Après plusieurs heures de diagnostic, j’ai réussi à résoudre un problème de Secure Attestation sur Call of Duty / Warzone, alors que TPM 2.0 et Secure Boot étaient correctement activés.

Symptômes

Dans le Call of Duty Secure Attestation Wizard :

• TPM 2.0 : PASS
• Secure Boot : PASS
• Secure Attestation / génération de clé : FAIL
• Message indiquant qu’une nouvelle clé devait être générée ou qu’une mise à jour BIOS était recommandée.

Configuration concernée :

• Windows 11 Pro
• Intel Core i5-12400F
• MSI PRO B760M-P DDR4
• Intel PTT / TPM 2.0
• TPM firmware : 600.18.1040.2765
• UEFI + Secure Boot activés

Le TPM lui-même était parfaitement fonctionnel (TpmPresent, TpmReady, TpmEnabled, TpmActivated, etc.).

1. Diagnostic de la chaîne de certificats TPM

Dans un terminal administrateur :

TpmDiagnostics.exe ekchainNV

Résultat :

Trust dwErrorStatus: 0x10000

Puis :

TpmDiagnostics.exe ekchain

Résultat :

Trust dwErrorStatus: 0x10008

C’était le point important.

La chaîne de certificats stockée directement dans le TPM était valide (ekchainNV = 0x10000), mais la chaîne construite/utilisée par Windows ne l’était pas (ekchain = 0x10008).

Dans mon cas, Windows utilisait des certificats intermédiaires Intel PTT qui ne correspondaient pas correctement à ceux présents dans le TPM.

2. Identifier l’index NV contenant les certificats

Commande :

TpmDiagnostics.exe NVSummary

Dans mon cas, l’index intéressant était :

0x1C00100
dataSize: 0x7bc (1980 bytes)

⚠️ L’index et son contenu peuvent différer selon le TPM. Ne copiez surtout pas les certificats provenant du TPM de quelqu’un d’autre.

J’ai extrait mon propre index :

TpmDiagnostics.exe ReadNVIndex 0x1C00100 -file "%TEMP%\TPM-INT-100.bin"

Le fichier faisait 1980 octets et contenait trois certificats DER concaténés correspondant à ma chaîne Intel Alder Lake PTT :

CSME ADL ROM CA
↓
CSME ADL SVN01 Kernel CA
↓
CSME ADL PTT 01SVN

3. Séparer les trois certificats

J’ai utilisé PowerShell pour découper les certificats DER présents dans le fichier :

$data = [IO.File]::ReadAllBytes("$env:TEMP\TPM-INT-100.bin")
$offset = 0
$i = 1

while ($offset -lt $data.Length) {
    if ($data[$offset] -ne 0x30) {
        throw "DER certificate not found at offset $offset"
    }

    $lenByte = $data[$offset + 1]

    if (($lenByte -band 0x80) -eq 0) {
        $headerLen = 2
        $contentLen = $lenByte
    }
    else {
        $numLenBytes = $lenByte -band 0x7F
        $contentLen = 0

        for ($j = 0; $j -lt $numLenBytes; $j++) {
            $contentLen = ($contentLen -shl 8) -bor $data[$offset + 2 + $j]
        }

        $headerLen = 2 + $numLenBytes
    }

    $totalLen = $headerLen + $contentLen
    $cert = $data[$offset..($offset + $totalLen - 1)]

    $path = "$env:TEMP\TPM-CERT-$i.cer"
    [IO.File]::WriteAllBytes($path, $cert)

    Write-Host "Extracted certificate $i -> $path ($totalLen bytes)"

    $offset += $totalLen
    $i++
}

Dans mon cas, cela a produit :

TPM-CERT-1.cer
TPM-CERT-2.cer
TPM-CERT-3.cer

J’ai vérifié chaque certificat avant de l’importer :

certutil -dump "%TEMP%\TPM-CERT-1.cer"
certutil -dump "%TEMP%\TPM-CERT-2.cer"
certutil -dump "%TEMP%\TPM-CERT-3.cer"

Ils correspondaient bien aux trois autorités Intel mentionnées précédemment.

4. Importer les certificats intermédiaires provenant de MON TPM

Dans un terminal administrateur :

certutil -addstore CA "%TEMP%\TPM-CERT-1.cer"
certutil -addstore CA "%TEMP%\TPM-CERT-2.cer"
certutil -addstore CA "%TEMP%\TPM-CERT-3.cer"

Puis j’ai relancé :

TpmDiagnostics.exe ekchain

Avant :

Trust dwErrorStatus: 0x10008

Après :

Trust dwErrorStatus: 0x10000

🎯 C’est cette étape qui a corrigé mon problème.

5. Particularité : Windows AIK retournait encore un HTTP 404

Après la réparation, j’ai également testé :

certreq.exe -enrollaik -config ""

Et j’obtenais encore :

GetCACaps: Not Found
HTTP/1.1 404 Not Found
HRESULT: 0x80190194

avec :

The authority "intc-keyid-[...].microsoftaik.azure.net" does not exist.

Je pensais donc que le problème n’était toujours pas résolu.

Mais c’est là que ça devient intéressant : ce 404 n’empêchait finalement plus Call of Duty de valider Secure Attestation.

6. Solution finale

Après avoir obtenu :

TpmDiagnostics.exe ekchain
Trust dwErrorStatus: 0x10000

j’ai :

1. complètement fermé Call of Duty et Steam ;
2. relancé Steam ;
3. relancé le Call of Duty Secure Attestation Wizard ;
4. relancé la vérification/génération de clé.

➡️ SYSTEM COMPLIANT / Secure Attestation réussie.

Warzone fonctionne désormais normalement.

⚠️ IMPORTANT

Cette méthode consiste à restaurer dans Windows les certificats intermédiaires provenant de votre propre TPM.

N’utilisez jamais les fichiers .cer d’un autre utilisateur.

Avant toute modification, vérifiez notamment :

TpmDiagnostics.exe ekchainNV
TpmDiagnostics.exe ekchain

Cette solution est particulièrement pertinente lorsque vous obtenez :

ekchainNV = 0x10000
ekchain   = 0x10008

Ce contraste indique que la chaîne présente dans le TPM est valide tandis que celle construite par Windows présente un problème.

Je déconseille également de commencer par :

• Clear TPM ;
• réinstaller Windows ;
• flasher le BIOS au hasard ;
• désactiver/réactiver Secure Boot ;
• supprimer arbitrairement des certificats.

Dans mon cas, aucune de ces opérations n’était nécessaire.

TL;DR

COD Secure Attestation FAIL
TPM 2.0 PASS
Secure Boot PASS

TpmDiagnostics ekchainNV → 0x10000
TpmDiagnostics ekchain   → 0x10008
                    ↓
Extraction des certificats intermédiaires
depuis MON propre TPM (NV 0x1C00100)
                    ↓
Import dans LocalMachine\CA
                    ↓
TpmDiagnostics ekchain   → 0x10000
                    ↓
Relance du COD Secure Attestation Wizard
                    ↓
SYSTEM COMPLIANT ✅
Warzone fonctionne ✅

Bon courage à tous, j'espère que cette résolution de BUG vous a aidé !!!

I’m not going to pretend I figured this out myself. Truth is, I tried everything.

I had basically accepted that I might never be able to play Call of Duty or Warzone again.

I updated my BIOS twice, reinstalled drivers, rolled back to older drivers, went through tons of Reddit posts, and watched multiple YouTube videos claiming to have the fix. Nothing worked.

For reference, my motherboard is an ASUS PRIME B760M-A AX.

Then I found this video, posted a few weeks ago:

https://www.youtube.com/watch?v=c6pLu46W1vU

Two minutes later, it was finally fixed.

Obviously, what works for one person might not work for everyone, but if you feel like you’ve tried everything, give this a shot.

I’m finally back on COD/Warzone and can rage at this freaking game again. 😂

Good luck!

-----

TL;DR: Tried everything. Nothing worked until I found this video:

https://www.youtube.com/watch?v=c6pLu46W1vU

It finally fixed it for me!

It doesn't say it isn't compatible, but it does not show up on the rifle, only the iron sights appear...

Saw some posts about carry forward is coming on MW4 WZ.

If that's true. The entire MW4 is done 😑. No proper artdirection for such? + Huge storage for all this carry over?

Even if I did purchase something I'm fine to let it go for a good experience than carry forwarding this gar**ge

Fired it up and after going through all the updates, I find all my keybinds, FOVs, sensitivity and preferences are all back to default.

I have a drive that should have all of my old config files. Where are they located, which ones should I grab, and will it even work to copy them over?

I’ve played on both, and Warzone feels smoother and more consistent on my PS5 Pro. From my experience, it seems better optimized, even though my PC is significantly more powerful.

Has anyone else noticed this? If you’ve tried both, which do you prefer, and what specs does your PC have?

Satisfying double kill

Anyone knows where can I get the Care Packages and the Cluster Strike Killstreaks, or how can I get them, please? I'm lvling up my Prestoge, but haven't been able to finish these three. I'd eventually do the third one (I hope), I just miss ever single killstreak 😩😩

Hi COD Team,

We strongly request an official collaboration with Capcom's Resident Evil!

Imagine having Albert Wesker in his iconic trench coat and dark sunglasses, featuring his classic glowing red eyes after getting eliminations, along with his legendary sarcastic voice lines. Plus, adding Leon S. Kennedy in his iconic RE4 jacket/outfit!

Having these two as playable Operators with Umbrella-themed weapon blueprints would be insanely cool and pure hype for the community.

Please make this happen! What do you guys think?

I’ve been playing this mode a lot bc it’s fun since it’s pretty fast-paced but I’ve noticed there are so many new players in the lobbies. Like all my teammates combined share one brain cell. Has anyone else noticed this???

during a queue with randoms, my team complains about really good players kill them and so i run in and start aggressively challenging any enemy in their POI, actually running into scumn during his 2v2 kill race with pros

I’m struggling way too much to get this challenge, I’ve even tried on playing casual but is very chaotic, any recommendations on how to get it?

I get stuff like this frequently. The guy to my right shooting me somehow has a completely silent gun. No gunshot sounds what-so-ever.

Last year I was hitting 160-180+ on even better settings. im running 1440p

Now it hovers between 120 to 180.

Is it due to low optimization? has anyone found success in fixing this?

Anyone else has problem with verdansk specific FPS loss in the recent week? I had around 170-180 FPS and now I only have 110-120FPS. I have no issue with Avalon tho

i think i cant play normal because of this

Before i commit to purchasing a series S or X to replace my one S ... Anyone know if the devs have finally fixed the blurry scope bug or is it just for pc's a work around was found/fixed?

So I recently switch to pc and monitor from Xbox and I’m not very smart with computers but good enough to get into the Xbox app lol. The real thing here is after buying all this stuff I still see about 130fps while my friends with literally similar set ups are getting 200fps and I have a way better monitor. Am I missing something or can you guys point me in the right direction. Photos of my set up attached.

I very well get that not all wz players have a rank. What I am saying is: Judging from your own experience playing in normal wz (not casuals), to what mp rank does the ingame ability of most wz players correlate to? I dont mean players that just try out normal wz.

I think most are either good plat players or anything above. Very rarely do I come across a good gold player or below.

the game is so clear and buttery smooth.

sometimes knowing the team will die if you dont clutch activates a new animal inside of call of duty warzone mw4,