Secure Boot Platform Key not enrolled after BIOS F39 update

[alemoz79]

I have an HP OMEN 25L GT15 desktop. After updating BIOS from F35 to F39 using HP Support Assistant, Secure Boot is enabled in BIOS, but Platform Key shows Not Enrolled. In Windows, MSInfo32 shows Secure Boot state off. TPM dot MSC says compatible TPM cannot be found, even though BIOS shows TPM device available and state on. Riot Vanguard reports TPM 2.0 and Secure Boot not enabled. I previously loaded HP factory default Secure Boot keys and saved changes, but Platform Key remains Not Enrolled. Can anyone help me restore the Platform Key and get Windows to recognize the TPM?

[BeemerBiker]

See if this helps

• Go into the BIOS setup.
• Press F9 and any option that sets defaults on every menu of the BIOS.
• Ensure secure boot is enabled and the date and time are correct.
• If there is a boot option for UEFI chose UEFI.
• • Look for one of these options:
    • Restore Factory Keys
    • Load HP Factory Default Keys
    • Install Default Keys
  • Select that option and confirm.
• Save settings when exiting.

This is a guess:  Possibly that game finds that the TPM version does not support the minimum requirement to play and it simply reports there is no TPM.  Run msinfo32.exe in admin level and see if secure boot is enabled.

To quickly check if your TPM (Trusted Platform Module) is enabled, press Win + R, type tpm.msc, and hit Enter. If it’s active, the status will read "The TPM is ready for use". If it says "Compatible TPM cannot be found," your TPM is either disabled in your BIOS/UEFI or not present

[alemoz79]

Thanks for the suggestions. I checked those already. Secure Boot is enabled in the BIOS, the BIOS date and time are correct, and the system is using UEFI boot mode. I've also loaded the HP factory default secure boot keys multiple times and saved the changes each time, but the platform key still shows 'Not Enrolled.' In Windows, MSInfo32 reports Secure Boot state off, TPM dot MSC reports 'compatible TPM cannot be found,' and Windows Security under device security only shows core isolation and says standard hardware security not supported. This started after updating the BIOS from F35 to F39 using HP Support Assistant. Riot Vanguard now reports TPM2.0 and Secure Boot not enabled. Is there a known issue with BIOS F39 or another recovery procedure I should try to restore the platform key and get Windows to recognize the TPM?

[BeemerBiker]

I looked at this bios simulator for the 25L, does it match what you see?

At security I see the following

That "hidden" is suspicious.

Try a CMOS reset.

Follow the steps below to reset computer CMOS data.

1. Turn off the computer.
2. Press and hold the Windows and the V keys.
3. While still pressing those keys, press and hold down the Power button on the computer for 2-3 seconds.
4. Release all the keys.
5. At the completion of a successful CMOS reset, a message showing CMOS Reset (502) will be displayed.
6. Restart the computer.
7. Press F10 to get in to bios. Check Date and time.
8. Press F9 to set bios defaults. Ensure secure boot is enabled.
9. save setting when you exit

If you do not see that 502 message then :

• Turn on the computer by holding the power button down for 20 full seconds then release.
• Press the Power button one more time (if necessary) to start the computer.
• Tap the ESC key about once a second after you see the LEDs on the keyboard flash.
• Do steps 7-9 above

Let me know what you find out.

[edit] - possibly there is a jumper to do the CMOS reset since you have a desktop and not a laptop..  I am also guessing the upgrade to the bios failed to clear settings left over from the previous bios.  A cmos reset fixes that.