Unable to enable BitLocker due to TPM 2.0 error, and BIOS password prevents changing the boot device

[hygge13]

Hi,

I'm having two issues with my HP laptop.

First, I cannot enable BitLocker. When I try to enable it, I receive the following error:

"TPM 2.0 – The handle is incorrect for the use."

I have already updated Windows, but the problem still occurs.

I also tried installing a different SSD with a clean Windows installation. After installing the other SSD, I need to change the boot device/boot order in the BIOS so the laptop can boot from the new SSD.

However, I cannot change the boot device settings because the BIOS asks for an Administrator password, even though I never set a BIOS password.

Could someone from HP Support please advise:

1. What could cause the "TPM 2.0 – The handle is incorrect for the use" error?

2. How can I properly reset or reinitialize the TPM 2.0?

3. Why is a BIOS Administrator password required to change the boot device settings?

4. Is there an official way to reset the BIOS/UEFI security settings to factory defaults?

Thank you.

[Pallipurath]

Hi @hygge13 

Welcome to the HP Support Community.

Thank you for posting your query.

I understand that you are unable to enable BitLocker due to the “TPM 2.0 – The handle is incorrect for the use” error, and that a BIOS Administrator password is preventing you from changing the boot-device settings. I would request you to please follow the steps:

1. TPM 2.0 “The handle is incorrect for the use”

Possible causes: corrupted TPM state, TPM provisioning issue, BIOS/firmware issue, or Windows TPM configuration problem.

Steps:

1. Press Win + R → type tpm.msc.
2. Check whether Status: The TPM is ready for use.
3. Ensure the BitLocker recovery key is backed up.
4. Go to Windows Security → Device security → Security processor troubleshooting.
5. Select Clear TPM.
6. Restart the PC and confirm the TPM-clear request if prompted.
7. After Windows starts, check tpm.msc again.
8. Try enabling BitLocker.

Important: Do not clear TPM without the BitLocker recovery key.

2. BIOS Administrator password blocking boot-device changes

This is normal HP security behavior. The BIOS Administrator password protects boot and other security-sensitive settings.

Steps:

1. Restart the laptop.
2. Press F10 repeatedly at startup.
3. Enter the BIOS Administrator password.
4. Go to Boot Options.
5. Change the required boot-device setting.
6. Select Save Changes and Exit.

A Windows administrator password cannot substitute for the BIOS Administrator password.

3. Reset BIOS security settings

If the BIOS Administrator password is known:

1. Press F10 at startup.
2. Enter the BIOS Administrator password.
3. Go to Security.
4. Select Restore Security Settings to Factory Defaults (wording can vary by BIOS version).
5. Apply the changes and restart.

If the BIOS Administrator password is forgotten: HP does not provide a supported procedure to bypass/remove it using CMOS reset or Windows.

Take care and have an amazing day!