Secure Boot

[Rekkels]

I'm having issues with turning secure boot on. It's greyed out and says it's enabled, but when I check with msinfo3, it says the Secure Boot State is off. I've tried resetting security defaults and loading new keys, but when I reboot, it just reverts to how it was originally. My BIOS is F47, Legacy Support is disabled, I tried setting an admin password. Nothing seems to work.

[Hawks_Eye]

Hi @Rekkels 

Welcome to the HP Support Community! We're here to help you get back up and running.

Thank you for sharing those details, and I appreciate the troubleshooting you've already completed, including:

• Verifying that Legacy Support is disabled
• Checking that the BIOS reports Secure Boot as enabled
• Trying Restore Security Defaults
• Loading new Secure Boot keys
• Setting an administrator password
• Confirming the system is running BIOS F.47

Based on what you've described, there appears to be a mismatch between what the BIOS is reporting and what Windows is showing in System Information (msinfo32), so I'd like to understand the setup a little better before suggesting specific troubleshooting steps.

Could you please provide:

The full HP product number or model name

• Example: HP Victus 15-faxxxx, HP Pavilion Gaming TG01-xxxx, HP OMEN 16-xxxx, etc.

Which version of Windows are you using?

• Windows 10 or Windows 11
• If possible, the Windows build number (winver).

In msinfo32, what does it show for:

• BIOS Mode (UEFI or Legacy)
• Secure Boot State (you mentioned Off)
• Device Encryption Support (if listed)

Did Secure Boot previously work on this system, or are you enabling it for the first time?

Have you made any changes recently such as:

• BIOS update
• Drive cloning
• SSD replacement
• Windows reinstallation

When you enter BIOS, is the Secure Boot option:

• Greyed out but showing Enabled
• Greyed out and showing Disabled
• Or selectable but not saving changes after reboot?

If available in BIOS, do you see an option related to:

• Clear Secure Boot Keys
• Custom Mode / Standard Mode
• PK (Platform Key) State

With the model information and the answers above, I can help determine whether this is a BIOS configuration issue, a Secure Boot key enrollment issue, or a Windows reporting issue.

We're looking forward to helping you get back up and running! 

Regards, 

Hawks_Eye

Note: Do not share any of your personal information in public, such as serial number, phone number, email ID, etc.

[Rekkels]

I'm using an HP Pavilion Gaming TG01-0023w on Windows 11. BIOS mode is on UEFI, and the device encryption support says elevation is required to view. Before this, I do not know if i had secure boot on or not. The latest changes I've made have been upgrading to Windows 11 and updating my BIOS some time after. Secure Boot in BIOS says it's enabled but greyed out. I do see clear Secure Boot keys and Platform Keys, and it is not enrolled with the clear Secure Boot keys greyed out.