How do I enable secure boot for my hp pc?

[denosinz]

MY CURRENT INFO:

Product number: 841W6PA#ACJ

BIOS Vendor: Insyde

BIOS Revision: F.12

BIOS Mode: UEFI

Secure Boot: Disabled and greyed out

Platform Key: Not Enrolled

Load HP Factory Default Keys: Available/selectable

I cannot enable Secure Boot because the relevant options are greyed out. I would like to know how to safely enroll the factory keys and enable Secure Boot without affecting my Windows installation or personal files.

[GOLD_MASTER]

Hi @denosinz, welcome to the HP Support Community. Your note is very useful, and your current situation — Secure Boot Disabled, Security Policy PK Not Enrolled, and “Load HP Factory Default Keys” available in BIOS — tells us this is not a problem. On your HP 255 G9 with Insyde BIOS F.12, the Secure Boot screen is greyed out because no platform key is enrolled yet.

If you have a backup, please try these BIOS steps in this order:

1. Save and exit, then switch the notebook off. Turn it on and press F10 to enter BIOS Setup.

2. Open Security > Secure Boot, if it is there, or System Configuration, depending on the model.

3. Choose “Load HP Factory Default Keys”, load them, then Save and Exit, and press Enter.

4. Restart, press F10 again and check what it now says. If the keys have been generated successfully, the screen should now say Secure Boot Enabled. You may want to change Boot options and change to Legacy Support Disabled, if it is enabled.

5. Then check Windows again: if Secure Boot is requested for Windows 11 Firmware, you may need to reinstall Windows.

Before changing BIOS, create a backup. Installing Secure Boot factory keys does not delete files or change Windows, but BIOS does not guarantee that no data will be lost, so a backup is recommended if you can make one. If this does not work, check for a newer BIOS for 841W6PA#ACJ — I did not find a verified model-specific driver page in this check, so start at HP's official laptop driver search: https://support.hp.com/us-en/drivers/laptops — and keep Windows up to date: https://support.microsoft.com/en-us/topic/3c5ae7fc-9fb6-9af1-1984-b5e0412c556a

Please reply with what Windows says after the factory keys have been loaded, and the exact Windows version you are using.

[denosinz]

Thanks for your time! Will loading HP Factory Default Keys on my HP 255 G9 with Insyde BIOS F.12 affect Windows Boot Manager or require reinstalling Windows? Is this procedure confirmed for my exact model?

[GOLD_MASTER]

Hi @denosinz, thanks for clarifying. There is no 'kit' for Secure Boot — it is not a part you buy or install, it is a setting inside the BIOS/UEFI firmware of your PC, so nothing needs to be bought.

First, please check the current state in Windows: press Windows key + R, type 'msinfo32' and press Enter. Look at two lines: 'Secure Boot State' and 'BIOS Mode'. BIOS Mode must say UEFI — if it says Legacy, Secure Boot cannot be enabled until Windows is installed in UEFI mode.

If BIOS Mode is UEFI, restart the PC, press F10 repeatedly as soon as it starts, and look in BIOS Setup for Secure Boot: on most HP PCs it is under Security > Secure Boot Configuration, or under Boot/Advanced > Secure Boot. Set Secure Boot to Enabled, and if you see a 'Secure Boot Mode' option, set it to Standard. Press F10 to save and exit.

If your BIOS has a Security menu but no Secure Boot option, the exact menu depends on your model — BIOS menus differ a lot between HP models, and 'BIOS F.20' alone does not identify the layout. Please tell me the exact model/product number of your PC (printed on the label on the bottom or back) and the two msinfo32 lines above, and I will give you the exact menu path for your model.

For reference, Microsoft explains how Windows 11 uses Secure Boot here (verified today): https://support.microsoft.com/en-us/windows/security/devicesecurity/windows-11-and-secure-boot. 

[denosinz]

Thank you. My exact laptop is HP 255 G9, product number 841W6PA#ACJ, with Insyde BIOS Revision F.12. BIOS Mode is UEFI and Secure Boot State is Off. In BIOS, Secure Boot and Platform Key are greyed out and cannot be selected. Platform Key says "Not Enrolled", but "Load HP Factory Default Keys" is selectable.

Could you please confirm whether selecting "Load HP Factory Default Keys" is the correct and safe next step for this exact model and BIOS revision? Will it unlock the Secure Boot option without requiring Windows reinstallation?

Just to clarify, I'm trying to enable Secure Boot specifically because VALORANT's Riot Vanguard anti-cheat is showing the VAN9003 error and won't let me launch the game. Windows itself is working normally. I only want to make the minimum necessary BIOS changes to meet VALORANT's requirements without risking my existing Windows installation or personal data.

[GOLD_MASTER · Accepted solution]

Hi @denosinz,

Good question, and you are right to double-check before changing anything in the BIOS. Yes — on your HP 255 G9, selecting "Load HP Factory Default Keys" is the correct next step, and it is safe for your Windows installation.

Loading the factory default keys enrolls HP's security keys into the BIOS, which unlocks the Secure Boot setting. It does not reinstall Windows, it does not delete your files, and it does not change your Windows settings. After that, Secure Boot should become selectable instead of greyed out.

Here is the sequence:

1. In the BIOS, select "Load HP Factory Default Keys" and confirm.

2. Set Secure Boot to Enabled.

3. Save the changes and exit the BIOS (usually F10), then let Windows start normally.

4. In Windows, press Win + R, type msinfo32, and check that "Secure Boot State" shows On.

One more thing: Riot Vanguard (the VALORANT anti-cheat giving you the VAN9003 error) also needs TPM 2.0 enabled, so if Secure Boot alone does not clear the error, check that TPM is enabled in the BIOS as well. You can find the official requirements here: https://support.microsoft.com/en-us/windows/security/devicesecurity/windows-11-and-secure-boot

As always, it is a good idea to back up your important files before changing BIOS settings, just in case.

Could you let us know whether Secure Boot shows as On after you load the factory keys?

[denosinz]

• Thankyou Mr expert! I can play the game in peace now ❤️