Escalation: Microsoft Pluton TPM AIK Enrollment Failure (HTTP 404 / 0x80190194) – ASUS ROG Strix G16 G614FR

Dear Microsoft Support and Engineering Team,

I am writing to request technical assistance and engineering-level investigation into a persistent Microsoft Pluton TPM attestation issue affecting my ASUS ROG Strix G16 laptop.

Despite having the latest available BIOS, an operational TPM 2.0, and Secure Boot enabled, my system is unable to complete AIK (Attestation Identity Key) certificate enrollment.

This is preventing me from successfully completing Call of Duty's Secure Attestation verification, which incorrectly or generically reports that my BIOS firmware requires an update.

I have already worked with ASUS technical support and performed their recommended TPM diagnostic and repair procedures. Unfortunately, the issue remains unresolved.

Below are my system specifications, troubleshooting history, and findings from the diagnostic logs.

---

1. System Specifications

Laptop Information

• Manufacturer: ASUS

Model: ROG Strix G16 G614FR

Processor: AMD Ryzen 9 9955HX3D

Operating System: Windows 11 Pro

BIOS Version: G614FR.317

BIOS Status: Latest available version for my model

TPM Information

TPM Implementation: Microsoft Pluton

Manufacturer ID: MSFT

Manufacturer Firmware Version: 6.4.1.400

TPM Specification Version: 2.0

TPM Enabled: True

TPM Activated: True

TPM Status: Ready for use

Secure Boot: Enabled

These specifications have been verified through Windows TPM Management (tpm.msc) and PowerShell using the Win32_Tpm WMI class.

2. Original Problem

When launching Call of Duty, the game's security verification reports:

"BIOS Firmware: Update Required"

Running the Activision Secure Attestation Wizard results in:

"New Key Failed to be generated – BIOS Firmware Update Recommended"

However, the BIOS is already updated to version G614FR.317, and the system's TPM and Secure Boot features are functioning and enabled.

Further investigation through Windows TPM diagnostics identified the following error:

AIKEnrollmentErrorCode: 2149122452

Hexadecimal Error: 0x80190194

HTTP Status: 404 Not Found

Failed Operation: GetCACaps

The Microsoft AIK certificate enrollment service returns the following response:

The authority "msft-keyid-.microsoftaik.azure.net" does not exist.

This suggests the problem may be related to Microsoft AIK certificate authority discovery, certificate authority provisioning, or compatibility between Microsoft Pluton firmware and the AIK enrollment infrastructure.Dear Microsoft Support and Engineering Team,

I am writing to request technical assistance and engineering-level investigation into a persistent Microsoft Pluton TPM attestation issue affecting my ASUS ROG Strix G16 laptop.

Despite having the latest available BIOS, an operational TPM 2.0, and Secure Boot enabled, my system is unable to complete AIK (Attestation Identity Key) certificate enrollment.

This is preventing me from successfully completing Call of Duty's Secure Attestation verification, which incorrectly or generically reports that my BIOS firmware requires an update.

I have already worked with ASUS technical support and performed their recommended TPM diagnostic and repair procedures. Unfortunately, the issue remains unresolved.

Below are my system specifications, troubleshooting history, and findings from the diagnostic logs.

---

1. System Specifications

Laptop Information

Manufacturer: ASUS

Model: ROG Strix G16 G614FR

Processor: AMD Ryzen 9 9955HX3D

Operating System: Windows 11 Pro

BIOS Version: G614FR.317

BIOS Status: Latest available version for my model

TPM Information

TPM Implementation: Microsoft Pluton

Manufacturer ID: MSFT

Manufacturer Firmware Version: 6.4.1.400

TPM Specification Version: 2.0

TPM Enabled: True

TPM Activated: True

TPM Status: Ready for use

Secure Boot: Enabled

These specifications have been verified through Windows TPM Management (tpm.msc) and PowerShell using the Win32_Tpm WMI class.

2. Original Problem

When launching Call of Duty, the game's security verification reports:

"BIOS Firmware: Update Required"

Running the Activision Secure Attestation Wizard results in:

"New Key Failed to be generated – BIOS Firmware Update Recommended"

However, the BIOS is already updated to version G614FR.317, and the system's TPM and Secure Boot features are functioning and enabled.

Further investigation through Windows TPM diagnostics identified the following error:

AIKEnrollmentErrorCode: 2149122452

Hexadecimal Error: 0x80190194

HTTP Status: 404 Not Found

Failed Operation: GetCACaps

The Microsoft AIK certificate enrollment service returns the following response:

The authority "msft-keyid-.microsoftaik.azure.net" does not exist.

This suggests the problem may be related to Microsoft AIK certificate authority discovery, certificate authority provisioning, or compatibility between Microsoft Pluton firmware and the AIK enrollment infrastructure.