BIOS/NVRAM Secure Boot key corruption

[WilbeVega]

After updating/recovering BIOS on my HP OMEN 30L GT13, Secure Boot stopped functioning. BIOS shows “Platform Key: Not Enrolled” even with Secure Boot enabled and Legacy Support disabled. I already tried BIOS recovery, CMOS reset, loading HP factory keys, restoring security defaults, TPM reset, BIOS rollback/recovery, and reflashing BIOS. Windows still reports “Secure Boot State: Off” and games requiring Secure Boot no longer launch.

[Pallipurath]

Hi @WilbeVega 

Welcome to the HP Support Community.

Thank you for posting your query.

I understand that after updating the BIOS, you may encounter an issue where the platform key is not enrolled. This typically indicates that the UEFI variable table in the motherboard’s NVRAM has become corrupted. I would request you to please follow the steps:

I hear that Secure boot not working after the BIOS update.
Unfortunately, there is no reliable user-side fix. Still, you can try once again.

HP Factory Keys reload: In BIOS → Security → Secure Boot → Load HP Factory Default Keys. Some users report partial success, but it often resets after reboot.

TPM clear: Clear TPM in BIOS, then re-enable Secure Boot. This may reduce error prompts but doesn’t fix the missing key persistence.

Windows reinstall: A clean reinstall under UEFI mode sometimes forces Secure Boot recognition, but if the firmware doesn’t save keys, it won’t last.

Take care and have an amazing day!