Fix This PC isn't set up securely--data may be at risk

[Timalfred]

How to fix "this PC isn't set up securely--data may be at risk

[BeemerBiker]

Before reading the below the problem simply might be that you did not enable "backup" in windows 11 when you activated windows 11

SupportGPT Solution

Securing Your HP Business PC and Protecting Data

The message “this PC isn’t set up securely—data may be at risk” typically means you should review BIOS security and data protection settings. You can use the built‑in HP features described below.

1. Restore BIOS and Security Settings to Factory Defaults

This helps clear customized security settings that might be weakening protection.

1. Turn on or restart the computer.
2. When the “Press the ESC key for Startup Menu” message appears, press esc.
3. On the Startup Menu:
   • Select Main → Apply Factory Defaults and Exit, choose Yes. The computer reboots.
4. During reboot, again press esc at the “Press the ESC key for Startup Menu” message.
5. Select Security → Restore Security Settings to Factory Defaults (or Reset BIOS Security to Factory Default / Reset Security to Factory Defaults, depending on your model), then select Yes.
   The computer reboots.
6. During reboot, press esc again.
7. Select Main → Apply Factory Defaults and Exit → Yes, then select Shutdown.

If prompted to clear TPM or reset fingerprint sensor, press F1 to accept if your goal is to fully reset security.

2. Clear Data from Storage (If Needed)

If you are worried existing data is at risk or the PC is being repurposed:

1. Turn on or restart the computer, press esc at “Press the ESC key for Startup Menu.”
2. Select Security → scroll down to Utilities → Hard Drive Utilities.
3. Select Secure Erase.
4. Choose the drive storing the data and follow on‑screen instructions.

Important: Secure Erase permanently deletes data and it cannot be recovered.

Alternatively, you can:

• Remove and retain the storage drive, or
• Use a third‑party utility designed to erase SSD data.

3. Use HP Sure Start (Select Models)

On models with HP Sure Start:

• HP Sure Start continuously monitors BIOS for corruption or attacks, and automatically restores BIOS to a previously safe state without user intervention.
• Ensure HP Sure Start is enabled in BIOS (it is enabled by default on supported models).

4. Ensure Power and Battery Safety While Working Inside the PC

When changing internal components like the CMOS battery:

• Shut down the computer through the OS.
• Disconnect the power cord from the AC outlet.
• Remove the access panel only after power is disconnected.
• Replace the internal 3V lithium coin cell only with the HP‑designated spare and observe handling warnings (no recharging, no heat above 60 °C, no crushing/puncturing).

These steps will help return your HP business PC to a known‑good, more secure baseline and, if desired, securely remove existing data.

SOURCES

Maintenance and Service Guide
Maintenance and Service Guide

Sources

1. Maintenance and Service Guide
2. Maintenance and Service Guide