OMEN Obelisk 875-0127c TPM / Secure Boot Attestation Issue

[rd146]

Hello HP Support,

I am having a TPM and Secure Boot attestation issue on my OMEN Obelisk 875-0127c desktop that is preventing me from playing Fortnite Competitive.

My system information is:

• Model: OMEN Obelisk 875-0127c
• Product/SKU: 4NN77AA#ABA
• Motherboard/SSID: HP 84FD
• BIOS Version: F.35
• BIOS Mode: UEFI
• Secure Boot: Enabled
• TPM: TPM 2.0, ready, enabled, and activated
• Windows 11 Home

Windows confirms Secure Boot is working:

Confirm-SecureBootUEFI = True

However, Fortnite/Easy Anti-Cheat gives this error:

“TPM Attestation failed: Unable to verify Secure Boot. Event missing from Measured Bootlog.”

I also checked the Windows Measured Boot logs, and they show the following:

HealthStatus = Attestable
TcgLogFound = true
PcrsMatchTcgLog = true

But for Secure Boot:

ValueFromComputer = true
ValueFromTcgLog = false
DesiredValue = true
TcgValueIsVerifiable = true

Windows System Information also reports:

PCR7 Configuration: Binding Not Possible

So Secure Boot is enabled and recognized by Windows, but it appears that the HP BIOS/firmware is not correctly recording the Secure Boot state in the TCG Measured Boot log. Because of this mismatch, TPM attestation fails in applications that verify the measured boot log.

I am already using BIOS F.35, which appears to be the latest BIOS available for the HP 84FD motherboard.

Could you please escalate this to the BIOS/firmware engineering team and confirm:

1. Whether HP is aware of this TPM/Measured Boot issue on the 84FD motherboard.
2. Whether there is a newer BIOS or firmware update available.
3. Whether HP plans to release an update that correctly records Secure Boot in the TCG Measured Boot log.

I would appreciate any assistance or recommended firmware solution.

Thank you.

[Bill_To]

Greetings @rd146 

Opinions or troubleshooting suggestions in this response are provided independently. I am not employed by: HP, Inc. or the HP Forum.

- BIOS version F.35, 12-29-23, seems to be the latest BIOS version available.

- I'm pretty sure HP is aware of the firmware: TPM 2.0 version problem and the Secure Boot (PK) database problem.

- I don't believe HP will be providing a future BIOS update to correct the firmware problems you are having.

Your PC has an Intel EdorasDF MB. So far, I have not located an official document referencing HP's position with respect to older Intel MBs. However, HP is not providing TPM version updates for AMD MBs released for sale subsequent to, or around, the same time your Intel PC was released for sale.

Maybe a HP Support agent can provide official feedback.

Regards