Secure Boot Not Working and Platform Key Missing

[Bolt_B]

I first started having an issue in October 2025 when I noticed secure boot was not working and in BIOS, the platform keys were missing. I applied BIOS update F.39, but the behavior that I noted still was occurring exactly as before. That is, no matter what I try to do, the platform key is missing and will not load; and the secure boot, even though turned on in BIOS, will be off by the time Windows loads.

Subsequently, I did notice something in Event Viewer, that I assume might be related but am not positive. It says:

"Secure Boot certificates have been updated but are not yet applied to the device firmware. Review the published guidance to complete the update and ensure full protection. This device signature information is included here." This event has been recorded in Windows Event Viewer for approximately 2 months.

Without trying to sound angry, I have been waiting patiently for this issue to be resolved for 5 months so it is a bit frustrating. Given the looming security certificate deadline and the lack of secure boot function, which is supposed to be an integral part of Windows 11 security, I was wondering if anyone had information on a resolution to this issue.

Thanks,

Bolt_B

[Jerry_57]

Hi @Bolt_B,

Welcome to the HP Support Community.

Thank you for posting your query. I will be glad to help you.

 I understand you're experiencing a problem with Secure Boot and Platform Keys missing on your HP device. Here's some guidance based on the latest information about Secure Boot:

Confirm BIOS Update: Ensure that the BIOS version you have installed is the latest available for your HP model. Official HP® Support. Sometimes, issues are resolved in subsequent updates.

Reset Secure Boot Keys: Follow the steps to reset or clear the Secure Boot keys:
 

• Turn on or restart the computer and quickly press Esc.
   
• Select the Security menu, select Secure Boot Configuration, and follow the on-screen instructions.
   
• At the Secure Boot Configuration window, select Secure Boot, select Clear Secure Boot Keys, and follow the on-screen instructions to continue.

Custom Secure Boot Keys: If you have created Custom Secure Boot Keys previously, ensure that they are properly set and not causing conflicts. You may need to clear them and set the default keys.

Troubleshooting Unresponsive Secure Boot: Sometimes the issue persists due to improper key management. Check your BIOS for the correct enabling of Secure Boot and configuration of the Platform key. 

I hope this will help.

 

Take care and have a good day.

Please click “Accepted Solution” if you feel my post solved your issue, as it will help others find the solution. Click the “Kudos/Thumbs Up" on the bottom right to say “Thanks” for helping! 

Jerry_57
HP Support

[Bolt_B]

Hi Jerry, thanks for your message.  I am at F.39 which is the latest BIOS for my system. I could not access the Security menu after Esc as that is not an option for my pc.  However, I did enter the BIOS by pressing F10 and went to the Secure Boot section. The only way I can Clear the Secure Boot keys is to turn Secure Boot off in the menu. Anyway, when I get to that step, a dialogue box states that there are no keys in the database. This is further evidenced by the fact that no matter what I do, at the Secure Boot menu, it says, "Platform Keys Not Enrolled." Trying to load the default HP keys does not fix this.  If it helps any, I started noticing this behavior at BIOS F.38.  I can only speculate that something happened at this point.  Going to F.39 when it was issued did not fix the problem.  I have tried:

-Ensuring that Windows is updated and any updates by HP are installed

-Making sure the Mode is UEFI

-Loading the defaults in BIOS

-Loading default HP keys in BIOS

-Resetting to factory settings in BIOS

-Clearing the TPM in both the BIOS and Windows

-Clearing the CMOS

-Unplugging electrical cord and depressing the power button to clear

-Installing the BIOS from a USB stick

-Reinstalling with the standalone Windows executable

When entering the BIOS, the Secure Boot is always greyed out, so if you load with default HP keys, it then makes the secure boot available for changing. However, as mentioned, when Windows boots up it never ends up recognizing the secure boot as “on” (determined by msinfo32.exe).

The one constant I see (other than the obvious, i.e., secure boot does not seem to be working), is that the Platform Key in the BIOS always says “not enrolled” and the cursor passes over it so there is no option to do anything. 

Thanks,

Bolt_B

[Jerry_57]

Hi @Bolt_B,

Thank you for your response.

We have sent a private message.

To access your private messages, simply click the private message icon on the upper right corner of your HP Support Community profile, next to your profile and send a private message to me with the serial number, because we value your privacy.
 

Jerry_57

HP Support

[Schwertle]

Workaround for "Platform Key Not Enrolled" issue on AMD-based HP systems

System: HP Pavilion Gaming Desktop TG01-2032nt PC (434P2EA) BIOS: F.39

Here are the steps that worked for me:

1. Boot the PC → press F10 to enter BIOS → set TPM State to Disabled and Clear TPM: Yes → press F10 to save, then shut down and power on again.

2. Press F10 to enter BIOS again → apply "Load HP Factory Default Keys" and set Secure Boot to Enabled → press F10 to save, then shut down and power on again.

3. Press F10 to enter BIOS once more → set TPM State to Enabled and Clear TPM: No → press F10 to save, then shut down and power on again.

4. Once back in Windows, run msinfo32 — you should now see Secure Boot State: ON.

In short: Temporarily disable the TPM, enable Secure Boot so the Platform Keys get enrolled, then re-enable the TPM. A restart is required between each step.

Note: Both HP Türkiye technical support and the global HP X support account were unable to provide a solution for this issue. I figured out this workaround on my own, so I'm sharing it here in case it helps others facing the same problem.

If this works for you, please share your feedback so others can evaluate it as well.

---

[Bolt_B]

Schwertle,

Sorry for the delay in responding, I was away for a while.  I very much appreciate that you took it upon yourself to provide this procedure.  Unfortunately, it does not appear to be working for me.  And I tried a couple of variations on your procedure and it still is not working.  The issue is that the platform key is not enrolling no matter what I try.

As for HP support, all I can get from them is that my machine is no longer covered by warranty so tough luck.  That peeves me a bit because it was their BIOS update that caused the issue in the first place.  No complaint against you, just venting toward HP.

Anyway, again thank you.  I will keep chipping away at it and see if I can find something that works.

Bolt_B