Forum Discussion
Compliance Policies - Device Health Attestation failing (Syncml 404 / 0x87d10194)
Windows 11 devices are non compliant in Intune against BitLocker, Secure Boot and Code Integrity, all three returning the Syncml 404 error. The settings are genuinely enabled. The real cause is the d...
Pick two affected devices with the Nuvoton TPM, install the same Windows build on one and leave the other on the previous build if possible, then compare the DeviceHealthAttestation event logs and the Intune compliance state after a fresh sync. Also export the TPM endorsement key certificate chain from the affected device and attach it to the Microsoft support case. If the EK chain is rooted directly without an intermediate, the useful evidence is not another compliance policy screenshot but the DHA retrieval failure, Windows build, TPM vendor, firmware version and certificate-chain output.