BIOS reset

[meowymeow]

Installed Linux, system won't boot because EFI won't mount. Can't get into BIOS settings because admin password I don't have. I can't contact support because my device's serial number doesn't work; whenever I type it in it says my device does not exist. I am typing it correctly and I have tried substitutions for sections that may not be part of the serial.

[haythamkha]

Hi,

I understand the frustration, but I would separate this into two issues:

1. The Secure Boot / 3F0 boot problem.
2. The Windows PIN problem after changing Secure Boot/TPM-related state.

The CMOS reset is an important clue. If the date/time reverted to 1/1/2021, I would replace the CMOS battery first, then enter BIOS, set the correct date/time, load BIOS defaults, save, and reboot. An unstable CMOS state can cause repeated firmware/boot configuration problems.

After that, in BIOS I would check:

• Windows Boot Manager is first in the UEFI boot order.
• Legacy/CSM boot is disabled, if present.
• Secure Boot factory/default keys are restored.
• The system date and time remain correct after unplugging power.

I would not clear the TPM or Secure Boot keys casually, especially since BitLocker has already been triggered. Make sure the BitLocker recovery key and important data are backed up before doing anything TPM-related.

For the PIN message, that is commonly seen after security state changes. If available, try signing in with the Microsoft account password instead of the PIN, then reset the PIN from Windows sign-in options. If no password option appears, that may need Microsoft account/Windows recovery steps.

One note: “Reset this PC – Keep my files” is not the same as a full clean install. It may preserve some profile/security state, so it does not completely rule out a Windows-side issue.

If Secure Boot still gives “Invalid Signature Detected” after replacing the CMOS battery, setting the correct date/time, restoring Secure Boot factory keys, and confirming Windows Boot Manager, then I would update or reflash the BIOS using only the official HP BIOS package for the exact OMEN 25L product number.

At that point I would report it to HP as a Secure Boot / firmware boot issue and provide:

• Exact OMEN 25L product number
• Current BIOS version
• Whether CMOS battery was replaced
• BIOS date/time retention result
• Secure Boot state
• Windows Boot Manager status
• BitLocker recovery history
• Photos of both Secure Boot violation and 3F0 messages

In short, I would start with the CMOS battery and BIOS/Secure Boot defaults first. Then fix the Windows PIN issue separately. I would avoid TPM clearing or random Secure Boot key changes unless data is backed up and HP/Microsoft recovery steps are confirmed.

[SteffenBaierUK]

Hello @meowymeow ,

Welcome to the HP community.

A quick community search for the terms BIOS & Password finds all these posts >here<, which are mainly closed.

Here is HP's official policy regarding BIOS passwords:

• HP Business PCs - Forgotten or lost BIOS password | HP® Support

According to the Community's Rules of Participation:

4d. No posts shall include instructions/directions intended to bypass or subvert security mechanisms such as lock screens, BitLockers, BIOS lock, passwords, fingerprint/biometry scanners, PINs, or any other safety measures.

Therefore, this topic is being locked.

Best regards

Steffen Baier