BIOS Issues unable to modify

[Fadel_Victus]

I have enabled MPM and I still cannot edit any UEFI variable. But the HP Omen Gaming Utility is able to modify variables upon a reboot. Any help from an expert would be very appreciated.

[Raj_05]

Hi @Fadel_Victus,

Welcome to HP Support Community.

Thank you for posting your query, I will be glad to help you.

It sounds like you are encountering a limitation with modifying UEFI variables on your Victus by HP 16.1 inch Gaming Laptop PC, even though MPM (Manufacturing Programming Mode) is enabled. Here's a potential approach to address the issue.

Check the BIOS Version

• Ensure that you are running the latest BIOS version. HP frequently releases updates that resolve such issues.
• To check and update:
  1. Go to HP Support.
  2. Search for your model and find the latest BIOS update.
  3. Follow the steps to install the update.

Disable Secure Boot

• In some cases, Secure Boot prevents modification of UEFI variables. To disable it:
  1. Enter the BIOS/UEFI settings by pressing Esc or F10 during boot.
  2. Navigate to the Boot Options.
  3. Find Secure Boot and disable it.
  4. Save the changes and reboot the system.

Clear TPM (Trusted Platform Module)

• If the system is locked by TPM, clearing it might help:
  1. Enter BIOS/UEFI settings again.
  2. Look for TPM settings or Security options.
  3. Clear TPM, save the changes, and reboot.

HP Omen Gaming Hub

• Since the HP Omen Gaming Utility is able to modify variables upon reboot, it suggests that HP's proprietary utility has elevated control over UEFI. If you need similar functionality, explore the Omen Gaming Hub for advanced options like fan control, overclocking, or power settings. It may offer more granular control than traditional BIOS modifications.

[Raj_05]

Windows Fast Boot

• If Windows Fast Boot is enabled, it might block certain BIOS changes. You can try disabling it:
  1. Go to Control Panel > Power Options.
  2. Click Choose what the power buttons do.
  3. Uncheck Turn on fast startup.
  4. Save the changes and restart your laptop.

Reset BIOS Settings

• If nothing works, try resetting the BIOS to default settings:
  1. Enter BIOS/UEFI settings.
  2. Look for the option to Load Defaults.
  3. Save and exit.

I hope this helps.

Take care and have a good day.

Please click “Accepted Solution” if you feel my post solved your issue, it will help others find the solution. Click the “Kudos/Thumbs Up" on the bottom right to say “Thanks” for helping!

Alden4

HP Support 

[Fadel_Victus]

Hey @Alden4, YES!!

HP Omen Gaming Utility has elevated control over UEFI. In my "Undervolting Section" I can only undervolt CPU Core, and when I change the voltage offset, 2 UEFI variables are modified. Inside CpuSetup the variables 0x1E2 (offset Prefix + or -) and 0x1E0 (the actual voltage offset) are modified upon reboot.

I am on the latest version of BIOS, I do not have control over other undervolting/overclocking options. I would LOVE to undervolt CPU Cache and the iGPU. Given the fact that I have an HX CPU (i7 14700HX) shouldn't I be able to get more control over these options?

Do you have any idea how exactly the HP Omen Gaming Utility gains these elevated privileges? Maybe I can somehow spoof the usage of the Utility to modify other UEFI variables like CFG Lock (0x043), Overclocking Lock (0x10E), Overclocking Feature (0x1D9), and Undervolt Protection (0x381).

I have Secure Boot and Fast Boot disabled, but when I try to disable TPM my system gets semi-bricked. It stops booting up as if I have corrupted BIOS (only keyboard lights up and turns off after a couple of seconds). I was able to save it by doing a CMOS reset by holding the power buttons for 30 seconds to reset the BIOS back to default settings which enabled TPM again and allowed my system to boot. Do you think I might have a chance in modifying these variables if TPM was disabled? Does TPM interact with UEFI?

Edit: I have successfully disabled TPM in BIOS and Windows without semi-bricking my system, still no UEFI changes can be made.

Please if you have time Alden4, lets investigate this further and try to find a possible solution. I am willing to go to very complicated routes just to change these couple UEFI variables 😞

I have tried setup_var.efi, RU.efi, and H2OUVE.efi -sv vars.txt, tried them with MPM off and MPM on, still no luck. What is the next step?

I literally bought this laptop because of its HX CPU and not being able to use it makes me regret not buying a laptop from a cheaper company 😞

[Raj_05 · Accepted solution]

Hi @Fadel_Victus,

Thank you for your response, 

It seems you've tried several advanced techniques already, and I can tell you're determined to get finer control over your system's undervolting capabilities. Let’s look into a few additional, complex methods that may help, especially since some modifications are only accessible to the HP Omen Gaming Utility and may be governed by HP’s own firmware restrictions.

Understanding HP Omen Gaming Utility’s Privileges

The HP Omen Gaming Utility operates with elevated permissions, likely because it has a signed driver or service that interfaces directly with the UEFI/BIOS firmware. This might be similar to what Intel XTU or Ryzen Master does on other systems, where firmware access is allowed via specific system drivers. The utility can modify UEFI variables by communicating through HP's specific drivers, which bypass some of the usual protections against altering variables like 0x1E2 and 0x1E0.

• Spoofing or Replicating the Utility's Access: If you can locate the utility’s drivers or DLLs, it may be possible to analyze their behavior. Tools like Process Monitor or Dependency Walker could help you identify which system calls or files are being accessed by the utility when making changes. By tracking these, you may be able to mimic the behavior in a custom script or find ways to achieve similar privileges.
• Custom Kernel Driver: Although complex, creating a custom driver to interact with UEFI variables directly could be a potential route, although it requires programming knowledge and should be approached with caution. This would involve using driver development tools like the Windows Driver Kit (WDK) and requires deep knowledge of UEFI.

TPM and Secure Boot

Trusted Platform Module (TPM) and Secure Boot add layers of security that prevent unauthorized changes to the firmware. TPM is likely involved here because of its secure boot functionality, which ensures that only authenticated firmware and OS components can execute. Here’s how it might be affecting you:

• TPM’s Influence on UEFI Variables: Disabling TPM could theoretically grant you more flexibility in modifying UEFI, but as you've experienced, the system may not boot correctly when TPM is disabled. This behavior could be due to a dependency in the HP firmware design that ties TPM settings to UEFI integrity, possibly as a part of HP’s Enhanced UEFI Firmware Protection.
• Workaround to Disable TPM Safely: You might try clearing TPM through the UEFI interface without fully disabling it. Sometimes, clearing TPM can bypass certain protections without causing boot issues. However, if this still results in system instability, TPM may need to remain enabled.

Exploring Advanced BIOS Editing Tools

Since standard tools like setup_var.efi and H2OUVE have not allowed modifications, you might want to consider:

• AMIBCP Tool (if BIOS is AMI): If your BIOS is from American Megatrends (AMI), the AMIBCP (AMI BIOS Configuration Program) tool allows you to modify hidden settings in the BIOS file itself. You’d need to extract your BIOS, make modifications to reveal hidden undervolting options, then flash it back. Caution: Modifying and flashing a BIOS manually can be risky, so consider this only if you have the proper recovery tools and knowledge.
• UEFITool & IFR Extractor: Use UEFITool to extract your BIOS image and the IFR Extractor to identify the hexadecimal values corresponding to hidden settings. By identifying these values, you may be able to modify your BIOS file to unlock settings for CPU Cache undervolt and iGPU voltage offset.

[Raj_05]

Modding Omen Gaming Hub or Utility Files

Another possible route could involve reverse-engineering the Omen Gaming Utility itself. Here’s how you might approach it:

• DLL Injection or Patch: Look for key DLLs associated with undervolting functionality. Sometimes, by modifying these DLLs, you can trick the utility into allowing additional settings. Be mindful that tampering with these files can lead to instability.
• PowerShell/Registry Hack for Expanded Control: Occasionally, some gaming laptops’ utilities have hidden settings that can be accessed through specific registry entries or PowerShell commands. Using RegEdit to navigate to the HP Omen or related registry branches and examining available entries may uncover options for expanded control over UEFI settings.

Investigate EC Firmware (Embedded Controller) Modding

Some controls, especially voltage offsets and power limits, are managed by the embedded controller (EC) rather than the BIOS itself. Modding the EC firmware could be another route to unlock additional undervolting features. There are some risks to this, as modifying the EC firmware is delicate and could lead to power management issues if done incorrectly.
 

Notes:

• BIOS Backup and Recovery: Before attempting any modification to BIOS or firmware, ensure you have a reliable backup and recovery method. This could be a hardware-based SPI flash programmer or a verified BIOS recovery method.
• Test Changes Incrementally: Make small adjustments, and only test one change at a time to avoid introducing system instability. 

I hope this helps.

Take care and have a good day.

Please click “Accepted Solution” if you feel my post solved your issue, it will help others find the solution. Click the “Kudos/Thumbs Up" on the bottom right to say “Thanks” for helping!

Alden4

HP Support

[Fadel_Victus]

@Alden4, you are the most beautiful, most amazing, most helpful support I have ever asked a question to. Thank you for these very real very direct potential solutions. You are the best I swear.

To address each of the suggestions in order of least likely to most likely to work (based on my humble not-so-informed opinion):

TPM and Secure Boot

I was able to clear and then disable TPM completely but UEFI variables are still non-modifiable.

Exploring Advanced BIOS Editing Tools

I was able to identify exactly which hexadecimal values correspond to my desired settings (using UEFITool and IFRExtractor), the problem with the approach of modifying BIOS is that I cannot flash custom BIOS to my laptop because I would need HP proprietary tools, which I do not have access to. Some people suggest using an external programmer to flash custom BIOS directly to the chip but that doesn't work on modern HP laptops either without disabling the Flash Descriptor Lock (could be disabled by pinmod?) and the BIOS regions locks beforehand. Plus the fact that official BIOS binaries are RSA encrypted makes flashing more unlikely.

I believe without access to HP proprietary tools (such as FPTW of my current ME version, or NbDMIFit), flashing custom BIOS is impossible.

Understanding HP Omen Gaming Utility’s Privileges/Modding Omen Gaming Hub

This sounds very hopeful. I am able to identify generally which drivers and .dlls are being used when I apply an undervolt.

A clear dependency on drivers is the HP Omen Driver (when I disable it in device manager, I can still use the Gaming Hub application and set an undervolt in its GUI, but upon reboot the value does not change).

The .dlls "HP.Omen.Background.Overclocking.dll", "HP.Omen.OMENOverclockingModule.dll", and "HP.Omen.OverclockingModule.dll" are the ones that jump out to me. Maybe also "IntelApi.dll".

The only issue here is that I do not have experience with reverse engineering executables,  dlls and modifying apps without the source code. I guess it is time for me to learn :D. I will do a deep dive into these tools you suggested and learn about DLL Injection/Patching or even going as far as to build my custom Kernel driver.

Regarding Registry Hacks, I have scowered all of the registry keys and entries related to HP Omen Gaming Hub and Utility, sadly nothing jumps out. 

Investigate EC Firmware (Embedded Controller) Modding

Regarding EC modding, unfortuantely, I have absolutely no experience with it whatsoever 😞

Final Thoughts

I have a feeling that taking advantage of HP Omen Gaming Utilities privileges is the easiest and most plausable way to go, since this is our already open door, I just have to learn how to find that door and how to walk through it :DDD

@Alden4, you are absolutely the most amazing Support I have had the chance to communicate with. Thank you SO MUCH for your time, your expertise, and your well-informed suggestions. We need more people like you.

I will come back to this thread and update you if something works, or if you have any more ideas or suggestions I am more than happy to hear about them, I could use extra guidance. Your time and well-informed suggestions are much appreciated.

Kindest regards,

Fadel