-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
- HP Community
- Archived Topics
- Unanswered Topics - Desktops
- SecureBoot & Bitlocker PCR7

Create an account on the HP Community to personalize your profile and ask a question

02-21-2018 12:39 AM
Hello We upgraded our EliteDesk 800 G1 to Windows 10 1709 64bit and need to use Bitlocker with TPM. Now Bitlocker can not use PCR 7 (Secure Boot). In the EventLog I get this message:
quote:
BitLocker cannot use Secure Boot for integrity because the expected TCG Log entry for the OS Loader Authority is invalid.
The EFI_SIGNATURE_DATA structure contained in the OS authority event could not be found in the Secure Boot 'db' signature database.
unquote:
and
quote:
BitLocker cannot use Secure Boot for integrity because the UEFI variable 'SecureBoot' could not be read.
Error Message: A required privilege is not held by the client.
unquote:
Because of this Bitlocker will use PCRs 0, 2, 4, 11 - the goal would be to use 7, 11 (SecureBoot).
I am not able to find anything to solve this on google. I upgraded BIOS to: BIOS Version/Date Hewlett-Packard L01 v02.71, 09.05.2017
I did a load defaults in BIOS no luck.
MSINFO32.exe is telling me that:
BIOS Mode UEFI
Secure Boot State On
PCR7 Configuration Binding Not Possible
Can anybody help me what do
Tks.
