Search for:
COD Secure Attestation Failing
Call of Duty: Warzone

COD Secure Attestation Failing

By


Call of Duty Warzone Secure Attestation – Authorization Key Failed despite TPM 2.0 and Secure Boot being enabled

Hi everyone,

I'm trying to resolve the new Call of Duty Secure Attestation issue where it reports "Authorization Key Failed." I've spent several hours troubleshooting and wanted to document everything I've tested in case someone has experienced the same issue.

System Information

Motherboard: Gigabyte B365M D3H

CPU: Intel (using Intel PTT / Firmware TPM)

Windows: Windows 11 Pro Version 25H2 (OS Build 26200.8655)

Game Launcher: Battle.net

BIOS Mode: UEFI

Secure Boot: Enabled

TPM: Intel Platform Trust Technology (PTT)

BIOS Configuration

Verified the following settings:

  • Intel PTT enabled
  • Secure Boot enabled
  • UEFI boot mode enabled

I also updated the motherboard BIOS to the latest version available from Gigabyte.

TPM Status

tpm.msc

  • TPM Manufacturer: Intel
  • Specification Version: 2.0
  • TPM is ready for use

PowerShell:

Get-Tpm

Output:

  • TpmPresent = True
  • TpmReady = True
  • TpmEnabled = True
  • TpmActivated = True
  • TpmOwned = True
  • AutoProvisioning = Enabled

However,

RestartPending = True

This remains True even after:

  • Multiple restarts
  • Full shutdowns (power off for 30+ seconds)
  • Clearing the TPM

TPM Tool Output

tpmtool getdeviceinformation

Results:

TPM Present: True
Ready For Storage: True
Ready For Attestation: False
Is Capable For Attestation: False
Information Flags Description:
    INFORMATION_EK_CERTIFICATE

AIK Enrollment

Running:

certreq -EnrollAIK

always returns:

Certificate Request Processor:
Element not found.

0x80070490 (ERROR_NOT_FOUND)

TPM Endorsement Key

Running:

Get-TpmEndorsementKeyInfo

shows:

IsPresent = True
ManufacturerCertificates = {}
AdditionalCertificates = {}

No manufacturer certificate is present.

TPM Supported Features

Get-TpmSupportedFeature

returns:

key attestation

TPM WMI Information

Get-CimInstance -Namespace root\CIMV2\Security\MicrosoftTpm -Class Win32_Tpm

shows:

  • Activated = True
  • Enabled = True
  • Owned = True

No issues reported.

TPM Scheduled Tasks

The following tasks exist:

  • Tpm-HASCertRetr
  • Tpm-Maintenance
  • Tpm-PreAttestationHealthCheck

Task results:

Tpm-Maintenance = Success (0)

Tpm-PreAttestationHealthCheck = Success (0)

Tpm-HASCertRetr = 267011

Even after manually starting Tpm-HASCertRetr, nothing changes.

The system still reports:

Ready For Attestation = False

Device Manager

The following device is present with no errors:

Trusted Platform Module 2.0

Intel Management Engine Interface is also installed.

Drivers Updated

Installed latest versions from Gigabyte:

  • Intel Chipset (INF)
  • Intel Management Engine Firmware

No change.

Windows Repair Attempts

Completed successfully:

DISM /Online /Cleanup-Image /RestoreHealth

and

sfc /scannow

No integrity violations remain.

TPM Reset

Performed:

  • Clear TPM
  • Windows reprovisioned TPM successfully

Still:

certreq -EnrollAIK

0x80070490

BitLocker

All drives show:

Protection Status: Protection Off

No TPM key protectors are active.

Riot Vanguard Test

Installed Riot Vanguard's compatibility checker.

Everything passes:

  • TPM 2.0
  • Secure Boot
  • VBS
  • HVCI
  • IOMMU

So the system appears fully compliant for another modern anti cheat.

History

I played Warzone about a year ago through Battle.net without any TPM or Secure Attestation issues.

The problem only started after Activision introduced the new Secure Attestation system.

Updating the BIOS was only done as a troubleshooting step and did not introduce the issue.

Current Situation

Warzone Secure Attestation reports:

Authorization Key Failed

Meanwhile Windows reports:

Ready For Attestation = False

and AIK enrollment always fails with:

certreq -EnrollAIK

0x80070490 (Element not found)

Despite the TPM being fully functional for every other purpose.

My Questions

  1. Has anyone else experienced Authorization Key Failed with Intel PTT TPMs?
  2. Has anyone seen Ready For Attestation = False while everything else reports healthy?
  3. Has anyone been able to fix certreq -EnrollAIK returning 0x80070490?
  4. Is this a known compatibility issue with Call of Duty Secure Attestation or Windows Build 26200.8655?

Any help or insight would be greatly appreciated.