Sector by Sector Clone factory disk with Secure boot enabled

On a new HP laptop Windows 10 and UEFI with Secure Boot I cloned the 5500rpm disk to an SSD before starting the machine for the first time.
Windows 10 boots and works fine so I know the OS and TPM have the correct information or the system would not boot.
However the HP recovery Partition D:\Recovery is not matching the TPM [I think]. For example if I attempt to boot F11 to the recovery partition, I get 0xc0000225 error instead of booting to the recovery options. The other symptom that produces no valid solution when searching is Windows 10 constantly warning the recovery disk is low on space. This causes a chronic warning that D:\Recovery is low on disk space. Not the actual problem.
How do I restore the boot files for the recovery system in case of a failure that requires reinstall of the factory installed OS in the future?
I have tried:
Booting to the the recover disk via recovery option after hitting escape during the post.
This provides the 0xc0000225 error message which indicates that the efi needs to be set to match the TPM information
Selected the diagnostic tests in startup options.
100% perfect condition. I do not have a hardware error. The Recovery partion boot information is not recognized like I said before.
Completed all available updates in the HP Assistant.
Success!
Windows updates apply successfully.
Success!
I have noticed in Windows Disk Management
Name Drive Size Type
260 MB Basic data partition
341 MB EFI system partition
Recovery (D:) D:\ 10 GB Basic data partition
Recovery (D:) D:\ 10 GB Basic data partition
Windows (C:) C:\ 221 GB Basic data partition
One of the Recovery D:\ is active the other is dead space and cannot be deleted or anything.
So in short, how does one clone a disk with secure boot and have all the space on disk usable if the manufacturer does not supply the OS installation files except in a recovery partition?
Thanks,
TP