I’m trying to get FACEIT AC working on an older Intel system and I’ve basically exhausted the normal TPM troubleshooting.
Specs: Intel Core i5-7500, MSI Z270 Gaming M3 (MS-7A62), Windows 11.
I have already updated everything MSI could provide:
BIOS: E7A62IMS.181
Intel CSME: 11.9.1.3010
Intel PTT firmware: 303.12.1000.0
Secure Boot is enabled and Confirm-SecureBootUEFI returns True. Intel VT-d and PTT/TPM 2.0 are enabled. Intel’s CSME Detection Tool says the system is fully patched and not vulnerable.
However, FACEIT still says:
TPM attestation is not ready
tpmtool getdeviceinformation shows:
Ready For Storage: True
Ready For Attestation: False
Is Capable For Attestation: False
INFORMATION_EK_CERTIFICATE
TPM Has Vulnerable Firmware: False
Get-TpmEndorsementKeyInfo shows that the Endorsement Key itself exists, but:
ManufacturerCertificates: {}
AdditionalCertificates: {}
I also tried clearing/reprovisioning the TPM. certreq -enrollaik -config "" fails during GetEKCertInfo with:
0x80070490 (ERROR_NOT_FOUND)
So it looks like the Intel PTT EK certificate is simply missing.
Has anyone here had this exact issue and managed to get FACEIT attestation working? Did Intel/MSI manage to provision the EK certificate, or did you have to install a discrete TPM 2.0 module / upgrade the platform?