Intel PTT AIK Enrollment Fails, Microsoft AIK Authority Does Not Exist, HTTP 404

billy chavez 5 Reputation points
2026-08-29T00:26:04.24+00:00

I am experiencing a TPM AIK enrollment failure on Windows 11 with an Intel Core Ultra 7 265F and Intel PTT 2.0.

TPM 2.0 is enabled, ready and functional. Secure Boot is enabled and active. Windows TPM diagnostics reports the machine as attestable.

I identified and repaired an incomplete local Intel EK certificate chain using the Intel intermediate certificates stored in my own TPM NV storage. After repair:

TpmDiagnostics.exe ekchain

now reports:

Trust dwErrorStatus: 0x10000

However, AIK enrollment still fails when running:

certreq -enrollaik -config ""

Microsoft now returns:

HTTP 404 Not Found

0x80190194 / HTTP_E_STATUS_NOT_FOUND

Server response:

The authority "intc-keyid-<PII removed>.microsoftaik.azure.net" does not exist.

Intel PTT KeyId:

TPM Manufacturer: Intel (INTC) TPM Model: MTP CPU: Intel Core Ultra 7 265F Motherboard: ASRock B860M-C BIOS: 3.31 Windows 11 Home 64-bit, build 26200.9168

The failure occurs during GetCACaps, before an AIK enrollment request is submitted.

Microsoft request ID:

<PII removed>

This is affecting Call of Duty Secure Attestation because Windows cannot obtain a Windows AIK certificate despite the TPM EK certificate chain now validating successfully.

Please escalate this to the team responsible for Microsoft AIK/Azure TPM attestation infrastructure. Can you confirm whether this Intel PTT KeyId/authority needs to be provisioned or onboarded in the Microsoft AIK service?

Windows for home | Windows 11 | Security and privacy
0 comments No comments

1 answer

Sort by: Most helpful
  1. Carl-L 23,290 Reputation points Microsoft External Staff Moderator
    2026-08-29T06:45:16+00:00

    Hello billy chavez,

    Welcome to Microsoft Q&A forum.

    You are not alone in this, actually I have seen other users reporting this issue recently. Based on some check, this is highly likely something that need to be done on the server side. This is just a public forum so engineering team might not check it very often. You can escalate this to them directly using the Feedback Hub app on your Windows computer. Also, as I know a few users have already submitted it so you can go and check.

    Thank you for your understanding.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.