Azure Attestation mysterious failure

Question

Azure Attestation mysterious failure

Jon 0

Microsoft Azure Attestation (in the form of Call of Duty Black Ops 7 "Secure Attestation") is failing on my PC. TPM is enabled and working, Secure Boot is enabled and working, but it says I "need a BIOS update" and there are (unspecified) "configuration warnings". There is no BIOS update, my BIOS is already completely up-to-date with the latest version (from 2 days ago). The PC is top of the line and is only a year old.

Is there any debug tool for Azure Attestation that can be used to diagnose why a PC is failing the check?

[moved from Windows for home | Windows 11 | Performance and system failures]

Stephen Foster 0 Reputation points

2026-08-27T00:30:09.9733333+00:00

I have the same issue with the GET-TPM and TPM-MSC commands and the Security Processor Details page all showing the TPM is working and Attestation is ready. Dell support says it is an Activision issue and I'm still waiting for Activiision to respond. There are no BIOS or software updates available.

1 answer

Your answer

Stephen Foster 0 Reputation points

2026-08-27T00:30:09.9733333+00:00

I have the same issue with the GET-TPM and TPM-MSC commands and the Security Processor Details page all showing the TPM is working and Attestation is ready. Dell support says it is an Activision issue and I'm still waiting for Activiision to respond. There are no BIOS or software updates available.

Answer 1

Hello Jon,

Actually, That's very funny (Call of Duty Black Ops 7). You made my day.

Let me try to help you on this:

I need you to check for (TPM & DeviceHealthAttestation logs in Event Viewer).

I suspect that: A BIOS update reset a security measurement, After a firmware update, the TPM PCR values change.

Fully power off the machine --> Turn off the PSU/Power --> Hold the power button for 10~60 Seconds --> Boot back again.

Boot into BIOS/UEFI and confirm that Secure Boot is enabled & not in Setup Mode + I recommend check other bios settings and confirm nothing changes after the update.

Windows 11 has had several Secure Boot revocation updates: Run a Windows Update (Optional + Others).

Lastly, can you please check systeminfo and confirm (BIOS Status & PCR7 Confirm config)?
User's image

Best of Luck,

M.