TPM Attestation Failure on OMEN Max 16 for Call of Duty

[Lablebi]

Hello,

I am experiencing an issue related to Secure Boot and TPM attestation after installing the latest BIOS update (Insyde, version F.21) on my HP device.

Since this update, Windows Event Viewer shows the following errors:

• Event ID 1801:
  “Updated Secure Boot certificates are available on this device, but they have not yet been applied to the firmware.”
• Event ID 1041:
  The attestation health status reports “Possibly attestable”, with a PCR mismatch (PcrsMatchTcgLog = false).

This issue appeared when I attempted to play Call of Duty Ranked Play, which requires a full system security attestation (likely Azure-based). Because the firmware has not applied the updated Secure Boot certificates, the attestation fails and the game refuses to launch Ranked mode.

Here are the actions I have already taken:

• Disabled and re-enabled Secure Boot
• Reset Secure Boot keys to factory defaults
• Performed multiple full shutdowns and restarts
• Verified that Secure Boot is in Standard mode
• BitLocker is disabled
• TPM is functioning normally (all required checks pass)

Despite this, the firmware still does not apply the updated Secure Boot certificates, and the errors persist.

Could you please advise:

1. Whether there is a specific DBX / Secure Boot / UEFI update available for my HP model
2. How to force the firmware (Insyde) to apply the updated Secure Boot certificates
3. Whether this behavior is a known issue with BIOS version F.21

Thank you in advance for your assistance.

[Lablebi]

I may add that the issue started on the 14th of February, before that date I was able to play Ranked Mode without issues. 

[Prox2606]

I have the exact same issue. Omen Gaming MAX 16 latest generation laptop and i cant play the only game i bought it for. Giving it about 5 more days to fix, otherwise i will just return it.

I even installed a clean version of Windows but nothing seems to work.

Either activision lower the TPM requirements or HP release an update. Really hope they can solve this issue cause i love the laptop and hate to return because of this.

[Deep_World]

Hi @Lablebi,
 
Welcome to the HP Support Community!

Thanks for reaching out!

Sorry for the inconvenience caused and don’t worry let me help you.

To better understand the issue, could you please provide a few more details?

From what you’ve described, the issue seems tied to Secure Boot certificate updates not being applied correctly after the BIOS update (F.21). 

• Whether you updated the BIOS manually (via HP Support website) or through HP Support Assistant/Windows Update.

In the meantime, here are a few troubleshooting steps you can try:

• Check for HP UEFI updates: Open HP Support Assistant or visit the HP Drivers & Downloads page for your model to see if there’s a newer BIOS or UEFI update beyond F.21. Sometimes certificate updates are bundled separately.
• Clear Secure Boot keys and reapply: You mentioned resetting to factory defaults, but try manually clearing the keys in BIOS, saving, rebooting, then re-enabling Secure Boot.
• Windows Update – Optional Updates: Check if there’s a “Security Update for Secure Boot DBX” under Windows Update → Advanced Options → Optional Updates. These updates push new certificate databases that the firmware needs.
• Reinstall HP Sure Start/HP Client Security (if available for your model): These tools sometimes handle certificate synchronization between Windows and firmware.

I hope this helps.

I'm glad I could help! 😊 If this resolved your issue, please mark it as "Accepted Solution" and click "Yes" on "Was this reply helpful?" Your feedback not only keeps us going but also helps others find the solution faster! 

Take care and have an amazing day ahead! 

Best regards,

Deep_World.  

[BarbozZa]

I wanted to provide an update regarding the attestation issue that prevents me from playing Ranked in Call of Duty / Warzone.

Following previous suggestions (checking UEFI/BIOS updates, clearing Secure Boot keys, optional Windows updates, reinstalling HP security tools), none of these steps resolved the issue.

To be thorough, I have now completely reinstalled Windows 11 from scratch, applied all updates including optional and security updates, and installed all drivers (GPU, network, system) so that my laptop is fully up-to-date and compliant.

Despite this, the attestation problem persists and I am still unable to play Ranked. This clearly shows that the issue cannot be resolved from my side.

At this point, either Activision must address their attestation checks, or HP must provide further assistance to ensure compatibility with Warzone, as all recommended troubleshooting on the PC side has already been completed.

I hope this can be escalated with the relevant teams so a resolution can be found.

Thank you for your time and support

[Deep_World]

Hi @Lablebi,

Thanks for your response. 

Thank you so much for taking the time to provide such a detailed update. I truly understand how it must be to go through all the recommended troubleshooting steps including a full Windows reinstall.

Since you’ve already completed every step that can be done on your side. To get you the best assistance, we need to take this conversation to a private chat. We're inviting you to a private message to protect your privacy and ensure that any sensitive information remains confidential. 

To access your private message, just click the little blue envelope icon on the upper right corner of your HP Community profile, next to your profile name. Alternatively, you can click on this link. 

You can use this link as well: 

Private Messages - HP Support Community

We're looking forward to helping you resolve this issue! 

Stay tuned, and thanks for your patience! 

Best regards,

Deep_World

[BLTBravo]

I have the same issue but it just says Matchmaking is unavailable. Numerous people are having this problem, and it seems like HP and Activision are avoiding this problem like it's the plague. I opened a chat too, and they said they may work on it. This is not very promising, and I'm not sure what to do anymore.

[Lablebi]

Hello,

I did all the steps you mentionned above. I even reinstalled Windows 11 from scratch and cleaned the disks. But the issue is still the same.

Conclusion is either Activition need ms to lighten their security requirements or HP does a Bios update to take into account new security norms

BR