hp oneagent

HP OneAgent is an OEM-supplied system management and telemetry agent running on modern HP commercial devices, delivering diagnostics, telemetry, and over-the-air (OTA) softpaq updates. A recent silent OTA update for a subset of HP's new AI PC laptops accidentally removed Microsoft-issued certificates, severing devices' trust with Microsoft Entra ID. This forced HP to pull the patch and assist affected customers, leaving IT teams re-evaluating vendor-supplied background updates. The incident highlights risks in automated OEM update processes and their impact on enterprise identity and security configurations.