Secure Boot

[TrevorB12]

 I have went through a long process with chat gpt and it didn't get anywhere, it recomended me to come in here and ask for help.

• Platform Key shows "Not Enrolled."

• Get-SecureBootUEFI -Name PK returns Variable is currently undefined: 0xC0000100.

• Secure Boot remains Off after BIOS recovery and loading HP Factory Default Keys.

[Pallipurath]

Hi @TrevorB12 

Welcome to the HP Support Community.

Thank you for posting your query.

I understand that you have already gone through extensive troubleshooting and that Secure Boot is still not functioning correctly on your HP system. Based on the information provided:

• The Platform Key (PK) shows "Not Enrolled".
• Running Get-SecureBootUEFI -Name PK returns "Variable is currently undefined: 0xC0000100".
• Secure Boot remains disabled even after a BIOS recovery and restoring the HP Factory Default Keys.

Under normal circumstances, restoring the factory default keys should re-enroll the Platform Key and allow Secure Boot to be enabled. Since this has not occurred, the behavior suggests that the Secure Boot variables may not be writing correctly to the system firmware.

I would request you to please follow the steps:

1. Restart the computer and press F10 repeatedly to enter the BIOS Setup.
2. Verify that the system is configured for UEFI mode and that Legacy Support is disabled, if the option is available.
3. Navigate to the Secure Boot Configuration menu and select Clear All Secure Boot Keys (if present). Save the changes and restart the system.
4. Re-enter the BIOS, return to the Secure Boot Configuration menu, and select Load HP Factory Default Keys or Restore Factory Security Keys.
5. Save the changes and restart the system.
6. Enter the BIOS once again and verify whether:
   • Secure Boot can now be enabled.
   • The Platform Key status can be changed from "Not Enrolled."

To assist you further, please provide the following details:

• The exact HP model name and Product ID.
• The current BIOS version installed on the device.
• Whether the issue started after a BIOS update, BIOS recovery, motherboard replacement, or any other hardware event.
• A photograph of the Secure Boot Configuration screen showing the Platform Key status.

Take care and have an amazing day!