need help for secure boot

[Christmasxx]

Hi, I have an HP OMEN 30L GT13-1174 with motherboard/baseboard 8876.

I’m trying to enable Secure Boot for Call of Duty. My BIOS is updated to F.23. TPM 2.0 is enabled and ready for use, and BIOS Mode is UEFI.

The BIOS shows Secure Boot as Enabled, but Platform Key (PK) remains “Not Enrolled.” I have already used “Load HP Factory Default Keys” and saved/rebooted, but the Platform Key still isn’t enrolled. Windows msinfo32 still reports Secure Boot State as Off.

What is the correct HP procedure to enroll the factory Secure Boot keys on this system?

[Bill_To]

Greetings @Christmasxx 

Check out this Thread which explains how to fix the Windows 2023 security certificate/firmware (PK) database problem.

Your PC is using BIOS version F.23.

Note: GT13-1000a and GT12-1000a PCs use the identical 8876 MB.

A generic HP 8876 MB BIOS version update to F.24 is available Here. F.24 updates the TPM to the latest version required to play certain games.

You could try the workaround using F.23. But BIOS version F.23 may then throw a TPM attestation error instead of a Secure Boot error.

Or do BIOS version F.24. It's your choice.

Regards