I have a Framework 13 with a 1165G7 that I’m trying to do a fresh setup with after getting a Pro. I am on BIOS version 3.25, and was previously using a custom PK for my Linux install. I wanted to replace Linux with Windows, so I tried to reset all the Secure Boot keys back to the OEM defaults. I kept having issues with the keys not working as expected, and I was getting security exceptions with the windows installer. After a few attempts of trying to reset the keys, my Secure Boot status appears to be broken. The BIOS shows secure boot as Disabled, with no option to enable, and the pages for each individual key are empty. I tried enabling the option to restore factory keys, but it isn’t adding the keys, and selecting “Enroll Key” on any of the individual key pages just shows an empty page. I also tried booting into a Linux live USB and running bootctl, but it’s showing the Secure Boot status as “(unsupported)”, rather than “(setup)” as I would expect for an empty platform key.
I tried following the steps for resetting the mainboard with no affect on the issue. I also tried re-running the 3.25 installer to see if that would override any corrupted data, but it won’t install since it sees the same version installed. This thread mentions downgrading to 3.22 using the ClearVars BIOS, but I can’t figure out how to do that. Running that BIOS installer gives me Error 357: Update to image with lower VCN is not allowed and just reboots shortly after.
Does anybody know what I can do to get Secure Boot back to factory settings from here? I will send a support ticket to Framework if I can’t get this figured out, but I figured I should try asking here first, since it seems like other people have resolved the same / similar issues before, and I’m just not sure what I’m missing here.