secure boot firmware issue

[nordicprophet]

Hello,

I have an HP Pavilion Gaming Desktop TG01-0023w (product number 6YR56AA#ABA) with the Erica motherboard, SSID 8643, and AMI BIOS F.47.

I'm experiencing a Secure Boot firmware problem:

• BIOS reports Secure Boot Enabled, but Windows reports Secure Boot State: Off.

• Get-SecureBootUEFI -Name PK returns “Variable is currently undefined.”

• Get-SecureBootUEFI -Name SetupMode returns {1}, indicating the system is in Setup Mode.

• The KEK variable exists.

• Loading HP Factory Default Keys does not enroll the Platform Key.

• I tried the factory-key procedure with TPM enabled and disabled, and I also completed HP BIOS recovery using Windows + B. The BIOS remains F.47, and the issue persists.

• My AMD fTPM firmware is 3.90.0.5.

Please escalate this as a firmware key-enrollment issue for the Erica 8643 motherboard. I need to know whether HP has a supported procedure to restore the Platform Key or a firmware update that addresses this issue. Simply repeating the standard Secure Boot setup instructions will not resolve it.

Thank you.

[Rita_R2]

Hi, @nordicprophet, Welcome to the HP Support.

I will be more than happy to help you. while I am an HP employee, the views expressed here are my own and may not necessarily reflect the views of HP. By sharing relevant video links, I aim to provide clear, practical guidance in an easy-to-follow format. These tailored video resources are designed to address queries more effectively and enhance understanding. I hope you find them helpful as well.

Here is the link which may help to resolve the issue: 

Test Your HP Computer Hardware Using HP PC Hardware Diagnostics UEFI | HP Computers | HP Support

Do keep me posted. 

  

Take care and have a good day. 

Please click “Accepted Solution” if you feel my post solved your issue, it will help others find the solution. Click the “Kudos/Thumbs Up" on the bottom right to say “Thanks” for helping! 

RITA_R2

HP Support 

[nordicprophet]

Thank you for your response. I understand that HP PC Hardware Diagnostics can test the computer’s hardware, but my issue appears to be with Secure Boot firmware key enrollment rather than a hardware failure.

I have already tried loading HP Factory Default Keys, clearing the TPM using the BIOS procedure, and performing HP BIOS recovery with Windows + B.

The issue persists:

• Get-SecureBootUEFI -Name PK returns “Variable is currently undefined.”
• Get-SecureBootUEFI -Name SetupMode returns {1}.
• Get-SecureBootUEFI -Name KEK confirms that KEK exists.
• Windows reports Secure Boot State: Off.

Could you please escalate this to someone who can address UEFI Secure Boot key enrollment on my HP Pavilion Gaming TG01-0023w, motherboard SSID 8643, BIOS F.47? I need to know whether there is a supported way to restore the missing Platform Key, not another general hardware diagnostic.