Secure Boot Advanced Targeting, is an attempt to
improve the efficiency of the contents of the dbx database. Microsoft
has to "care" about the buggy or not-buggy state of GRUB2, in order
to keep Windows secure, as there is a cross-platform "hole" that GRUB2
on a machine opens. Microsoft trying to install a four line text file
for SBAT, is to ensure the status of GRUB2 is covered. Instead of
putting a hundred separate entries into dbx, the scheme is one
four line text file, and then virtually any GRUB2 based OS can have
a buggy version of GRUB2 blocked.

The issue is not documented properly, and only an LLM-AI will be
able to gather the pieces and write a story for it. I don't know
how it was ever supposed to work on the BIOS side, and maybe
it only works at some stage in the OS progression.

   Paul

Back to alt.comp.os.windows-11 | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Microsoft intends to kill your computer, no Secure Boot updates for you. anon <noreply@mixmin.net> - 2026-05-19 03:30 +0100
  Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Lynn McGuire <lynnmcguire5@gmail.com> - 2026-05-18 23:20 -0500
    Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-05-19 02:08 -0400
      Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Lynn McGuire <lynnmcguire5@gmail.com> - 2026-05-19 23:06 -0500
        Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-20 03:17 -0400
  Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-05-19 13:48 +0800
    Re: Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog "s|b" <me@privacy.invalid> - 2026-05-19 15:02 +0200
      Re: Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-05-19 22:48 +0800
        Re: Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog "s|b" <me@privacy.invalid> - 2026-05-19 16:53 +0200
          Re: Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog "....winston" <winstonmvp@gmail.com> - 2026-05-19 11:04 -0400
    Re: Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog JJ <jj4public@gmail.com> - 2026-05-19 20:37 +0700
      Re: Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog "Mr. Man-wai Chang" <toylet.toylet@gmail.com> - 2026-05-19 22:47 +0800
      Re: Act now: Secure Boot certificates expire in June 2026 - Windows IT Pro Blog "....winston" <winstonmvp@gmail.com> - 2026-05-19 11:00 -0400
  Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Philip Herlihy <nothing@invalid.com> - 2026-05-19 11:44 +0100
    Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "s|b" <me@privacy.invalid> - 2026-05-19 14:40 +0200
      Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-05-19 10:31 -0400
        Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "s|b" <me@privacy.invalid> - 2026-05-19 16:55 +0200
          Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "J. P. Gilliver" <G6JPG@255soft.uk> - 2026-05-19 18:48 +0100
            Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "s|b" <me@privacy.invalid> - 2026-05-20 15:34 +0200
      Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-19 12:02 -0400
        Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-19 11:30 -0500
          Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Frank Slootweg <this@ddress.is.invalid> - 2026-05-19 17:52 +0000
            Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-19 16:29 -0400
            Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-19 16:07 -0500
              Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-19 16:43 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-19 17:00 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-19 20:13 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-20 07:42 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Frank Slootweg <this@ddress.is.invalid> - 2026-05-20 13:50 +0000
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-20 09:11 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-05-20 11:11 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-20 11:46 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-20 20:18 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Andy Burns <usenet@andyburns.uk> - 2026-05-21 08:34 +0100
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-21 10:24 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. rbowman <bowman@montana.com> - 2026-05-21 18:15 +0000
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Daniel70 <daniel47@nomail.afraid.org> - 2026-05-22 19:45 +1000
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "J. P. Gilliver" <G6JPG@255soft.uk> - 2026-05-22 20:52 +0100
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-22 17:50 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-05-23 00:43 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Daniel70 <daniel47@nomail.afraid.org> - 2026-05-23 19:33 +1000
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-06-10 18:23 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-06-10 19:58 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Daniel70 <daniel47@nomail.afraid.org> - 2026-06-11 20:53 +1000
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Daniel70 <daniel47@nomail.afraid.org> - 2026-06-11 23:09 +1000
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-11 22:19 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-06-11 21:26 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-14 03:56 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-06-16 08:05 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-16 10:35 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-06-16 09:54 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-16 14:31 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-06-16 18:40 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-16 20:12 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-06-16 20:08 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-17 02:33 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-06-12 00:42 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-13 21:16 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-06-15 06:11 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-15 09:31 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-06-15 10:33 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "Bill Bradshaw" <bradshaw@gci.net> - 2026-06-15 09:22 -0800
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-15 20:48 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-06-16 08:38 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "Bill Bradshaw" <bradshaw@gci.net> - 2026-06-16 08:26 -0800
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-16 14:51 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "Bill Bradshaw" <bradshaw@gci.net> - 2026-06-17 08:25 -0800
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. "....winston" <winstonmvp@gmail.com> - 2026-06-18 02:21 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-20 18:05 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-20 18:31 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-20 20:12 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-20 20:16 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-22 11:15 -0400
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. sticks <wolverine01@charter.net> - 2026-05-22 11:15 -0500
                Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-22 17:27 -0400
              Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-19 21:00 -0400
          Re: Microsoft intends to kill your computer, no Secure Boot updates for you. John Smith <invalid@invalid.invalid> - 2026-05-19 19:00 +0100
            Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-19 16:34 -0400
        Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Frank Slootweg <this@ddress.is.invalid> - 2026-05-19 17:52 +0000
      Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Philip Herlihy <nothing@invalid.com> - 2026-05-21 11:22 +0100
    Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Stan Brown <someone@example.com> - 2026-05-19 17:46 -0700
      Re: Microsoft intends to kill your computer, no Secure Boot updates for you. Paul <nospam@needed.invalid> - 2026-05-19 21:14 -0400

csiph-web