COD TPM issue

[markc1972]

HI all , after spending hours  trying to get COD MW4 working , it seems to be a HP issue , any one else had TPM issue  , see below 

System is an HP OMEN 45L GT22-3003na, board 8D2C, BIOS F.22, Intel PTT firmware 700.19.1005.2095.

TPM 2.0 reports Present, Ready, Ready For Attestation and has a valid EK certificate present.

Microsoft AIK enrollment using:

certreq.exe -enrollaik -f -q -machine -config ""

reaches Microsoft's AIK endpoint but returns HTTP 400 / 0x80190190:

No valid TPM EK/Platform certificate provided in the TPM identity request message.

Investigation of the Intel PTT NV endorsement certificate chain identified:

EK -> ODCA 2 CSME MTP PCH SVN 01 PTT CA -> ODCA 2 CSME MTP PCH SVN 01 Kernel CA -> ODCA 2 CSME MTP PCH ROM CA -> P_MTP PCH 00003145

The PTT CA certificate SHA1 is:

4E00F4EB6C3A100A9C7FC844759942F320A796E9

Its Authority Key Identifier is:

d55c584cd975f96abd0369daf0a9b17a7446e392

which correctly matches the Kernel CA Subject Key Identifier:

d55c584cd975f96abd0369daf0a9b17a7446e392

Both use compatible ECDSA P-384 / SHA-384 algorithms.

However Windows cryptographic validation of the PTT CA against the designated Kernel CA fails with:

CERT_TRUST_IS_NOT_SIGNATURE_VALID

TRUST_E_CERT_SIGNATURE

0x80096004

The PTT certificate was extracted directly from Intel PTT TPM NV and its SHA256 is:

79C4411150D8D637C528B4FA0ED319BF3C6E92B95889CE77A96A6B153EE9E3E3

An independently exported Windows copy has the identical SHA256, ruling out a stale/different Windows certificate copy.

Please escalate to the BIOS/Intel CSME/PTT engineering team and advise whether a BIOS/CSME firmware update or TPM endorsement-certificate reprovisioning procedure is available.