HP’s silent OneAgent update for a subset of its new “AI PC” laptops accidentally removed Microsoft-issued certificates and, in some cases, severed devices’ trust with Microsoft Entra ID — forcing HP to pull the patch, assist affected customers, and leave IT teams re-checking their assumptions...