Forum Discussion

maevynx's avatar
maevynx
Copper Contributor
Oct 26, 2026

Windows 11 Pluton TPM AIK Enrollment Fails with HTTP 404 — The authority does not exist

Hello everyone, I'm experiencing a Windows TPM/AIK certificate enrollment issue on my ASUS TUF Gaming A14 (FA401WV), and I'm looking for guidance from someone familiar with Windows TPM attestation. ...
AIK
Secure Boot
security
tpm
windows 11
The-Architect's avatar
The-Architect
Copper Contributor
Oct 27, 2026

I'm experiencing the exact same issue on my ASUS TUF Gaming A14 equipped with the AMD Ryzen AI 9 HX 370 and Microsoft Pluton TPM.

Call of Duty's Secure Attestation Wizard fails at the TPM attestation stage, despite TPM 2.0 and Secure Boot being enabled and correctly detected by Windows.

I also reproduced the exact same HTTP 404 error when running:

certreq -enrollaik -config ""

The enrollment request fails with:

  • HTTP status: 404 Not Found
  • Windows error: 0x80190194
  • Message: "The authority does not exist."

This strongly suggests that we're encountering the same underlying AIK enrollment issue.

My system information:

  • Laptop: ASUS TUF Gaming A14
  • CPU: AMD Ryzen AI 9 HX 370
  • BIOS: Version 322 (latest available)
  • TPM: Microsoft Pluton (Pluton.TPM.A)
  • TPM firmware: 10.5.0.1
  • TPM 2.0: Present and ready
  • Endorsement Key (EK): Present
  • Manufacturer certificates: 1

I've already tried resetting the TPM and performing multiple troubleshooting steps without success.

Another major issue is that I'm currently running BIOS version 322 and cannot downgrade to version 319. This leaves me stuck on the latest BIOS with no apparent workaround.

Given that two users with identical hardware are reproducing the same AIK enrollment failure, this appears to be a potentially broader compatibility or provisioning issue involving Microsoft Pluton, the device firmware, or Microsoft's AIK enrollment infrastructure.

Could someone from Microsoft's Windows Security / TPM / Pluton engineering team investigate this issue?

We would particularly appreciate clarification on:

  1. Why the Microsoft AIK enrollment endpoint returns HTTP 404 for our devices.
  2. Whether BIOS 322 or the current Pluton firmware could be involved.
  3. Whether Microsoft and ASUS are aware of this issue and if a fix is being developed.
  4. What official diagnostic or escalation process we should follow.

At this point, we're unable to resolve the issue through standard troubleshooting or BIOS rollback.

I'm happy to provide additional logs and diagnostic information to help investigate.

Thank you!