Solved Event Log Error TPM-WMI Event ID: 1796

bo elam · Oct 1, 2025

Thanks @zbook

Bo

zbook · Oct 1, 2025

You're welcome.

DarkShadowMD · Oct 1, 2025

bo elam said:
I read your posts in another thread about your BIOS update that is available for your HP. Last week I updated my BIOS in the HP. I know how you feeling about your BIOS updates, HP doesn't make the process seamless. My HP computer comes with two different processors, one is AMD, like mine, and another model comes with Intel processors. In the Software updates page for my model there are 2 BIOS updates and they are not clearly marked so you really don't know (easily) which one is for the version with the AMD processor and which one is for Intel or Gigabite. Later I found that the one that is not for my model is Gigabyte, where GB comes from in all this I have no idea.

But anyway, I reinstalled HP Support Assist just because I wanted make sure I installed the correct BIOS. I had a clue, in System information, BaseBoard product shows the numbers 8B4E, and that number was in the BIOS information of one of the updates. Afterward, I searched for updates with HPSA and it also came up with that update. So, I installed it feeling 100% sure that I was installing the correct update. But is not easy. Two months ago when I got this computer, I visited that page before uninstalling HPSA, and one of the BIOS updates at the time, showed AMD in the information about the update. Why they changed that to how they have it now, I don't know but is not good.

I know HPSA has a BIOS update for you, I think you should install it. When I installed mine, I thought that the update was going to clear the 1796 error and/or do the update that according to the description of the error MS was trying to do but couldn't do. Neither happened. Perhaps this error is a typical Event viewer error. Whenever and whatever I see in there, I always remember the Cry wolf fable and the moral of the story. And perhaps this is one that fooled me. I should have ignored it.

Bo

So, you installed your updates through HPSA? Using it doesn't lock your BIOS with some admin password or something, right? I ask because I had a horrible experience with one update for an old Acer I had, to unlock that was a pain... (Microsoft, you locking me out of my PC was a nasty move...)

bo elam · Oct 2, 2025

FerchogtX said:
So, you installed your updates through HPSA? Using it doesn't lock your BIOS with some admin password or something, right? I ask because I had a horrible experience with one update for an old Acer I had, to unlock that was a pain... (Microsoft, you locking me out of my PC was a nasty move...)

When I got the computer, I left HPSA for 2 days in the computer so it would download and install whatever it wanted. It installed about 15 updates. None caused an issue. I then uninstalled all HP programs that I thought it could be uninstalled.

Forty days later when I saw I was getting this error in the Event log, and one of the fixes according to the MS article that talks about the error said that installing a BIOS update was a fix, I figured I had to do the BIOS update. I knew about the BIOS update being available but had not installed it because as I said earlier, there were 2 new BIOS updates and it was not clear which update was the correct one for my computer, I felt about 99% sure which update was the right update but reinstalled HPSA so I would be 100% sure that I was installing the right one. Installing the BIOS update via HPSA has not caused any issue.

Bo

BamaInArk · Oct 2, 2025

In my specific case, without doing anything, my error stopped showing up. I see several TPM-WMIs being logged but all successful.

bo elam · Oct 2, 2025

BamaInArk said:
In my specific case, without doing anything, my error stopped showing up. I see several TPM-WMIs being logged but all successful.

That's why I said that perhaps I should have ignored this error. I also see those TPM WMS normal information events you are getting. They were also getting generated before fixing the error.

Bo

DarkShadowMD · Oct 3, 2025

bo elam said:
When I got the computer, I left HPSA for 2 days in the computer so it would download and install whatever it wanted. It installed about 15 updates. None caused an issue. I then uninstalled all HP programs that I thought it could be uninstalled.

Forty days later when I saw I was getting this error in the Event log, and one of the fixes according to the MS article that talks about the error said that installing a BIOS update was a fix, I figured I had to do the BIOS update. I knew about the BIOS update being available but had not installed it because as I said earlier, there were 2 new BIOS updates and it was not clear which update was the correct one for my computer, I felt about 99% sure which update was the right update but reinstalled HPSA so I would be 100% sure that I was installing the right one. Installing the BIOS update via HPSA has not caused any issue.

Bo

Welp, seems it's worth a try. pray for me lol.
Thanks mate!

bo elam · Oct 14, 2025

@FerchogtX @Alan Smithee After doing today's Windows update, the 1796 error is back. The question now is, I think, should I/we fix it again or leave it be. What you guys see in Event's log and what you think?

Bo

Try3 · Oct 14, 2025

bo elam said:
What you guys see in Event's log

I see lots of 1796 EventIDs.
Mine are all annotated with the fact that Secure boot is currently disabled on my computer.

bo elam said:
should I/we fix it again or leave it be

What evidence have you got that there is anything to be fixed?
I have studied this thread and there is nothing to indicate that any response is required at all.

Event viewer was not designed for our benefit and there is no documentation to explain its various entries.
I firmly believe that Event viewer can be a useful tool in investigating faults that have [operational] symptoms but the existence or otherwise of an entry in Event viewer is not sufficient reason to launch a fault investigation let alone take any action.

All the best,
Denis

bo elam · Oct 15, 2025

Try3 said:
What evidence have you got that there is anything to be fixed?
I have studied this thread and there is nothing to indicate that any response is required at all.

Appreciate your response, Denis. That is why in post 59 I said that "Perhaps this error is a typical Event viewer error. Whenever and whatever I see in there, I always remember the Cry wolf fable and the moral of the story. And perhaps this is one that fooled me. I should have ignored it.

Event Log Error TPM-WMI Event ID: 1796

Hi @zbook The picture below confirms again that Secure boot is On. Zbook, there is nothing wrong with my computer or most computers that are getting this 1796 error. The problem is the method that Windows updates uses to confirm if Secure boot is On or not. Their method is faulty. Their...

www.elevenforum.com

The problem though is that this error has to do with the expiration of the certificates, and that my friend, scares me. Scares me because BIOS and UEFI and Secure boot and that kind of stuff is not the stuff that I have learned about computers. I learned how to use my computers as if it was a TV, you turn it On and when you turn it Off it is clean. No viruses, no issues. period. But now, I have to protect myself from Microsoft and HP (W11) and Dell (W10). By the way, after today's update, in my W10, I started getting the TPM WMI Error 1801. The same error the poor guy you blew away in the other thread was asking about. I must say, that particular error makes more sense in my 7 years old W10 (abandoned by Dell) than in a newer W11.

Best wishes

Bo

BamaInArk · Oct 15, 2025

My TPM-WMI error message has returned. But instead of the 1796 one now it's showing 1801. The message basically states the "Secure Boot CA/keys need to be updated..."

Try3 · Oct 15, 2025

BamaInArk said:
My TPM-WMI error message has returned ... now it's showing 1801

There's a thread about 1801 at

Error 1801 Telling me to update my Secure Boot CA/Keys?

This came up ever since I installed the latest Windows Update today. Should I be concerned? Should I do anything? Anyone else getting this?

www.elevenforum.com

Denis

bo elam · Oct 15, 2025

BamaInArk said:
My TPM-WMI error message has returned. But instead of the 1796 one now it's showing 1801. The message basically states the "Secure Boot CA/keys need to be updated..."

I am getting the 1801 message in my W10. I read that message as MS blaming the manufacturer. In my W10, the manufacturer is Dell and Dell is mentioned in the message. Perhaps MS and manufacturers are going to start playing the blame game.

Bo

DarkShadowMD · Oct 18, 2025

Man... this is a true mess... once again lol.
I'll keep watching and see if I need to update my BIOS

Solved Event Log Error TPM-WMI Event ID: 1796

Active member

My Computer

Well-known member

My Computer

Peaceful Citizen

My Computers

Active member

My Computer

Well-known member

My Computer

Active member

My Computer

Peaceful Citizen

My Computers

Active member

My Computer

Well-known member

My Computer

Active member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Active member

My Computer

Peaceful Citizen

My Computers

Similar threads