Windows 11 Pluton TPM AIK Enrollment Fails with HTTP 404 — The authority does not exist
Hello everyone, I'm experiencing a Windows TPM/AIK certificate enrollment issue on my ASUS TUF Gaming A14 (FA401WV), and I'm looking for guidance from someone familiar with Windows TPM attestation. System information Laptop: ASUS TUF Gaming A14 FA401WV CPU: AMD Ryzen AI 9 HX 370 OS: Windows 11 Home Single Language, 64-bit, build 26300.9711 BIOS: Version 322, confirmed by ASUS as the latest available for my model TPM: Microsoft Pluton TPM 2.0 Secure Boot: Enabled and active Problem Call of Duty's Secure Attestation Wizard passes the TPM 2.0 and Secure Boot checks but fails to generate the required attestation key. It reports a BIOS firmware update requirement even though my BIOS is already up to date. To investigate the underlying issue, I ran the Windows command below from an elevated Command Prompt: certreq -enrollaik -config "" The request fails during GetCACaps with: HTTP status: 404 Not Found Windows error: 0x80190194 Message: "The authority does not exist." The request is directed to a device-specific Microsoft AIK enrollment endpoint under microsoftaik.azure.net. The failure happens before certificate enrollment completes. Troubleshooting already performed Verified that Windows detects the TPM and reports it as ready. Confirmed that Secure Boot is enabled and active. Checked with ASUS and confirmed that BIOS version 322 is the latest available. Retried AIK enrollment using my phone's mobile hotspot; the same HTTP 404 error persists. Tried the game's enrollment utility, which also produced 0x80072EFD (WinHTTP cannot connect) on a separate attempt. Another laptop using a Microsoft Pluton TPM successfully completed the same certreq -enrollaik -config "" command. I understand that this comparison does not establish the root cause, but I am including it as potentially useful context. Questions Is this a known issue with Windows AIK certificate enrollment for Microsoft Pluton TPMs? What supported diagnostics can help determine why the device-specific AIK enrollment authority returns HTTP 404? Is there an official Microsoft support or Feedback Hub route for getting this investigated by the appropriate Windows TPM/AIK enrollment engineering team? The laptop manufacturer confirmed that BIOS version 322 is the latest available for my device. I can provide the full command output and diagnostic logs through an appropriate support channel. I have intentionally left out device-specific identifiers from this public post. Thank you for any guidance.
