Secure Boot

[iam_seventenog]

Hello ive contacted Hp Support through twitter and everytime i type in through msinfo32 secure boot says it is off ive reset the keys multiple times ive loaded the keys ive done everything physically possible in my power to get this to work and i can not play black ops 7 i also have GPT on my main disc drive as well at this point i have fully givin up ive tried this issue for the past 4 years to get this to work and it refuses to work 

[VikramTheGreat · Accepted solution]

Hi @iam_seventenog,

Welcome to the HP Support Community.
 

Thank you for posting your query. I will be glad to help you.

I’m really sorry you’ve been dealing with this for so long. I can hear how exhausting and discouraging this has been, especially after 4 years of trying everything and still being blocked from playing the game. To address the issue where Secure Boot shows OFF in msinfo32 even after keys are loaded, preventing games such as Call of Duty / Black Ops from launching.
 

Please follow the steps exactly and in order.

Step 1: Verify Secure Boot and Boot Mode in HP BIOS

1. Power off the computer.
2. Power it back on and immediately press F10 repeatedly to open HP Computer Setup (BIOS).
3. Navigate to Boot Options or Security > Secure Boot Configuration.
4. Confirm all of the following: 
   • Legacy Support: Disabled
   • Boot Mode: UEFI Native
   • Secure Boot: Enabled

⚠️ If Legacy Support is enabled, Windows cannot report Secure Boot as ON.

Step 2: Restore HP Factory Secure Boot Keys

1. While still in BIOS, go to: Security > Secure Boot Configuration
2. Select Restore Factory Keys or Load HP Default Secure Boot Keys.
3. Confirm the action when prompted.
4. Save changes and exit BIOS.

✅ This ensures the Platform Key (PK), Key Exchange Keys (KEK), and DB are correctly installed.

Step 3: Confirm TPM Is Enabled (Required)

1. Re‑enter BIOS (F10).
2. Go to Security > TPM Embedded Security (menu names vary by model).
3. Ensure:  
   • TPM Device: Enabled
   • TPM State: Enabled

Save and exit BIOS.

Step 4: Confirm Windows Is Installed in UEFI Mode

1. Boot into Windows.
2. Press Windows + R, type msinfo32, and press Enter.
3. Verify:  
   • BIOS Mode: UEFI
   • Secure Boot State: (Check the value)

⚠️ If BIOS Mode is not UEFI, Secure Boot will always show OFF.

Step 5: Confirm System Disk Uses GPT

1. Right‑click Start → Disk Management.
2. Right‑click Disk 0 → Properties → Volumes tab.
3. Confirm:  
   • Partition style: GUID Partition Table (GPT)

I hope this helps.

Take care and have an amazing day!