BIOS Update F.38 Broke Secure Boot on HP Pav Gaming TG01-2400ng – Still Broken in F.39

[SapphireMirai]

I have an HP Pavilion Gaming Desktop TG01-2400ng (Product: 4E4R0EA) running Windows 11 Pro (Version 25H2, Build 26200.7840).

My PC worked perfectly for years until a few months ago. A new Call of Duty game prompted me to update to the latest BIOS version to meet system requirements. I updated to F.38 Rev.A. Since then, my Secure Boot function has been broken.

The issue:
When I enable Secure Boot in the BIOS and install the keys, save and restart, Secure Boot still shows as Off when I check in Windows (using msinfo32).

I recently updated to the latest BIOS version F.39 Rev.A, hoping it would fix the problem, but the issue remains exactly the same.

Has anyone else experienced this or found a workaround? Any help would be appreciated.

Thanks.

[SapphireMirai]

I found an error log related to Secure Boot in the system log, with the level "Error". I'll post it below. Since the original language is not English, the content below has been translated.

Updated Secure Boot certificates are available on this device but have not yet been applied to the firmware. Please review the published guidance to complete the update and maintain full protection. Signature information for this device is included here.
DeviceAttributes: FirmwareManufacturer:AMI;FirmwareVersion:F.39;OEMModelBaseBoard:8906;OEMManufacturerName:HP;OSArchitecture:amd64;
BucketId: 52e35ce99d9dd10bcc9d9c85896c9e141abd717edd54b21528a0b717f65325b3
BucketConfidenceLevel: Under Observation - More Data Needed
UpdateType:
For more information, see https://go.microsoft.com/fwlink/?linkid=2301018.

[Deep_World]

Hi @SapphireMirai,
 
Welcome to the HP Support Community!

Thanks for reaching out!

Sorry for the inconvenience caused don’t worry let me help you.

To better understand the issue, could you please provide a few more details?

• When you enable Secure Boot in BIOS, do you see any warning or error messages during boot?
• Have you made any hardware changes recently (new GPU, storage device, etc.) that might affect Secure Boot compatibility?

Here are a few troubleshooting steps you can try:

1. Reset BIOS to defaults
   Enter BIOS setup, load factory defaults, then re‑enable Secure Boot and reinstall the default keys.
2. Check Windows Secure Boot state
   Run msinfo32 and confirm if “Secure Boot State” shows as On.
3. UEFI vs Legacy Boot Mode
   Ensure your system is set to boot in UEFI mode only. If Legacy support is enabled, Secure Boot will not activate.

I hope this helps.

I'm glad I could help! 😊 If this resolved your issue, please mark it as "Accepted Solution" and click "Yes" on "Was this reply helpful?" Your feedback not only keeps us going but also helps others find the solution faster! 

Take care and have an amazing day ahead! 

Best regards,

Deep_World

[SapphireMirai]

Here is a screenshot of my BIOS interface. After I selected "Load HP Factory Default Keys" and saved and restarted the computer, Secure Boot still shows as not enabled in System Information (msinfo32). I have confirmed that my TPM 2.0 is enabled.

The only hardware changes I have made to the computer are replacing the original 16 GB RAM with two 16 GB modules for a total of 32 GB, and installing an additional SATA SSD.

[Deep_World]

Hi @SapphireMirai,

Thanks for your response, 

I understand how it must be to see Secure Boot remain disabled even after carefully updating your BIOS and restoring the factory keys. Thank you for sharing the details about your hardware changes  that helps rule out potential causes. Let’s work through this together.

Additional troubleshooting steps that you can try

• Clear and re‑enroll keys:
  • In BIOS, try selecting Clear Secure Boot Keys first, save and reboot, then go back in and select Load HP Factory Default Keys again.
• Check Boot Mode:
  • Verify that your system is set to boot in UEFI mode rather than Legacy. Secure Boot requires UEFI.
• Windows verification:
  • After making changes, open System Information (msinfo32) and confirm that “BIOS Mode” shows UEFI. If it shows Legacy, Secure Boot will not enable.
    
    I hope this helps.

I'm glad I could help! 😊 If this resolved your issue, please mark it as "Accepted Solution" and click "Yes" on "Was this reply helpful?" Your feedback not only keeps us going but also helps others find the solution faster! 

Take care and have an amazing day ahead! 

Best regards,

Deep_World. 

 

[SapphireMirai]

After restarting, the BIOS interface becomes like this, and clicking "Load HP Factory Default Keys" again has no effect. Secure Boot is still not enabled.

As for the boot mode, I am quite sure I am using UEFI boot mode, which you can also see in my screenshot.

[Deep_World]

Hi @SapphireMirai,

Thanks for your response. It looks like you’re still having issue with the unit.

I’m really sorry to hear about the trouble you’re experiencing with Secure Boot after updating your BIOS. I understand how important it is to have this feature working properly, and it’s frustrating when updates don’t resolve the issue.

Since Secure Boot is a critical security function and BIOS behavior can vary depending on system configuration, To get you the best assistance, we need to take this conversation to a private chat. We're inviting you to a private message to protect your privacy and ensure that any sensitive information remains confidential. 

To access your private message, just click the little blue envelope icon on the upper right corner of your HP Community profile, next to your profile name. Alternatively, you can click on this link. 

You can use this link as well: 

Private Messages - HP Support Community

We're looking forward to helping you resolve this issue! 

Stay tuned, and thanks for your patience! 

Best regards,

Deep_World