redo factory reset.
just pay attention on communicates. you have to generate keys, when system will ask if store public key on thumbdrive, say yes (it’s important to have it, later).
during the process it will reflash bios with keys stored within.
or.
go
options → gpg options → generate gpg keys manually on librem key (remember store copy of public key on thumdrive
then
options → gpg options → add gpg key to running bios and reflash.
however factory reset is the safest way if you are not expert.
means bios have empty keyring.
what you need to do is to simply generate keys, then import them to bios, as trusted.
this is covered by oem factory reset.