Ran into an issue this Am with trying to enable TPM or Trusted Platform Module on a new Zbook from HP. If you hit ESC then BIOS Options, then Security you will see that TPM, User Management and a few other options are greyed out. Turns out you must set a BIOS Password in order to change those options.
Stupid move HP but whatever I guess, at least now I can encrypt the drive.