Persistent Secure Boot Violation – Platform Key Failure on OMEN 30L (Board ID 8876) after BIOS F.24

[Quellist1]

Problem: Every time Secure Boot is enabled, the system displays: “Secure Boot Violation – Invalid signature detected. Check Secure Boot Policy in Setup.”

Windows (msinfo32) continues to report Secure Boot State: Off, even when BIOS shows Secure Boot Enabled and Platform Key Enrolled.

Steps already performed (multiple times, including after the F.24 update):

• Full BIOS Recovery (Windows key + B)
• Clear All Secure Boot Keys
• Load HP Factory Default Keys
• Toggle Secure Boot On/Off with full power cycles
• TPM disable → Clear TPM → re-enable sequence
• F1 “Clear and Reset the TPM” on the TPM Security Data Change screen
• BIOS updated successfully to F.24 Rev.A

Despite all of the above (including a clean key load sequence on the new F.24 BIOS), the Secure Boot Violation returns immediately and the Platform Key does not persist correctly.

This appears to be a known firmware/NVRAM issue affecting some 8876 (Hana) motherboards. I have exhausted all user-level solutions. Secure boot was enabled and fine until a bios update through the hp support app. Your app, as well as your website is showing a 4 YEAR OLD bios version (F.13 Rev.A from 2022), pushing this version through your support app is what caused this issue. It is directly due to this incompetence that my motherboard was corrupted and can no longer go into secure boot.  F.13 Rev.A from 2022

Request: Please escalate this case to the BIOS/firmware engineering team, and authorize a motherboard replacement. A replacement board is the only remaining reliable fix for this specific failure.

Thank you for your assistance.

[BeemerBiker]

Your GT13-1000a is not in the this list (yet) so you should be able to get it to work.

Here is the correct sequence as best as I can determine

To set up Secure Boot keys on an HP Omen 30L GT13 after a BIOS update, you need to

Steps to Configure Secure Boot Keys

1. Enter BIOS: Turn on your PC and repeatedly press the F10 key to open the BIOS setup utility.
2. Disable and Clear TPM:
• Navigate to the security or advanced settings tab to find the TPM State.
• Set TPM State to Disabled and select Clear TPM: Yes.
3. Load Factory Keys and Enable Secure Boot:
• Turn the PC back on and press F10 to re-enter the BIOS.
• Navigate to the Boot Options or Security tab where Secure Boot is located.
• Select Load HP Factory Default Keys.
• Change the Secure Boot setting to Enabled.
4. Re-enable TPM:
• Power on the PC and press F10 one last time to enter the BIOS.
• Re-enable the TPM State and set Clear TPM:  No.

This might be useful

https://h30434.www3.hp.com/t5/Gaming-Desktops/FIX-for-Secure-Boot-quot-Off-quot-Platform-Key-Not-Enr...

[Quellist1]

Tried that a few times. Tried just about everything on every obscure reddit post, then had grok scour the internet and