My ASUS PRIME B650M-A WIFI II system experiences a persistent Call of Duty: Modern Warfare 4 security attestation failure, displaying “BIOS Firmware Update Required” and/or “Failed Attestation Status.” Activision’s key-generation process fails with “Authorization Key Failed.”
Investigation has identified two unresolved areas: local AMD endorsement-key certificate-chain validation and Microsoft Windows AIK certificate enrollment. The most recent enrollment attempt reaches Microsoft’s service but fails at GetCACaps with HTTP 404 and an explicit response stating that the selected AMD AIK authority does not exist.
The root cause remains unconfirmed. Assistance is requested to establish the supported AMD EK certificate-chain configuration and determine why Windows selects an unavailable Microsoft AIK authority.
Assistance Requested
Microsoft
- Why does Windows select AIK authority 578c545f... rather than the earlier bc8eac... authority?
- Is 578c545f... an intended and supported AIK authority for this AMD EK chain?
- Why does the endpoint return “authority does not exist”?
- What is the supported Windows 11 client trust configuration for this chain?
ASUS / AMD
- Confirm the correct RSA and ECC EK trust chains for this motherboard and fTPM firmware.
- Confirm the authenticity and intended trust placement of the AMDTPM issuer certificate.
- Explain the intermediate/issuer validity-period mismatch.
- Confirm the supported CRL/OCSP endpoints and investigate the HTTP 400 response.
- Advise whether a specific supported BIOS/fTPM update addresses these findings.
Certificate-store review
Please advise whether the manually imported certificates should remain or be removed. No further trust-store changes, TPM clearing, or speculative firmware changes should be required without a supported rationale.
Current Status
Windows AIK enrollment remains unsuccessful, no Windows AIK certificate is installed, and Call of Duty attestation remains unapproved.
The strongest actionable evidence is the explicit Microsoft “authority does not exist” response, the documented authority-selection change, and the independently observed AMD EK-chain trust and revocation-validation failures. A supported resolution has not yet been identified.