Quick answer (TLDR): "Failed Attestation Status" means RICOCHET Anti-Cheat could not verify that your PC meets Call of Duty's security requirements, so you're locked out of most playlists. To fix it you need to enable TPM 2.0 and Secure Boot in your BIOS and, on many AMD boards, update your BIOS/firmware (older AMD fTPM versions in the 3.x.0.x range fail the check). Run the official Call of Duty Secure Attestation Wizard first — it tells you exactly what's wrong — then enable TPM 2.0, turn on Secure Boot (UEFI boot mode + GPT disk), flash the latest BIOS, and restart. Until you pass, Black Ops 7 limits you to Nuketown 24/7 and Warzone to Battle Royale Casual. Full step-by-step below.
If you booted up Call of Duty after the Season 4 update and got hit with "Failed Attestation Status Applied" or "BIOS Firmware: Update Required" — and suddenly every playlist except one is greyed out — you are not banned, and you didn't do anything wrong. RICOCHET Anti-Cheat's hardware-attestation check simply couldn't confirm your PC's security settings. This guide explains exactly what the error means, why Season 4 triggered it, and the precise steps to fix it on both Intel and AMD systems, pinned to the current state of Black Ops 7 and Warzone as of June 2026.
What is the "Failed Attestation Status" error?
"Failed Attestation Status" is the message Call of Duty shows when RICOCHET Anti-Cheat cannot verify your PC's security configuration with Microsoft. Activision calls this process Remote Attestation, and it runs through Microsoft Azure Attestation (MAA) as part of the game's TPM 2.0 implementation.
Here's the key difference from older anti-cheat checks: instead of asking your PC "are your security features on?" and trusting the answer, Remote Attestation validates those settings through Microsoft's trusted servers. That makes it much harder to spoof — but it also means that if your TPM, Secure Boot, or BIOS firmware isn't in a known-good state, the check fails and the game restricts you.
In Activision's own words from the Season 4 RICOCHET update:
"Players who fail Microsoft Azure Attestation (MAA) checks will be placed into a separate matchmaking pool. To access all playlists, players must successfully complete the MAA process."
— Call of Duty RICOCHET Anti-Cheat Season 04 Update, callofduty.com/blog
Why am I suddenly getting this error in Season 4?
TPM 2.0 and Secure Boot requirements were first added to Call of Duty back in Season 05 (August 2025), and they now apply to both Black Ops 7 and Warzone. What changed is enforcement. With Black Ops 7 Season 4 (live June 4, 2026), RICOCHET expanded Remote Attestation so that systems failing the Microsoft Azure Attestation check are actively pushed into a separate, restricted matchmaking pool rather than quietly warned.
There are a few common reasons a PC that "worked fine yesterday" now fails:
- TPM 2.0 or Secure Boot is disabled in BIOS (very common on Windows 10 builds and custom PCs).
- Outdated BIOS firmware. This is the big one for AMD users — Activision specifically notes that AMD fTPM software in the 3.x.0.x version range can return an attestation error, and the fix is a BIOS/firmware update.
- Legacy boot configuration — your system is booting in Legacy/CSM mode or your drive uses an MBR partition instead of GPT, both of which block Secure Boot.
- A party member fails. If you queue with friends and even one party member's PC isn't compliant, everyone in the party gets the failed-attestation message.
What happens if you fail attestation?
You are not banned and your account is fine. You're simply moved into a separate matchmaking pool with limited playlist access while you sort out the hardware settings. Per Activision, the restriction is specific:
| Game | What you can still play if attestation fails |
|---|---|
| Black Ops 7 | Nuketown 24/7 only |
| Warzone | Battle Royale Casual only |
| Other CoD titles | Unaffected — TPM 2.0 / Secure Boot are not required |
So if you've noticed you can only load into Nuketown or BR Casual and everything else says the playlist is unavailable, that's the attestation lockout — not a bug, and not a shadowban.
How do you fix "Failed Attestation Status"? (step-by-step)
Work through these in order. The official Secure Attestation Wizard (Step 1) will usually tell you exactly which of the later steps you actually need.
⚠️ Before you touch BIOS: changing UEFI/BIOS settings incorrectly can cause boot failures. Activision's own support article warns that "Activision is not responsible for changes made to your UEFI/BIOS settings." If you're not comfortable in BIOS, check your motherboard manual or ask your hardware vendor. Note your current settings before changing anything.
Step 1 — Run the Call of Duty Secure Attestation Wizard
Activision provides a free Call of Duty Secure Attestation Wizard (`CODSecureAttestationWizard.exe`) that scans your BIOS/security configuration and reports exactly what's non-compliant. Download it from the official Player Support page, extract the .zip, run the .exe, accept the terms, and run the scan.
- System compliant → your PC already meets the requirements; the issue is elsewhere (try clearing the TPM in Step 5, or restart the game).
- System not compliant → the wizard lists each setting that needs fixing (TPM, Secure Boot, GPT, UEFI, BIOS firmware), which maps directly to the steps below.
Step 2 — Check and enable TPM 2.0
First check whether TPM is already on:
- Press Windows key + R, type `tpm.msc`, press Enter.
- If you see "The TPM is ready for use" with Specification Version 2.0, TPM is enabled.
- If you see "Compatible TPM cannot be found," it's disabled in BIOS (or unsupported).
To enable it, reboot into BIOS/UEFI (usually Del or F2 at startup) and turn on the relevant setting:
- Intel CPUs: enable Intel PTT (Platform Trust Technology).
- AMD CPUs: enable AMD CPU fTPM (firmware TPM).
- Discrete TPM: if your board has a physical TPM header/chip, set the TPM device to the dTPM option.
Save and exit, then re-check with `tpm.msc`.
Step 3 — Enable Secure Boot (UEFI boot mode + GPT disk)
Secure Boot has three prerequisites, all of which the wizard checks:
| Requirement | Correct setting | How to check |
|---|---|---|
| Boot mode | UEFI (not Legacy/CSM) | BIOS boot menu |
| Disk partition style | GPT (not MBR) | `diskmgmt.msc` → drive Properties → Volumes tab |
| Secure Boot | Enabled | `msinfo32` → "Secure Boot State: On" |
If your boot mode is Legacy or your disk is MBR, you must convert before Secure Boot will turn on. Windows includes the `mbr2gpt` tool to convert MBR → GPT without data loss, but back up first. Once you're on UEFI + GPT, enable Secure Boot in BIOS, save, and reboot. Confirm with PowerShell: `Confirm-SecureBootUEFI` should return True.
Step 4 — Update your BIOS / firmware (the AMD fix)
This is the step that resolves most stubborn cases, especially on AMD. If the wizard says "BIOS Firmware Update Required" — or you've enabled TPM 2.0 and Secure Boot but Call of Duty still prompts you — your motherboard firmware is too old for attestation.
- Go to your motherboard (or prebuilt/laptop) manufacturer's support page, find your exact model, and download the latest stable BIOS.
- Follow the manufacturer's flashing instructions (most modern boards flash from a USB stick via the BIOS menu).
- AMD users: this specifically updates the fTPM "manufacturing version" out of the problematic 3.x.0.x range that Activision flagged.
After flashing, re-enter BIOS to confirm fTPM/PTT and Secure Boot are still enabled (a BIOS update can reset them to default).
Step 5 — Clear the TPM and re-verify
If everything reads as enabled but the error persists, clearing the TPM forces a fresh set of attestation keys:
- Open `tpm.msc` → on the right, click Clear TPM… and let the PC reboot (you may need to confirm the clear at the BIOS splash).
- After reboot, re-open `tpm.msc` to confirm "The TPM is ready for use."
- In PowerShell, run `Get-Tpm` and check that `TpmReady` and `TpmPresent` are True.
- Make sure Windows is fully updated — a "TCG Event Log Failed" result in the wizard means your Windows build is out of date.
- Relaunch Call of Duty and let the attestation check re-run.
Requirements at a glance
Use this to confirm your hardware even qualifies before you start flashing firmware:
| Component | Requirement |
|---|---|
| Operating system | Windows 10 (version 22H2 or later) or Windows 11 (any version) |
| Intel CPU | 8th Gen or newer (with Intel PTT) |
| AMD CPU | Ryzen 2000 series or newer (with AMD fTPM) |
| TPM | Version 2.0 enabled |
| Boot mode | UEFI |
| Disk | GPT partition style |
| Secure Boot | Enabled |
Windows 11 PCs almost always pass already, because TPM 2.0 and Secure Boot are mandatory for Windows 11 itself. The systems that fail are overwhelmingly Windows 10 builds and older custom rigs where these settings were never switched on.
What do the different attestation error codes mean?
The Secure Attestation Wizard can return several specific messages. Here's what each one is telling you:
| Wizard message | What it means / fix |
|---|---|
| TPM 2.0: Not Enabled | Turn on Intel PTT / AMD fTPM in BIOS (Step 2). |
| Secure Boot: Not Enabled | Enable Secure Boot in BIOS (Step 3). |
| Boot Partition not set to GPT | Convert MBR → GPT (`mbr2gpt`), then enable Secure Boot. |
| BIOS Boot mode not set to UEFI | Switch from Legacy/CSM to UEFI in BIOS. |
| BIOS Firmware Update Required | Flash the latest BIOS from your board maker (Step 4). |
| Authorization Key Failed | UAC permissions issue — click Generate Key and approve the `enrollaik.exe` prompt. |
| TCG Event Log Failed | Windows is out of date — restart and install the latest Windows update. |
Tips to avoid the error coming back
- Re-check after every BIOS update. Flashing firmware often resets fTPM/PTT and Secure Boot to default — re-enable them or you'll fail attestation again.
- Don't queue with non-compliant friends. One failing party member fails the whole party; have everyone pass attestation solo first.
- Avoid VPN/spoof "easy lobby" tricks in Season 4. With Remote Attestation reading your system state through Microsoft, manipulating matchmaking with sketchy tools is riskier than ever. If you want lower-skill lobbies, do it the safe way (see below).
- Keep Windows current. A stale Windows build is a common cause of the "TCG Event Log Failed" result.
Once you're back in and able to load every playlist, the grind picks up where it left off — whether that's getting into easier Warzone lobbies or working through the BO7 Prestige system. If you'd rather skip the slog — leveling weapons, climbing ranked, or chasing mastery camos — the Call of Duty boosting services at timesaver.gg are run by pro players and built to save you time.
Check out our Call of Duty services
- CoD Account & Weapon Leveling — skip the grind · level guns and your account fast · handled by pro players
- CoD Bot Lobbies — easy lobbies · rack up kills and complete camo challenges · no VPN spoofing on your account
- CoD Camo Unlocks (BO7) — unlock mastery camos · fast · secure
- All Call of Duty services — every BO7, Warzone and BO6 offer in one place
FAQ
Is "Failed Attestation Status" a ban? No. It's a security check, not a punishment. Your account is fine — you're just placed in a restricted matchmaking pool (Nuketown 24/7 in Black Ops 7, Battle Royale Casual in Warzone) until your PC passes the TPM 2.0 / Secure Boot attestation.
I enabled TPM 2.0 and Secure Boot but still get the error — why? Your BIOS firmware is most likely out of date. Update to the latest stable BIOS from your motherboard or system maker (this is the key fix for AMD boards with older fTPM versions in the 3.x.0.x range), then re-enable TPM and Secure Boot afterward, since a BIOS flash can reset them.
Do I need TPM 2.0 and Secure Boot for every Call of Duty game? No. They're required only for Black Ops 7 and Warzone. Other currently available Call of Duty titles don't require them, though enabling both is recommended for security.
Does this affect console players? No. The TPM 2.0 / Secure Boot attestation applies to PC. Consoles aren't affected, but a PC player who fails attestation can't match with compliant PC or console players.
Will turning on TPM or Secure Boot delete my files? Enabling TPM 2.0 and Secure Boot does not erase data. However, converting your disk from MBR to GPT changes the partition table, so back up important files before running `mbr2gpt`, and always note your current BIOS settings before changing them.
How do I quickly check if my PC is compliant? Run the official Call of Duty Secure Attestation Wizard — it scans your BIOS settings and lists exactly what (if anything) needs to change. You can also spot-check with `tpm.msc` (TPM status) and `msinfo32` (Secure Boot State).
Sources: Call of Duty RICOCHET Anti-Cheat Season 04 Update (callofduty.com/blog); Activision Player Support — "Trusted Platform Module (TPM) 2.0 and Secure Boot for Call of Duty" (support.activision.com). Current as of Season 4, June 2026. Always follow your hardware manufacturer's official instructions when changing BIOS settings.
