Secure boot off. Platform keys show not enrolled

[MrHarris93]

I Have upgraded to the latest bios, but when I did my security boot turned off. I have tried re-enabling it. Nothing seems to work.  I have reset hp factory keys, and reset the security. I can turn the security boot on, but as soon as i leave the bios and run msinfo32 it still says it off.  When i do turn the secure boot on i see that the platform keys are not enrolled. Can someone please help me fix this?

[Bill_To]

Greetings @MrHarris93 

Opinions or troubleshooting suggestions in this response are provided independently. I am not employed by: HP, Inc. or the HP Forum.

I'm very sorry. HP has placed your TG01-2000a PC, aka TG01-2xxxa PC, into "Legacy" end of development status (EOD).

EOD means your PC will not receive future BIOS updates.

Please refer to this HP document for details.

Your PC's Secure Boot problem would require a future BIOS update.

And your PC also has a TPM 2.0 version problem which requires a future BIOS update.

This suggests your PC will become less secure over time. Windows may not be able to apply the latest 2023 security certificates without a firmware update.

And you will not be able to play games requiring a newer TPM 2.0 version.

You might be able to workaround the Secure Boot problem. I don't know if this workaround will work on a Legacy PC.

The Secure Boot workaround is available at this HP Forum Link. Do this workaround at your own risk. You really should back up system drive data before trying the workaround.

The TPM version problem requires a future BIOS update.

Regards