Call of Duty security authentication failed, certificate request error: 0x80190194

Question

Call of Duty security authentication failed, certificate request error: 0x80190194

Mr. Zhang 15

My device: ROG G614FR

TPM Vendor: MSFT Version: 6.4.1.400

BIOS: 317 (latest version)

I'm having an issue with key generation failing in Call of Duty Security Wizard, getting error 0x80190194.

0 comments

2 answers

Your answer

Answer 1

Carl-L 24,580 Microsoft External Staff Moderator

Hello Mr. Zhang,

Welcome to Microsoft Q&A forum.

Before we proceed, may I know the exact error message to check for you? Please remove all personal information before posting.

I'm waiting for your reply.

Mr. Zhang 15

System
- Device: ASUS ROG Strix G16 G614FR (AMD Ryzen 9 9955HX)
- OS: Windows 11 Home (China), 26H2, Build 26300.9711
- BIOS: G614FR.317 (latest); Secure Boot: On; HVCI: On
- TPM: Microsoft Pluton, firmware 6.4.1.400, TPM 2.0 ready
- TPM KeyIDs: MSFT-KeyId- (RSA), MSFT-KeyId- (ECC)

Issue
The Call of Duty Secure Attestation Wizard passes TPM 2.0 and Secure Boot checks but fails with "New key failed to be generated", recommending a BIOS update. BIOS is already the latest; the real failure is Windows AIK certificate enrollment.

Diagnostics
- HKLM\SYSTEM\CurrentControlSet\Services\TPM\WMI : AIKEnrollmentErrorCode = 2149122452 (0x80190194, HTTP 404).
- Scheduled task AikCertEnrollTask: LastTaskResult = 2149122452.
- Application log, event ID 86 (CertificateServicesClient-CertEnroll):
  SCEP initialization for Local System failed at GetCACaps with HTTP 404 for
  https://MSFT-KeyId-.microsoftaik.azure.net/templates/Aik/scep
  (x). The ECC KeyID ... returns 404 as well.
- System log, TPM-WMI event ID 1041: HealthStatus = Attestable; EkCertRsa2048IsAvailable = true;
  EkCertEccP256IsAvailable = true; WindowsAikCertRsa2048/EccP256/EccP384 = false.
- EK certificate chain present and valid locally:
  Subject CN=PlutonId , OU=6.4.1.400
  Issuer  CN=00D1355BBCF7A779178077987F82620B00, OU=DEVICE EKICA DFID, O=Microsoft Corporation
  Intermediate issuer CN=Pluton Factory DEVICE EK ICA DFID00A60F11, O=Advanced Micro Devices Inc.
  Validity 2021-09-15 to 2039-12-16; RSA and ECC EK certs present.
- TPM Present/Ready/Enabled/Activated/Owned = True; AutoProvisioning = Enabled; LockedOut = False.

Independent verification
A direct GET to the same SCEP URL from an unrelated network returns HTTP 404 with:
{"Message":"The authority \"msft-keyid-.microsoftaik.azure.net\" does not exist."}
So the authority is missing server-side; it is unrelated to this device, its network or BIOS.

Already tried (no effect)
- BIOS 316 -> 317, full Windows Update, clean reboot
- Cleared and re-provisioned TPM
- Verified Secure Boot / UEFI / GPT / HVCI
- Re-ran AIK enrollment (certreq and the AikCertEnrollTask scheduled task)

Answer 2

Carl-L 24,580 Microsoft External Staff Moderator

Hello Mr. Zhang,

Thanks for replying.

I've seen other users with issue like this, and also check and some has been reported to the Feedback Hub. So you are not alone in this, in this case, you can also go there and submit your issue.

In the meantime, you can try this workaround.

Extract and verify the following three intermediate CA certificates directly from TPM firmware (Please use the computer own TPM for this)
- CSME ADL ROM CA
- CSME ADL SVN01 Kernel CA
- CSME ADL PTT 01SVN
Import those three verified certificates into the Windows Local Computer > Intermediate Certification Authorities certificate store.

If the answer is helpful, please click "Yes". If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Carl-L 24,580 Reputation points Microsoft External Staff Moderator

2026-10-29T13:14:34.9133333+00:00

Hello Mr. Zhang,

Just checking in to make sure that you have received my reply. Please let me know if you have any updates.
Carl-L 24,580 Reputation points Microsoft External Staff Moderator

2026-10-31T10:17:17.42+00:00

Hello Mr. Zhang,

It's been a while since I last heard from you. May I know if you still need assistance in this?

Any feedback is appreciated.
Iqan Gohar 0 Reputation points

2026-11-04T07:59:31.62+00:00
I am experiencing a Call of Duty Secure Attestation failure on my ASUS ROG Strix G16 G614FR. My system specifications: - Model: ROG Strix G16 G614FR

- G614FR-S5184

- SN:

- CN:8GJY

- MFD:2025-5

CPU: AMD Ryzen 9 9955HX3D - BIOS: G614FR.317 (latest available) - TPM: Microsoft Pluton - TPM Firmware: 6.4.1.400 - Windows 11 Pro - Secure Boot: Enabled - TPM 2.0: Ready and enabled Call of Duty reports: "BIOS Firmware: Update Required" The Activision Secure Attestation Wizard reports: "New Key Failed to be generated – BIOS Firmware Update Recommended" I checked Windows TPM diagnostics and found: AIKEnrollmentErrorCode: 2149122452 Hexadecimal: 0x80190194 HTTP Status: 404 Not Found My BIOS is already updated to the latest available version, and TPM 2.0 and Secure Boot are enabled. I have also found reports from other G614FR owners experiencing the same Microsoft Pluton AIK enrollment failure
Carl-L 24,580 Reputation points Microsoft External Staff Moderator

2026-11-05T10:02:09.94+00:00

Hello Iqan Gohar,

The Pluton system might have difference certificates. So in this case, please submit your issue to the Feedback Hub and wait for a fix.

Thank you for your understanding.