I have an HP OMEN 25L GT15-0xxx with an i5-12400F, RTX 4060, 16GB of RAM, a 2TB NVMe SSD, and Windows 11. I need Secure Boot enabled for Valorant, but the computer only boots normally when Secure Boot is disabled. When I turn it on, I get "Secure Boot Violation" and "Boot Device Not Found."
I previously disabled Secure Boot because the PC had boot problems. I have tried guides that recommend clearing the Secure Boot keys, loading the factory keys, and using the BIOS option "Boot from EFI File" to locate `securebootrecovery.efi`, but I cannot find that file. I also have not found a useful BIOS update for this apparently discontinued OMEN model.
As far as I know, Windows is installed in UEFI mode. Should I repair the Secure Boot keys, verify the Windows installation and disk configuration, or check something specific in the HP BIOS? I would prefer not to keep changing settings blindly because I do not want to make the system unbootable.
3 Answers
Before changing more BIOS settings, confirm that Windows is actually using UEFI and that the system disk uses GPT. In Windows, open System Information and check that BIOS Mode says UEFI. Disk Management can show whether the boot drive is GPT. The BIOS boot list should also contain Windows Boot Manager, not just the raw NVMe drive.
If those checks are correct, the normal approach is to restore the factory Secure Boot keys rather than deleting them repeatedly, then enable Secure Boot using the standard Windows or HP configuration. Keep Secure Boot disabled until you have a backup and a recovery USB available.
Do not assume the keys are the only problem. Secure Boot can reject the bootloader if the installation is legacy/MBR, if the firmware is set to the wrong boot mode, or if the Windows Boot Manager entry is missing. With Secure Boot disabled, check the boot mode and disk partition style, and make a full backup before attempting repairs.
If the machine still shows “Boot Device Not Found” with a verified UEFI/GPT installation and the correct factory keys, use HP’s exact BIOS recovery procedure or contact HP support. Repeatedly clearing keys or changing unrelated firmware options could make recovery harder.
The `securebootrecovery.efi` file is generally used from Windows recovery or a prepared USB drive; it will not necessarily exist as a visible file on the normal Windows partition. If the guide requires it, create a Windows recovery or installation USB on another computer and use the recovery environment rather than guessing at EFI files.
Also identify the exact OMEN product number and current BIOS version. “GT15-0xxx” covers multiple configurations, so an update or recovery package must match the full model. Use HP’s support page for that exact product, and do not flash a BIOS intended for a different OMEN variant. If Secure Boot still reports that the boot device is invalid after the keys are restored, Windows startup files may need repair from the recovery environment.
I do not currently have a USB drive, which is why I stopped when the instructions required one. I will get a recovery USB first instead of continuing to clear or replace keys randomly.
I have not checked the disk layout in detail yet, but Windows appears to be running in UEFI mode. I will verify that Windows Boot Manager is listed before changing anything else.