Secure boot not recognized in Windows settings

[ItsDaBugs]

Hi, so I'm using a littler older Omen desktop... Product #:33T57AA running Windows 11

I, and others, are having issues with the Secure Boot option in the BIOS boot settings. 

Initially, Secure Boot is greyed out, but by default, on. Loading HP secure keys from the bios allows me to toggle it on or off.

In the Microsoft Information App, Secure Boot is showing as OFF, even though its on in BIOS. 

I need to enable this for both security reasons and for games that i'm trying to play. Mind you, ive never had an issue before until Steam had informed me that it was disabled. Is there any way to get it to enable? 
I'm open to performing a factory reset on my PC, but would rather not if its not a guaranteed fix and solution to my problem.

Everything is up to date, including Windows updates, BIOS updates... Everything. 

[Kuroi_Kenshi]

Hi @ItsDaBugs,

Welcome to the HP Support Community!

Thanks for reaching out!

We're thrilled to have the opportunity to assist you and provide a solution.

I understand your OMEN Desktop (Product #: 33T57AA) shows Secure Boot enabled in BIOS, but Windows reports it as OFF, preventing certain security features and games from working properly. Let’s go through a few steps to isolate and resolve this issue.

a. Confirm UEFI Boot Mode

Restart your PC and tap F10 to enter BIOS Setup.

Navigate to Boot Options → ensure Legacy Support is Disabled and UEFI Boot Mode is Enabled.

Secure Boot requires UEFI mode — if the system is running in Legacy (CSM) mode, Windows will not detect Secure Boot even if it’s on.

Save changes and exit.

b. Reinstall Factory Secure Boot Keys

In BIOS, go to Security → Secure Boot Configuration.

Choose Clear Secure Boot Keys, then Install Factory Default Keys (HP Secure Keys).

Save and exit BIOS, then reboot back into BIOS to confirm Secure Boot is set to Enabled.

c. Check Disk Partition Style

In Windows, open Disk Management (press Win + X → Disk Management).

Right-click your system disk → Properties → Volumes tab.

Check if Partition Style is GPT (GUID Partition Table).

If it says MBR, Secure Boot cannot be fully recognized — you’ll need to convert the drive to GPT for Secure Boot to function.
(You can convert safely using the built-in mbr2gpt tool, but always back up data first.)

d. Verify Secure Boot State in System Information

Press Win + R, type msinfo32, and press Enter.

Look for:

BIOS Mode: UEFI

Secure Boot State: On

If BIOS Mode shows Legacy, that confirms the issue lies with the boot configuration.

e. Check TPM and BitLocker Settings

Secure Boot often pairs with TPM for full verification.

Press Win + R → type tpm.msc → press Enter.

Confirm Status: The TPM is ready for use.

If TPM is disabled, go to BIOS → Security → TPM Device → set to Available

I hope this helps.

I'm glad I could help! 😊 If this resolved your issue, please mark it as "Accepted Solution" and click "Yes" on "Was this reply helpful?" Your feedback not only keeps us going but also helps others find the solution faster! 👍✨

Take care and have an amazing day ahead! 🚀

Best regards,