Microsoft Security | Intune | Enrollment
Registering devices with Intune for management and policy enforcement
Azure AIK trust pool
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 35%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EWW%3C/text%3E%3C/svg%3E)
wahren watson
0
Reputation points
Same failure on another platform.
Device: MSI Katana 17 HX, BIOS E17L7IMS.108.
TPM: Intel PTT 2.0, manufacturer version 600.18.1042.2872, spec 1.38.
EK issuer: CN=CSME ADL PTT 01SVN (NotBefore 23/06/2021, NotAfter 01/01/2050).
EK cert is present locally (certutil -tpminfo succeeds).
Windows reports the TPM ready for attestation and not vulnerable.
Latest BIOS, Intel ME firmware update, TPM clear, and installation of the public OnDie CA CSME intermediate did not help.
Call of Duty Secure Attestation Wizard fails on new attestation key generation and recommends a BIOS update.
Please add CN=CSME ADL PTT 01SVN to the Azure AIK trust pool, or confirm a timeline.
Microsoft Security | Intune | Enrollment
Sign in to answer