Azure AIK enrollment fails with HTTP 400 (0x80190190) – Intel ODCA 2 CSME P_ADL 00002983 Issuing CA I am experiencing a TPM AIK attestation failure that prevents Call of Duty from passing its hardware security attestation requirement.

System:

• ASUS PRIME B760-PLUS
• Intel Core i5-14500F
• BIOS 1836
• Windows 11 Pro 25H2
• OS Build 26200.9168
• Intel PTT / INTC TPM
• TPM 2.0
• TPM firmware: 600.18.1040.2765
• Secure Boot: On
• BIOS Mode: UEFI

Local TPM health checks pass:

TpmPresent: True TpmReady: True TpmEnabled: True TpmActivated: True TpmOwned: True

Call of Duty Secure Attestation also reports:

TPM 2.0: Passed Secure Boot: Passed

However, AIK enrollment fails.

Command:

certreq -enrollaik -config ""

Result:

HTTP/1.1 400 Bad Request

"No valid TPM EK/Platform certificate provided in the TPM identity request message."

HRESULT:

0x80190190

The EK certificate issuer is:

CN=www.intel.com, OU=ODCA 2 CSME P_ADL 00002983 Issuing CA

The request reaches the Microsoft AIK endpoint successfully and fails during server-side validation.

I have already updated BIOS, installed Intel/Windows updates, run DISM/SFC, and performed a Windows 11 Repair Install. The issue remains unchanged.

Could Microsoft please confirm whether the Intel ODCA 2 CSME P_ADL 00002983 issuing CA is currently present in the Azure AIK attestation trust pool?

If it is missing, is Microsoft working on adding this Intel issuing CA to the AIK trust bundle?

Please also confirm whether there is any supported client-side workaround for this certificate-chain validation failure.

This issue is currently blocking Call of Duty RICOCHET Secure Attestation even though TPM 2.0 and Secure Boot pass locally.