TPM-WMI error

Secure Boot CA/keys need to be updated. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:ASUSTeK COMPUTER INC.;FirmwareManufacturer:American Megatrends Inc.;FirmwareVersion:1820;OEMModelBaseBoard:TUF GAMING B760-PLUS WIFI;OEMManufacturerName:ASUS;OSArchitecture:amd64;
BucketId: f75d9e23a0002b2c64259dcab032413bb8132c0abaf73fa4393de976cadfd485
BucketConfidenceLevel:
UpdateType: 0
HResult: The operation completed successfully.

Anything that needs to be updated?

C:\WINDOWS\system32> Confirm-SecureBootUEFI
True
PS C:\WINDOWS\system32> Get-Tpm


TpmPresent : True
TpmReady : True
TpmEnabled : True
TpmActivated : True
TpmOwned : True
RestartPending : True
ManufacturerId : 1229870147
PpiVersion : 1.3
ManufacturerIdTxt : INTC
ManufacturerVersion : 600.18.35.2557
ManufacturerVersionFull20 : 600.18.35.2557
ManagedAuthLevel : Full
OwnerAuth :
OwnerClearDisabled : False
AutoProvisioning : Enabled
LockedOut : False
LockoutHealTime : 2 hours
LockoutCount : 0
LockoutMax : 32
SelfTest : {}

In powershell console opened as administrator, you must run the following commands, one at a time:

>> Set-ItemProperty -Path “HKLM:\SYSTEM\CurrentControlSet\Control\SecureBoot” -Name “AvailableUpdates” -Value 0x40

>> Start-ScheduledTask -TaskName “\Microsoft\Windows\PI\Secure-Boot-Update”

After you run the commands, you have to restart your PC twice for the update to take effect.

To check if the update is successful, you must run the following command in a powershell console with admin privileges:

>> [System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match "Windows UEFI CA 2023"

This command should return the value TRUE. The below screenshot is from my PC. It returned a True value.

Click to expand...

this is from this thread on this forum.

best of luck Steve ..

XxXxX said:

this is from this thread on this forum.

Did you manually update your Secure Boot Keys ?

Hi. Current Microsoft Secure Boot Keys will expire in 2026. Therefore, it may be advisable to update the keys manually in advance. I did the update and it was successful. If you have bitlocker enabled, you are advised to save your bitlocker keys. You will need them after the secure boot key...

www.elevenforum.com

best of luck Steve ..

Click to expand...

Should not Microsoft have any guide or info for this?

user1010 said:

Should not Microsoft have any guide or info for this?

Click to expand...

This link is also in that thread previously referenced.

Same here

The TPM-WMI message, is a known issue. It appears be to benign, like the one some updates ago about failing to find Pluton.

The message, even with the level being an error, has the following message at the end: