Modern Warfare 4 New Key Failed to Generate: how to fix the attestation error

The error only appears on PC, and until it is fixed the whole online side of the game is shut. That means no multiplayer, no DMZ and no way to level up. Warzone and Black Ops 7 run the same check, so everything below applies to them as well.

What the error means

RICOCHET Anti-Cheat wants proof that your PC started up through a trusted chain. That takes TPM 2.0, Secure Boot and a TPM that Windows can register a key for. When Activision’s wizard reaches the key, a failure shows up as Authorization Key Failed, and the game’s own version of that is New Key Failed to Generate.

TPM and Secure Boot are separate settings, so turning on one never turns on the other. Check both before anything else.

Check TPM 2.0 and Secure Boot

Press Win + R, type tpm.msc and press Enter. The status should say The TPM is ready for use and the Specification Version should be 2.0. Then open Run again, type msinfo32 and read two lines. BIOS Mode needs to say UEFI and Secure Boot State needs to say On. Windows 10 also has to be on version 22H2 or later, while any version of Windows 11 works.

If tpm.msc says no compatible TPM was found, the TPM is usually just switched off in the BIOS. Intel calls the setting PTT or Platform Trust Technology and AMD calls it AMD CPU fTPM. You will usually find it under Advanced, Security or Trusted Computing. Secure Boot sits under Boot or Security, and CSM has to be off before it will switch on.

Run the attestation wizard and allow the prompt

The wizard tells you which layer is failing, so run it before changing anything else.

1. Download it. Take the latest version from Activision’s TPM 2.0 and Secure Boot support page and extract the zip.
2. Run the scan. Open CODSecureAttestationWizard.exe, accept the terms and start the check.
3. Press Generate Key. On an Authorization Key Failed result this opens a UAC prompt for enrollaik.exe. Click Yes.
4. Read the rest of the results. TCG Event Log Failed means Windows is out of date, so restart and run Windows Update. BIOS Firmware Update Required is covered further down. The other results name a setting, such as GPT, UEFI or Secure Boot, that you need to fix first.

The game asks for the same permission the first time you launch it. A UAC prompt for CODBrokerInstaller.exe wants an administrator username and password. Clicking No or closing the window locks you out, and the prompt stops appearing once you accept it.

If you get CODBrokerInstaller.exe authorization declined without ever seeing a prompt, change the UAC setting. Search the Start menu for change user account control settings, move the slider to Always notify or the default position just below it, press OK and restart the game.

Update the TPM firmware

If the key still fails after you click Yes on the enrollaik.exe prompt, the TPM firmware is the next thing to check. Open tpm.msc and read the Manufacturer Version in the TPM Manufacturer Information box. That is the firmware version, and it has nothing to do with the 2.0 specification version above it.

AMD fixed its side of this in 2022. Windows reports the failure as error 0x80070490 on Ryzen 1000 to 5000 chips, and some board makers never passed the fixed firmware on to their customers. Newer CPUs get caught too when the BIOS is years old.

You cannot update the fTPM on its own. It ships inside the motherboard BIOS, so download the newest BIOS for your exact board from the maker’s support page and read the release notes for TPM or fTPM fixes. On AM4 boards the target is a version of 3.x.2.x. After the flash, go back into the BIOS and check that Secure Boot and fTPM or PTT are still on, because updates reset your settings.

Prebuilt PCs and laptops need the BIOS from the brand that sold them. Lenovo wants players to submit a ticket through its support site so it can send the right file. For anything else, search the exact model on the maker’s support page.

CPUs that cannot pass

The floor is an Intel 8th gen chip or a Ryzen 2000, running Windows 10 22H2 or Windows 11. On AM4 that is not the whole story. AMD only built the fixed fTPM for six CPU families: Raven2, Picasso, Matisse, Renoir, Cezanne and Vermeer. Ryzen 1000 (Summit Ridge) and the standard Ryzen 2000 desktop chips (Pinnacle Ridge) are not on that list, and a CPU outside it cannot meet the requirement in games that enforce attestation.

There are two ways out. One is a discrete TPM module, which counts as a valid TPM if your board has a header for one and the module matches its pin layout. The other is a newer CPU and board. No BIOS option or Windows setting adds firmware that the chip never received.

Make Windows report the TPM as ready

With the firmware sorted, check what Windows says about it. Open an admin Command Prompt and run tpmtool getdeviceinformation. Ready For Attestation and Is Capable For Attestation both have to read True. Windows Security shows the same thing under Device security, Security processor details, where Attestation should read Ready. Press Win + R and enter windowsdefender://securityprocessor to jump straight there. If it says Not Ready, make sure you are online, restart and look again.

While the admin prompt is open, start sfc /scannow and wait for it to finish. If it finds corrupt files, run DISM /Online /Cleanup-Image /RestoreHealth, restart and run the wizard again.

After that, grab the newest chipset drivers for your exact motherboard from its maker’s support page. It is a normal Windows installer and takes a few minutes. A lot of players only got past the error at this step, after BIOS updates and every Windows command had done nothing.

Clear the TPM as a last resort

If the firmware version is right, the wizard still fails and sfc found nothing, clear the TPM from tpm.msc, restart and run tpmtool again. Do it once. Clearing it over and over, or changing BIOS options at random, adds problems and fixes none. Skip the registry tweaks that circulate for this error as well. None of the wizard results point to them.

If it still fails

Report it to Activision. Its support site has a TPM incompatibility form, and the studio uses those reports when it works with hardware makers on new BIOS releases. Run the latest wizard and fix everything it lists first, then send your Manufacturer Version and your motherboard model with the report.

After the check passes

A compliant result means you can delete the wizard from your drive. Everything online opens at once. DMZ is the quickest route up the ranks, and the weapon tier list ranks the guns worth unlocking first. The Prestige rewards are what you are working toward once the ranks fill up.