使命召唤游玩的时候老是显示bios需要更新导致匹配受到影响

本人雷神猎刃S笔记本，处理器i9-13900HX，搭载Intel固件PTM TPM2.0，系统Win11 25H2版本。

已确认BIOS开启安全启动、关闭CSM，本地tpm.msc内TPM状态就绪。

使用管理员CMD执行 certreq -enrollaik 申请AIK证书，返回400错误，提示缺少有效的TPM-EK证书。

该问题直接导致使命召唤战区RICOCHET反作弊判定BIOS固件异常，游戏登录身份验证失败。

排查后得知：该批次13代HX移动端处理器出厂EK证书的根CA未录入微软Azure鉴证云端信任库，本地硬件TPM本身无硬件损坏。

已经联系雷神官方售后，售后仅可重刷原厂BIOS，无法定制固件适配微软云端校验。

恳请技术团队核查该批次Intel证书链，将对应的CA加入微软云端信任列表，解决TPM云端鉴证失败问题，附件附带TPM诊断日,我的回复邮箱******@outlook.com

Subject：HTTP 400 Error AIK Enrollment | Intel 13900HX PTT TPM Missing trusted EK CA for Call of Duty RICOCHET

正文内容

Dear Microsoft Windows & Azure Attestation Team,

I have a Thunderobot Hunter S gaming laptop equipped with Intel i9-13900HX processor with firmware-based Intel PTT 2.0 TPM.

System Version: Windows 11 25H2 Build 26200

1. My BIOS settings: Secure Boot enabled, CSM disabled, Intel PTT turned on, all security options are default factory settings.

​

2. Check status:  tpm.msc  confirms TPM 2.0 is present and ready on local system.

​

3. When I run the command  certreq -enrollaik  in administrator CMD, it returns HTTP 400 Bad Request, error info: No valid TPM EK/Platform certificate provided.

​

4. This attestation failure triggers RICOCHET anti-cheat of Call of Duty Warzone pop-up "BIOS firmware need update", I cannot log into the game normally.

Diagnostic information:

• CPU: Intel i9-13900HX Raptor Lake-HX

​

• TPM Type: Intel PTT firmware TPM

​

• The EK certificate chain belongs to Intel ODCA 2 CSME batch root CA, which is not added to Microsoft Azure attestation trusted store currently.

I have contacted laptop manufacturer Thunderobot official after-sales, they can only flash original BIOS, the firmware itself has no customized patch to fix the attestation issue.

Kindly help review the corresponding Intel CA certificate chain and add it to the Microsoft trusted attestation list, so the TPM AIK enrollment can pass cloud verification normally.

I can provide tpmdiagnostics ekchain export logs if you need.

Best regards