How to Fix UEFI2023Status Stuck at “In Progress” or “Not Started” on Windows 11

The UEFI2023Status value is associated with Microsoft’s Secure Boot certificate update process introduced to strengthen protection against vulnerable bootloaders. As part of Windows security updates, your PC may report the UEFI2023Status as “In Progress” or “Not Started”, indicating that the Secure Boot update has not yet been completed. While this doesn’t always affect the normal operation of your computer, it can prevent your system from receiving the latest Secure Boot protections.

This issue can occur for several reasons, including pending Windows updates, Secure Boot being disabled, outdated UEFI/BIOS firmware, unsupported hardware, or incomplete update installation. In some cases, Windows simply hasn’t completed the required background tasks needed to apply the Secure Boot revocation update.

In this guide, we’ll walk you through the most effective methods to fix UEFI2023Status stuck at “In Progress” or “Not Started” on Windows 11.

How to Fix UEFI2023Status Stuck at “In Progress” or “Not Started”

Before you begin, make sure you’re signed in with an administrator account and that your PC supports UEFI and Secure Boot. Since several of the following methods involve updating Windows or changing UEFI settings, it’s also a good idea to back up important files before making any major system changes. Follow the solutions below in order until the UEFI2023Status updates successfully.

1. Install All Pending Windows Updates

Microsoft delivers Secure Boot certificate updates through Windows Update, so installing the latest updates should be your first step.

1. Press Windows + I to open Settings.
2. Select Windows Update.
3. Click Check for updates.
4. Download and install all available updates.
5. Restart your computer when prompted.
6. Check whether the UEFI2023Status has changed.

Installing the latest cumulative and security updates ensures your PC has all the files required for the Secure Boot update.

2. Restart Your PC Multiple Times

Some Secure Boot updates are applied during the boot process rather than while Windows is running.

1. Save your work.
2. Restart your PC.
3. Allow Windows to boot completely.
4. Restart the computer one or two more times if necessary.
5. Check the update status again.

Multiple restarts can help Windows complete pending firmware-related operations.

3. Verify That Secure Boot Is Enabled

If Secure Boot is disabled, Windows may be unable to complete the UEFI security update.

1. Press Windows + R, type msinfo32, and press Enter.
2. In System Information, locate Secure Boot State.
3. Confirm that it displays On.
4. If it shows Off, restart your PC and enter the UEFI/BIOS setup.
5. Enable Secure Boot.
6. Save the changes and restart Windows.

Secure Boot must be enabled for the Secure Boot certificate update to be applied.

4. Check Your UEFI/BIOS Version

Older firmware versions may not fully support Microsoft’s latest Secure Boot updates.

1. Press Windows + R.
2. Type msinfo32 and press Enter.
3. Note the BIOS Version/Date.
4. Visit your PC or motherboard manufacturer’s support website.
5. Compare your current firmware version with the latest available release.
6. Update the BIOS if a newer version is available.

Updating the firmware can improve compatibility with Windows security updates.

5. Verify TPM Is Enabled

Trusted Platform Module (TPM) is another important security component that works alongside Secure Boot.

1. Press Windows + R.
2. Type tpm.msc and press Enter.
3. Verify that TPM is present and ready for use.
4. If TPM is disabled, enable it from the UEFI/BIOS settings.
5. Restart your PC.

Although TPM doesn’t directly control UEFI2023Status, ensuring all Windows 11 security features are enabled can help prevent update issues.

6. Run the Windows Update Troubleshooter

The built-in troubleshooter can detect and repair common Windows Update problems.

1. Open Settings.
2. Navigate to System > Troubleshoot > Other troubleshooters.
3. Find Windows Update.
4. Click Run.
5. Follow the on-screen instructions.
6. Restart your PC if prompted.

Repairing Windows Update components may allow the Secure Boot update to install successfully.

7. Repair Corrupted System Files

Damaged system files can interfere with Windows security updates.

1. Open Command Prompt as Administrator.
2. Run the following command:

sfc /scannow

3. Wait for the scan to finish.

Next, run:

DISM /Online /Cleanup-Image /RestoreHealth

4. Restart your computer after both commands complete.

These utilities repair corrupted Windows components that may be preventing the update from finishing.

8. Check the Event Viewer for Update Errors

Windows records firmware and update-related events that may provide additional information.

1. Press Windows + X and select Event Viewer.
2. Expand Windows Logs.
3. Open System.
4. Look for warnings or errors related to Secure Boot, Windows Update, or firmware.
5. Review the event details for clues about the failure.

These logs can help identify the underlying cause of the stalled status.

9. Reset Windows Update Components

If Windows Update is corrupted, resetting its components can resolve installation problems.

1. Open Command Prompt as Administrator.
2. Stop the Windows Update services.
3. Rename the SoftwareDistribution and Catroot2 folders.
4. Restart the Windows Update services.
5. Reboot your PC.
6. Check for updates again.

Resetting the update cache forces Windows to download fresh update files.

10. Wait for Microsoft to Complete the Update Rollout

In some cases, the UEFI2023Status remains at “In Progress” or “Not Started” because Microsoft hasn’t yet completed the deployment for your specific hardware or firmware version.

1. Continue installing monthly Windows security updates.
2. Keep your BIOS and drivers updated.
3. Restart your PC regularly after installing updates.
4. Recheck the status after future Windows updates.

If there are no update errors and your system is fully up to date, the status may change automatically once Microsoft completes the rollout.

Conclusion

If the UEFI2023Status is stuck at “In Progress” or “Not Started”, the issue is usually related to pending Windows updates, Secure Boot configuration, outdated firmware, or incomplete Secure Boot certificate deployment. In most cases, installing the latest Windows updates, enabling Secure Boot, updating your UEFI/BIOS, and repairing Windows Update components are enough to resolve the problem.

If the status still doesn’t change after trying all the methods above, it may simply indicate that Microsoft hasn’t yet finalized the update for your device. Continue keeping your Windows 11 installation, BIOS firmware, and security updates current, and the Secure Boot update should eventually be applied automatically when it’s available for your system.