Boot Secure Violation

[Leve13]

Hi HP Support,

I have an HP OMEN 25L Desktop GT11-1xxx with motherboard 8876 and BIOS version F.24.

I’m trying to enable Secure Boot and TPM 2.0 to play Call of Duty DMZ. However, whenever I enable Secure Boot in the BIOS, my PC fails to boot and displays the “Boot Device Not Found” error (3F0). If I disable Secure Boot, Windows starts normally.

I have already checked the following:

• Windows is installed in UEFI mode.

• My Windows disk uses GPT partitioning.

• Windows Boot Manager is at the top of the boot order.

• The BIOS shows the Platform Key as enrolled.

• PowerShell confirms that a Platform Key is present.

• The issue only occurs when Secure Boot is enabled.

My BIOS version is F.24, and my motherboard product number is 8876.

Could you please help me determine whether this is a BIOS or Secure Boot certificate/key compatibility issue? Is there a recommended BIOS update, fix, or procedure to enable Secure Boot safely on this system?

I would prefer not to clear the Secure Boot keys, reinstall Windows, or replace my SSD unless absolutely necessary.

Thank you for your help.

[Deep_World]

Hi @Leve13 
 
Welcome to the HP Support Community!

Thanks for reaching out!

I understand your concern , don’t worry let me check and help you with this.

This behaviour can sometimes be related to BIOS firmware, TPM firmware, or Secure Boot key/certificate compatibility rather than the Windows installation itself.

To help address TPM and Secure Boot related issues, HP recommends ensuring the system is running the latest BIOS version available for your OMEN 25L Desktop.

To resolve TPM firmware related issues, please follow the steps below:

Refer to the official AMD advisory regarding TPM firmware behavior:

• TPM Attestation Failure on AMD Platforms with ASP fTPM  -  Click here

Update the BIOS to the latest version:

1. Visit Official HP Drivers and Software Download.  -  Click here 
2. Enter your product name, serial number, or product number.
3. Select Software & Drivers.
4. Choose your operating system and version.
5. Click Submit.
6. Expand BIOS - Firmware.
7. Download and install the latest BIOS available for your system.
8. Follow the on-screen instructions to complete the update. The system may restart multiple times during the process.
9. After the BIOS update completes, the system may display TPM initialization messages as part of the firmware update process.

Important: Before performing any TPM-related changes, ensure you have access to your BitLocker recovery key, if BitLocker is enabled on the device.

After a TPM reset or firmware update, you may be prompted to reset your Windows PIN:

• Change or Reset your PIN in Windows - Microsoft Support  -  Click here 
• Find your BitLocker Recovery Key - Microsoft Support  -  Click here

Also since your system boots normally with Secure Boot disabled and you've already confirmed UEFI, GPT, Windows Boot Manager priority, and Platform Key enrollment, updating the BIOS is the safest next step before considering more advanced actions such as clearing Secure Boot keys, resetting TPM, or reinstalling Windows. (note before clearing or resetting the TPM ensure you have the backup of the recovery key )

Also kindly let me does the 3F0 error occur immediately after enabling Secure Boot, or only after saving changes and rebooting and have you recently updated the BIOS or replaced the SSD?

I hope this helps. 

 

[Leve13]

Hey, 

the thing is that there is no later BIOS version later than F.24 that i already have unless HP has another update that i cant see. Because in drivers and software i cant see any available updates.

[Deep_World]

Hi @Leve13,

Thank you for confirming that you are already running BIOS version F.24, which is currently the latest BIOS available for your system.

Upon checking the available software and driver details for Windows 11 Version 21H2 (64-bit), the latest BIOS released for the HP Consumer Desktop PC BIOS Update (ROM Family SSID 8876) is F.24 Rev.A, released on October 19, 2025. 

Since your system is already on this version, there are no newer BIOS updates currently listed.  

In the meantime, we recommend keeping a close watch on the HP Support website for any future BIOS releases for your OMEN 25L.  

Installing any available Optional Updates through Windows Update, as firmware, chipset, or security-related updates may be offered there.

Running HP Support Assistant and checking for any additional driver, firmware, or system updates that may not yet appear in Windows Update.

Since the issue occurs only when Secure Boot is enabled and the system otherwise boots normally, continuing to monitor for future BIOS updates is the safest approach.