The MW4 "Attestation Requirement not met" message on PC means your system failed Activision's security check: Modern Warfare 4 requires both TPM 2.0 and Secure Boot to be active, and without them you are blocked from every online mode. The fix is almost always a firmware setting or a BIOS update rather than anything wrong with the game, and Activision's free Secure Attestation Wizard tells you which part is failing.
We checked this against Activision Support's TPM 2.0 and Secure Boot article (updated November 5, 2026), the MW4 Beta and launch patch notes, Microsoft's TPM documentation and two widely used troubleshooting guides, in November 2026.
What the Error Actually Means
Activision's support article spells out the rule for this game: "Both TPM 2.0 and Secure Boot are required to play. Players who do not meet requirements will be restricted from playing any online game mode." That covers Multiplayer, DMZ and, since Season 1, the MW4 version of Warzone. Black Ops 7 is softer, restricting only some modes such as Ranked Play and placing failing PCs in separate matchmaking, so if you played BO7 without issues, that does not mean your PC passes for MW4.
The reason is anti-cheat. Activision describes TPM 2.0, Secure Boot and Remote Attestation as hardware-backed protections that "establish trust before a match begins by verifying the integrity of the PC," working alongside RICOCHET Anti-Cheat. Infinity Ward's Beta notes added that some failures come from firmware, hardware or OS problems that stop a PC from passing Microsoft Azure Attestation. In other words, the game asks Windows for a signed report of your boot chain, and the error appears when that report cannot be produced or does not check out.
Players see the problem worded a few ways: "Attestation Requirement not met," "Your PC does not meet security requirements," a Failed Attestation Status notice, or a "New Key Failed to Generate" message in the wizard. They all lead back to the same checklist below.
The Exact Requirements
Before touching the BIOS, confirm your hardware can pass at all. Activision lists these minimums:
- Operating system: Windows 11 (any version) or Windows 10 version 22H2 or later. TPM 2.0 itself works from Windows 10 20H2, but Call of Duty asks for 22H2.
- TPM version: 2.0. Legacy TPM 1.0 to 1.2 does not count.
- CPU support: Intel 8th Gen or newer with Intel PTT, or AMD Ryzen 2000 series or newer with AMD CPU fTPM, or a discrete TPM chip on the motherboard.
- Boot mode: UEFI, not Legacy or CSM.
- Disk partition style: GPT, not MBR.
- Secure Boot: enabled in firmware.
Activision notes that most Windows 11 PCs already meet these, since the operating system itself needs TPM 2.0. The usual offenders are Windows 10 machines that were upgraded from an older install, custom-built PCs where the firmware TPM ships disabled, and older drives still on MBR. If your hardware sits near the floor, our MW4 PC requirements guide lists the minimum and recommended specs for running the game itself.
Step 1: Run the Secure Attestation Wizard
Activision's own tool is the fastest diagnosis. The current download is version 1.3.0, updated October 21, 2026, linked from the TPM article on Activision Support. Extract the .zip, double-click CODSecureAttestationWizard.exe, accept the terms and run the scan. Infinity Ward said during the Beta that the wizard "doesn't just diagnose issues, it fixes them too," so run it again after every change you make.
Each failure the wizard reports maps to a specific fix:
- TPM 2.0: Not Enabled means the firmware TPM is off (Step 3).
- Secure Boot: Not Enabled means the setting is off in firmware (Step 4).
- Boot Partition not set to GPT or BIOS Boot mode not set to UEFI means you must convert before Secure Boot can work (Step 4).
- BIOS Firmware Update Required means your firmware passes today but an update is recommended and may be required later (Step 5).
- Authorization Key Failed means Windows UAC blocked the scan. Choose Generate Key and accept the UAC prompt for enrollaik.exe.
- TCG Event Log Failed means Windows is out of date. Restart and install the latest Windows update.
Step 2: Check TPM and Secure Boot Yourself
Two built-in Windows tools confirm what the wizard says. Press Windows key + R, type tpm.msc and press Enter. If TPM 2.0 is active you will see "The TPM is ready for use" under Status; "Compatible TPM cannot be found" means it is disabled in firmware or unsupported. The same window shows your TPM Manufacturer Version, which you will need for the firmware check in Step 5.
Then press Windows key + R again and run msinfo32. In System Information, BIOS Mode should read UEFI and Secure Boot State should read On. "Off" means supported but disabled, "Unsupported" means your board may not offer it, and BIOS Mode "Legacy" means you need the UEFI and GPT conversion below before Secure Boot can be switched on. A useful extra check from the guides is the command tpmtool getdeviceinformation in an admin Command Prompt: the "Ready For Attestation" and "Is Capable For Attestation" lines should both read True.
Step 3 and 4: Enable TPM 2.0 and Secure Boot
The simplest way into firmware is from Windows. On Windows 11 go to Start, Settings, System, Recovery, and next to Advanced startup choose Restart now; on Windows 10 the path is Settings, Update and Security, Recovery. After the restart choose Troubleshoot, Advanced options, UEFI Firmware Settings.
- For TPM, look under Advanced, Security or Trusted Computing (the name varies by brand). Enable Intel PTT or Security Device Support on Intel systems, or AMD CPU fTPM on AMD systems.
- For Secure Boot, open the Boot tab, confirm Boot Mode is UEFI (disable CSM if it is listed), then set Secure Boot to Enabled. If the option is greyed out, save with UEFI selected, reboot back into firmware and try again.
- Save and exit, usually with F10, then confirm the result with tpm.msc and msinfo32.
If your Windows drive is MBR, Activision points to Microsoft's MBR2GPT tool: run mbr2gpt /validate /allowFullOS and, only if that succeeds, mbr2gpt /convert /allowFullOS from an administrator Command Prompt, then switch the firmware to UEFI. The conversion has conditions: the disk can have at most three partitions, Windows must be 64-bit, BitLocker must be off, dual boot must not be in use and Secure Boot must be disabled before you start. Back up first; changing partition style or firmware settings incorrectly can stop a PC from booting, and Activision recommends contacting your PC or motherboard maker if you are unsure.
Step 5: Firmware Updates and Known Bad Versions
If TPM and Secure Boot are both on and you still fail, firmware is the usual cause. Activision names specific versions. On AMD, a Manufacturer Version in tpm.msc of the form 3.*.0.* is not compatible and needs an update: 3.92.0.5 fails, while 3.92.5.5 is fine. On Intel, INTC 302.12.*.* or INTC 303.12.*.* may require an update. Lenovo asks affected owners to open a ticket on its own support site so it can supply the right BIOS. The same AMD firmware issue can make the enrollaik.exe prompt appear repeatedly even after you click Yes, which is a sign the BIOS needs updating.
Download BIOS updates only from your motherboard or PC maker's support page and follow their instructions exactly, since a failed flash is far worse than a failed attestation check.
UAC Prompts and What Not to Do
On first launch you may see a Windows UAC prompt for CODBrokerInstaller.exe, which needs an administrator name and password, or one for enrollaik.exe. Both register your TPM with the game; choosing No means you cannot play until you accept. If you get a "CODBrokerInstaller.exe authorization declined" error without ever seeing a prompt, search Start for "change user account control settings" and move the slider to Always notify or the default level below it, then restart the game.
Some guides go further and suggest clearing or reinitializing the TPM from PowerShell. Microsoft's documentation warns that clearing the TPM "can result in data loss": you lose every key the TPM created and anything protected by them, such as a sign-in PIN, a virtual smart card or other data encrypted with those keys, so make sure you have a backup and recovery method for that data first and never do it on a work or school PC. Treat it as a last resort, not a first step. Once you are back online and testing your settings in a match, our MW4 aim assist guide covers the controller side of the PC setup.
Back in the Game
With attestation passing, everything that arrived with Season 1 opens up, from the new maps to the party playlists in our MW4 modes and Infected guide. If the days you lost to BIOS menus set your progress back, the Modern Warfare 4 store hub lists services such as camo unlocks, weapon leveling to base max and Prestige boosts. Each is done by hand by a player on your own account in standard matches; the product pages state that no cheats, unlock tools or third-party software are used, which matters in a game this strict about PC integrity.
Those services list PS5, Xbox Series X|S, PC and Switch 2, and they need your account login after checkout. If you would rather keep the grind yourself, the same hub sells Double XP codes that you redeem on your own Activision account, and our killstreak guide helps you turn those extra levels into better loadouts.
Frequently Asked Questions
Can I play MW4 on PC without Secure Boot?
Not online. Activision says players who do not meet the TPM 2.0 and Secure Boot requirements are restricted from every online game mode in Modern Warfare 4.
Does Windows 10 work for MW4 attestation?
Yes, if it is version 22H2 or later with TPM 2.0 and Secure Boot enabled. Older Windows 10 builds or a legacy TPM 1.2 will fail.
Why does attestation still fail with TPM and Secure Boot on?
Usually firmware. Check your TPM Manufacturer Version in tpm.msc: AMD 3.*.0.* and Intel INTC 302.12 or 303.12 versions may need a BIOS update from your board maker.
What is enrollaik.exe?
It is the program the game uses to register your TPM 2.0. Accept its UAC prompt. If it keeps reappearing after you click Yes on an AMD system, your BIOS needs updating.
Where do I download the Secure Attestation Wizard?
From Activision Support's TPM 2.0 and Secure Boot article. The current version is 1.3.0, updated October 21, 2026.
Should I clear my TPM to fix the error?
Only as a last resort. Microsoft warns that clearing the TPM deletes its keys and can cause data loss, including sign-in PINs and anything those keys protect, so set up a backup and recovery method first.