In 8.0, UEFI installs only supported SRTM. This is an issue when upgrading to 9.0, which supports DRTM+SRTM. It isn't possible to forward seal completely because the DRTM PCRs 17,18, and 19 require a DRTM boot to accurately predict their values upon the subsequent boot. On an SRTM-only boot, these PCRs are all f's, which makes prediction impossible. The issue manifests after the upgrade by displaying the measurement failed. Resealing at this screen resolves the issue.