Security Attestation Error - Black Ops 7 MP Ranked Play Issue

Joined
Feb 8, 2026
Messages
6
I tried to run BO7 Multiplayer Ranked Play today and I got a security attestation error, I have both Secure Boot and TPM 2.0 active. I also ran the Call of Duty Security Attestation Test tool and it showed that I was good to go in terms of security attestation. However, I am still getting the error. The only other possible explanation I have seen is that it is a BIOS issue and you have to update your BIOS. My motherboard is the PRO B650-VC WIFI II.

The Activision support page on this issue (https://support.activision.com/articles/trusted-platform-module-and-secure-boot#BiosFirmwareGuidance), states that if your AMD manufacturer version is AMD 3.*.0.* (where "*" stands for any number), then you need to update your BIOS. My AMD manufacturer version is AMD 6.*.*.*, which AMD also says is good for TPM Attestation (https://www.amd.com/en/resources/support-articles/faqs/pa-420.html).

Just wondering if anyone else is having this issue or has found a solution? Or is installing the most recent BIOS update for my motherboard what I should do? I haven't manually installed a BIOS update before. I have come across some posts on Reddit which state that installing a BIOS update solves this security attestation error, but I have also come across other accounts which say that it hasn't. This could very well be a Call of Duty issue, as it seems this issue is only happening with BO7 MP Ranked Play, and not Warzone Ranked Play. But any guidance or advice would be appreciated.
 
Or is installing the most recent BIOS update for my motherboard what I should do?

100%. If it's solved in the latest BIOS, then all other troubleshooting would be a waste of time. So the BIOS update is always first on the list of things to try.

Update how-to:
1) Get the latest BIOS. It's the topmost one on the MSI support page for your board. https://www.msi.com/Motherboard/PRO-B650-VC-WIFI-II/support
2) Extract the file and you will get a text file and the BIOS file. Put the BIOS file into the root folder of a USB stick/drive.
3) Enter the BIOS by pressing DEL during boot, go to "M-FLASH" in the BIOS.
4) Once M-Flash (the updater) is loaded, it will show a list of your drives. Select the USB stick and select the previously extracted BIOS file on there.
5) It will ask for confirmation and then update the BIOS. It's fully automatic from there, takes about two minutes.

In this case, I would even go to the beta BIOS from the very top. Since it's been out for almost four months now, there shouldn't be any major bugs in it, otherwise they would've pulled or replaced it by now. And for AM4 boards for example, only the latest beta BIOS fixed the TPM issues with some games.

If you never updated your BIOS before, you would be on a quite outdated versions, tons of bugs would be fixed since then, so give it a go. For the future, to not even run into such problems, you should update the BIOS from time to time. Definitely when first installing the board (since the factory BIOS will already be several months outdated), but also later on, since new bugs are fixed and improvements are made continuously.
 
After updating to the latest BIOS, maybe you could try to manually update the Secure Boot certificate by following the steps that I posted here:

Also, check if TPM Attestation status is Ready.
You can type 'Security processor' in Windows search bar to check, if it is 'Not Ready', type 'tpm.msc' in Windows Run (Win+R) and on the right hand side click 'Clear TPM' to reset it to factory default.

Btw does the security attestation error looks like this?
1770714820830.png

(screenshot taken from
 
Last edited:
Also try setting Secure Boot to Custom -> Max Security (or something like that). I had to do that to get other games to work. Also on a B650 board.
 
I also ran the Call of Duty Security Attestation Test tool and it showed that I was good to go in terms of security attestation. However, I am still getting the error. The only other possible explanation I have seen is that it is a BIOS issue
If this says good to go, it is not the BIOS, but a Software or security setting problem

If it were a BIOS problem, there would be 20 page page topic about it by now, as it would be affecting almost all of the Intel 600 series Motherboards

See this example of when the bios needs updating to comply


I would suggest going to BIOS and enrol all factory default keys for TPM
 
I'm getting the same problem, but my motherboard is the Pro Z790-S. Something a bit weird with the bios. When I go to https://www.msi.com/Motherboard/PRO-Z790-S-WIFI/support it says

Version: 7D88v1G
Release Date 2025-09-02

When I go to my bios, it says that version 7D88v1G, but has the release date as 08/04/2025 which I am guessing is August. But is that not strange that the dates are out like that?

I did update the bios again, with the latest from the website, but the date stayed as it was.

tpm.msc says ready for use

The Activision scan tool did previously say it passed, but now it is saying "Your PC does not pass Attestation Compatibility Check" - BIOS Firmware update required

Any help appreciated. Spent hours trying to get it working
 
I notice that if you go into EventViewer -> Administrative Events, I see the following

SCEP Certificate enrollment for Local system via https://intc-keyid-ea950d987bcff0df...ca2.microsoftaik.azure.net/templates/Aik/scep failed:

SubmitDone
Submit(Request): Bad Request
{"Message":"No valid TPM EK/Platform certificate provided in the TPM identity request message."}
HTTP/1.1 400 Bad Request
Date: Mon, 16 Feb 2026 10:50:33 GMT
Content-Length: 96
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 6061f598-3724-4960-974a-9ac0650a4391

Method: POST(6266ms)
Stage: SubmitDone
Bad request (400). 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
 
When I go to my bios, it says that version 7D88v1G, but has the release date as 08/04/2025 which I am guessing is August. But is that not strange that the dates are out like that?

No. Release date is when they upload it to the website, but the BIOS date is the build date / compilation date of the finished code, when the BIOS file is ready and can go to internal testing. After a couple weeks of testing, it's gonna be released on the website.
 
BUMP. --- Many people are still having this issue! Some correspondence from MSI would be helpful.

Have a client with Motherboard: https://www.msi.com/Motherboard/MPG-Z590M-GAMING-EDGE-WIFI/support

For reference I am a PC Builder/Optimizer/Coder.

Tested Windows 10 / Windows 11 (build 26200)

All security updates and all drivers updated through MSI center and or the website tried both routes separately.

Intel 11th Gen Core I7 11700k.

-TMP settings are correct. Manf Version 600.x on TPM 2.0
-Bios settings are correct and secure boot was reinitialized about 20 times.
-Tried adjusting DMA settings in Bios in various configurations to provide what is further then what Activision is even requesting via Ricochet Anti Cheat.
- UEFI
- GPT hard drive setup and confirmed *
- Latest Graphics Drivers all up to date:
>591.86 (GRD) 591.74 (studio)
 
I have this issue only after updating to the BIOS revision 7E62v2A50 for the MSI Tomahawk MAX WIFI B850 board with Call of Duty Warzone (from 7E62v2A48)

7800X3d, Windows 11 (all updates) , Intel ARC B580 12GB, 32GB DDR5 6200 (if it matters)

TPM is enabled and secure boot. I have tried all the fixes above and nothing has had any impact.

I have all the latest updates for windows 11 and all other software. This was literally an issue after a reboot and update to the BIOS and nothing else has changed.

the error message in COD warzone is ""Your PC does not pass Attestation Compatibility Check" - BIOS Firmware update required" (this is using the COD tool to check this issue)

Can someone please have a look into this it appears BIOS related or a BIOS settings for sure?
 
Have you checked the TPM Attestation status is Ready or Not Ready?
You can type 'Security processor' in Windows search bar to check, if it is 'Not Ready', type 'tpm.msc' in Windows Run (Win+R) and on the right hand side click 'Clear TPM' to reset it to factory default.

Also, you might need to check the UEFICA2023Status in Registry Editor, make sure it is Updated, not NotStarted.
Here's a post that I explained how to update the registry key: https://forum-en.msi.com/index.php?threads/certificate-error-msi-b550-tomahawk.417752/post-2371777
 
Yes had checked it was ready in tpm.msc. Hadn't come across "Security processor", but that also says ready. I cleared it again from that UI - had previously done in tpm.msc. Still no joy. Will go and read through your other post, but it sounds like different issue.

1771758229747.png
 
Would be good to hear if there are other owners of MSI motherboards who are not experiencing this problem playing COD.
Most only come here if there is a problem
SO not likely to get to many who will chime in if it is working.

Since the fTPM is on the CPU there is a chance it is a fault with the CPU, but this is hard \to test if you don't have access to extra hardware
And at the moment only way MSI could test would be to have your Motherboard in hand, as there are way to few having a problem.
This suggests it is more of a case-by-case, i.e., not widespread or likely to be caused by a BIOS problem and down to Hardware or a software bug.
 
I have this issue only after updating to the BIOS revision 7E62v2A50 for the MSI Tomahawk MAX WIFI B850 board with Call of Duty Warzone (from 7E62v2A48)
Please do a clear Cmos and then reflash the BIOS with the same BIOS 7E62v2A50, and once flashed, do a second Clear CMOS with the PSU unpluged
 
@Alan J T I tried that on my PRO Z790-S WIFI with Bios 7D88v1G (clear -> flash -> clear), but still no joy. The game is still giving me the error and I'm still seeing this error in EventViewer - is this related to the issue I am experiencing?

SCEP Certificate enrollment for WORKGROUP\NEWDOUB$ via https://intc-keyid-ea950d987bcff0df...ca2.microsoftaik.azure.net/templates/Aik/scep failed:

SubmitDone
Submit(Request): Bad Request
{"Message":"No valid TPM EK/Platform certificate provided in the TPM identity request message."}
HTTP/1.1 400 Bad Request
Date: Mon, 23 Feb 2026 04:49:58 GMT
Content-Length: 96
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 51c42d68-4112-4366-938c-7aea18db62c4

Method: POST(4969ms)
Stage: SubmitDone
Bad request (400). 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
 
Back
Top