MW4 Failed Attestation Fix: TPM 2.0 and Secure Boot

Short answer: MW4 on PC needs both TPM 2.0 and Secure Boot. A PC without them cannot play any online mode, DMZ included. You need Windows 11 or Windows 10 version 22H2 or later, TPM 2.0 switched on in the BIOS, and Secure Boot switched on with the PC in UEFI mode on a GPT drive. Activision's free Secure Attestation Wizard tells you which of these is missing.

What MW4 needs on PC

• Windows: Windows 11, any version, or Windows 10, version 22H2 or later. Windows 11 needs TPM 2.0 and Secure Boot itself, so most Windows 11 PCs already have both on.
• TPM 2.0: Intel 8th Gen or newer, where the BIOS setting is Intel PTT, or Security Device Support on some boards; or AMD Ryzen 2000 series or newer, where it is AMD CPU fTPM. A separate TPM chip on the motherboard (dTPM) works too.
• Secure Boot, which needs all three:
  • The PC starts in UEFI mode, not Legacy (also called CSM).
  • The Windows drive uses the GPT partition style, not MBR.
  • Secure Boot is set to Enabled in the UEFI/BIOS.

MW4 is stricter than the other Call of Duty games here. Black Ops 7 and Warzone need them too, but there a PC that misses them is only kept out of some modes and playlists, such as Ranked Play, and may be matched with other such players. In MW4 there is no reduced mode: without both settings you cannot play online at all. The full PC specs, drivers and storage are on our MW4 system requirements page.

Check your PC in two minutes

1. TPM 2.0: Press Windows key + R, type tpm.msc and press Enter. Good: The Status box says “The TPM is ready for use”. If not: “Compatible TPM cannot be found” means TPM is switched off in the BIOS, or the PC does not have it.
2. Secure Boot and boot mode: Press Windows key + R, type msinfo32 and press Enter. Good: BIOS Mode says UEFI and Secure Boot State says On. If not: Secure Boot State Off: the PC supports it but it is switched off. Unsupported: check the motherboard manual. BIOS Mode Legacy: switch to UEFI, which may first need the drive converted to GPT.
3. Partition style of the Windows drive: Open Disk Management, right-click the Windows drive, choose Properties and open the Volume tab. Good: Partition Style says GPT. If not: MBR has to be converted to GPT before UEFI mode and Secure Boot will work.

Run the Secure Attestation Wizard

Activision's Call of Duty Secure Attestation Wizard (version 1.2.0, updated September 16, 2026) scans your PC and lists every setting that still needs work. Download it from Activision's help article in the sources below, unzip it and run CODSecureAttestationWizard.exe. If it says your system is compliant, you are ready and can delete it.

Before you change BIOS settings

Activision warns that wrong UEFI/BIOS changes can stop a PC from starting, says to follow the motherboard maker's own instructions, and suggests asking the maker or a professional if you are unsure. Changing TPM, Secure Boot and boot mode all mean restarting into the UEFI/BIOS, so keep this page open on your phone.

Still failing?

• On some AMD PCs with TPM firmware version 3.*.0.* (any numbers in place of the stars), the enrollaik.exe prompt keeps coming back even after you select Yes. Activision says that means the motherboard BIOS needs an update.
• To see your TPM firmware version, open tpm.msc and look at Manufacturer Version under TPM Manufacturer Information. Your motherboard maker's support page has the BIOS updates.
• If you did every step and still get a Failed Attestation Status, Activision asks you to send a TPM incompatibility report from its help article; the reports help its engineers and hardware makers fix BIOS firmware.

Fixed? Digital pre-orders on PC can preload before launch; our MW4 release countdown has every date in your time zone, and the DMZ beginner's guide walks you through your first deployment.

Questions