Secure Boot

[Trevor38Smith]

OMEN 30L Desktop GT13-1xxx, motherboard HP 8876 v11, BIOS AMI F.24 dated 10/08/2025. Secure Boot is enabled in BIOS, but Windows reports Secure Boot State Off. Get-SecureBootUEFI -Name PK returns 0xC0000100 (PK undefined). KEK and db are present, and SetupMode is 1. Loading HP Factory Default Keys does not enroll the PK. TPM 2.0, UEFI, and GPT are working correctly. I need Secure Boot working for VALORANT and Call of Duty. It also shows that in BIOS my secure boot in grayed out.

[Venom21]

In BIOS, set any easy supervisor password which you can remember easily and then secure boot option will be available. Toggle it to ON then save and exit, and check

In short:

1. Enter BIOS
2. Open Security
3. Choose Set Administrator Password or Set Supervisor Password.
4. Create a password you will not forget.
5. save and reboot.
6. Enter BIOS again, It may ask for same password
7. Go to Boot Options/Secure Boot.
8. Select Load HP Factory Default Keys.
9. Save, reboot into BIOS again, and set Secure Boot to Enabled
10. same and exit and play games