COD TPM issue

[markc1972]

HI all , after spending hours  trying to get COD MW4 working , it seems to be a HP issue , any one else had TPM issue  , see below 

System is an HP OMEN 45L GT22-3003na, board 8D2C, BIOS F.22, Intel PTT firmware 700.19.1005.2095.

TPM 2.0 reports Present, Ready, Ready For Attestation and has a valid EK certificate present.

Microsoft AIK enrollment using:

certreq.exe -enrollaik -f -q -machine -config ""

reaches Microsoft's AIK endpoint but returns HTTP 400 / 0x80190190:

No valid TPM EK/Platform certificate provided in the TPM identity request message.

Investigation of the Intel PTT NV endorsement certificate chain identified:

EK -> ODCA 2 CSME MTP PCH SVN 01 PTT CA -> ODCA 2 CSME MTP PCH SVN 01 Kernel CA -> ODCA 2 CSME MTP PCH ROM CA -> P_MTP PCH 00003145

The PTT CA certificate SHA1 is:

4E00F4EB6C3A100A9C7FC844759942F320A796E9

Its Authority Key Identifier is:

d55c584cd975f96abd0369daf0a9b17a7446e392

which correctly matches the Kernel CA Subject Key Identifier:

d55c584cd975f96abd0369daf0a9b17a7446e392

Both use compatible ECDSA P-384 / SHA-384 algorithms.

However Windows cryptographic validation of the PTT CA against the designated Kernel CA fails with:

CERT_TRUST_IS_NOT_SIGNATURE_VALID

TRUST_E_CERT_SIGNATURE

0x80096004

The PTT certificate was extracted directly from Intel PTT TPM NV and its SHA256 is:

79C4411150D8D637C528B4FA0ED319BF3C6E92B95889CE77A96A6B153EE9E3E3

An independently exported Windows copy has the identical SHA256, ruling out a stale/different Windows certificate copy.

Please escalate to the BIOS/Intel CSME/PTT engineering team and advise whether a BIOS/CSME firmware update or TPM endorsement-certificate reprovisioning procedure is available.

[Kuroi_Kenshi]

Hi @markc1972,

Welcome to the HP Support Community!

Thank you for providing the detailed information and investigation regarding the TPM 2.0 / Intel PTT issue on your OMEN 45L GT22-3003na.

At this time, please wait for the next BIOS/firmware update that may address this behavior. Unfortunately, there is no confirmed timeline available for when the update will be released.

I understand this is frustrating, especially when the system otherwise reports the TPM as present and ready. We recommend keeping an eye on the HP support page for your OMEN 45L for future BIOS updates.

Thank you for your patience and for documenting the issue so thoroughly.

Best regards,
Kuroi_Kens