Platform key not enrolled

[CaronDimonio]

See also

https://h30434.www3.hp.com/t5/Notebook-Boot-and-Lockup/quot-Legacy-Support-quot-won-t-disable-in-BIO...

In UEFI setup, platform key is on not enrolled status.

Security boot is on disabled (and grayed out so I cannot reset on enabled) and I understand that is a consequence of platform key not enrolled (reading some material on web). Legacy boot is on disabled (and it's editable that's not grayed out).

Load  HP factory default keys is a fix for this issue, right?

do I clear All secure boot keys before loading default keys?

Thanks.

[CaronDimonio · Accepted solution]

I got by myself.

Report what I did so it will be helpful for all who get same issue.

I did "Load HP factory default keys"  and Platform key status has become enrolled and (at the same time) secure boot has become settable.

So, I could put secure boot on enabled. After this action "Clear all secure boot keys" has become unsettable (obviously).

Of course you have  to reboot PC after giving each command.

If you need, before Load HP factory default keys you could get clear all secure boot keys (this will reset secure boot DB entries): insomuch secure boot was already disabled (clearing all secure boot keys puts secure boot on disabled always).

In practice: Load HP factory default keys fixes  platform key not enrolled and consequently makes it become secure boot settable.