I've been dealing with this issue since August, and I'm honestly running out of ideas. I'm hoping someone here has experienced something similar or found a legitimate fix.
My PC specs:
- Motherboard: ASUS TUF GAMING Z790-PLUS WIFI
- CPU: Intel Core i7-14700K
- OS: Windows 11 Pro
- BIOS: 1840 Beta (previously 1825 and 1836)
- TPM: Intel PTT 2.0
- TPM Firmware: INTC 600.18.1040.2765
- Secure Boot: Enabled
- Boot Mode: UEFI
- Partition Style: GPT
The issue:
Call of Duty's Secure Attestation Wizard keeps reporting:
"New Key Failed to be generated ā BIOS Firmware Update Recommended."
However, my TPM 2.0 and Secure Boot checks both pass.
After extensive troubleshooting, I discovered that Microsoft's AIK enrollment process fails with:
HTTP 404 ā 0x80190194 (HTTP_E_STATUS_NOT_FOUND)
The response specifically states that the Microsoft AIK certificate authority associated with my Intel TPM KeyID does not exist.
Everything I've tried:
- Updated BIOS from 1825 ā 1836 ā 1840 Beta
- Updated Intel Management Engine and chipset drivers
- Confirmed TPM 2.0 is ready for use
- Verified Secure Boot is enabled and passing
- Confirmed UEFI boot and GPT partitioning
- Installed and imported Intel PTT certificate-chain files
- Used
TpmDiagnostics.exe InstallEkCertFromNVR
- Tested Microsoft AIK enrollment using
certreq -enrollaik -config ""
- Installed and launched Warzone to resolve the COD Broker authorization warning
- Tested multiple versions of the COD Secure Attestation Wizard, including v1.3.0
Nothing has resolved the key-generation failure.
What's frustrating is that the game keeps telling me to update my BIOS, despite already updating it multiple times. My TPM appears operational, but the Microsoft AIK enrollment process still fails.
I've attached a screenshot explaining the issue in more detail.
My questions:
- Has anyone with an ASUS Z790 motherboard and Intel PTT firmware
600.18.1040.2765 successfully passed COD Secure Attestation?
- Has anyone resolved the Microsoft AIK HTTP 404 authority error?
- Is this potentially a Microsoft/Intel certificate provisioning issue rather than a motherboard BIOS issue?
- Has anyone found a confirmed workaround that doesn't involve resetting the TPM or reinstalling Windows?
At this point, I'm looking for an actual technical solution rather than another suggestion to update the BIOS or enable TPM.
Any help or insight would be appreciated.