Windows 11 AIK certificate enrollment fails with “The authority does not exist”

Hi everyone,

I’m having a Windows 11 25H2 TPM/AIK attestation issue that seems to prevent Call of Duty/Warzone from completing its security attestation.

My TPM (Intel PTT/TPM 2.0) appears healthy and properly provisioned:

TPM Present/Ready/Enabled/Activated/Owned: True

EK certificate available

Windows reports the device as “Attestable”

Secure Boot enabled

However, Windows AIK certificates are not available (RSA/ECC).

The main error occurs during AIK enrollment:

“The authority 'intc-keyid-[REDACTED].microsoftaik.azure.net' does not exist.”

HTTP: 404 / 0x80190194

I also received: “No valid TPM EK/Platform certificate provided in the TPM identity request message.”

I’ve already checked TPM/attestation logs, installed the Intel attestation CA certificate, restarted the PC, and verified the Call of Duty attestation files. The problem remains.

Does anyone know if this 404 means the TPM KeyID/authority is not properly registered or recognized by Microsoft’s AIK/attestation backend? Or is there a known Windows-side fix for AIK enrollment?

I’m trying to avoid clearing the TPM or reinstalling Windows unless absolutely necessary.