HP pulls update that broke Microsoft Entra ID auth on some AI PCs

An HP OneAgent over-the-air update for select HP AI PCs included a cleanup script that searched for and removed certificates containing the substring "1E", which in some cases matched tenant-specific "MS-Organization-Access" certificates. The deletion caused affected Windows devices to lose their Entra ID (Azure AD) trust and prevented users from authenticating; HP pulled the update and provided mitigation assistance, while impacted devices require manual re-enrollment or remote remediation via Microsoft Defender Live Response.