I've been dealing with Call of Duty's failed attestation warning for months on my MSI Raider laptop, and I finally found the actual fix.
The game kept showing “Attestation Requisite Not Met,” “BIOS Firmware Update Required,” or “Failed Attestation Status” even though TPM 2.0 and Secure Boot were enabled. The laptop was already on the latest BIOS and Intel ME firmware, Windows 11 was fully updated, and the official Call of Duty attestation wizard could even report that everything passed.
The clue was running this in an elevated terminal:
tpmtool getdeviceinformation
Mine reported:
BitLocker PCR7 Binding State: Binding Not Possible
The detailed TPM logs also showed that Windows considered Secure Boot enabled, but the firmware-generated TCG measured-boot log did not agree. Event Viewer contained Kernel-Boot Event 292: “Failed to update the SBAT value in FW.”
WHAT FIXED IT
MSI has an official Secure Boot recovery tool for its notebook products:
https://www.msi.com/faq/faq-11370
The page describes Secure Boot violation recovery rather than Call of Duty specifically, but it repaired the same underlying firmware Secure Boot/SBAT measurement state on my laptop.
The steps I followed:
Download the recovery tool only from MSI's official page.
Format an empty USB drive as FAT32. This erases the USB.
Extract the download and copy its complete EFI folder to the root of the USB.
Restart and press Delete to enter MSI BIOS.
Go to Security > Secure Boot, disable Secure Boot, then save with F10.
Press F11 during the next startup and boot from the USB.
Let the recovery run; it restarts the laptop automatically.
Return to BIOS, re-enable Secure Boot and save.
Afterwards:
- PCR7 changed from Binding Not Possible to Binding Possible.
- TPM health changed to Attestable.
- The PCR values matched the TCG measured-boot log.
- The official Call of Duty wizard reported System compliant.
- The BIOS firmware warning disappeared.
Important warnings:
- MSI says this tool applies to MSI notebook products. Do not treat this as a fix for MSI desktop motherboards.
- This will not fix every attestation problem. It is most relevant when PCR7 says Binding Not Possible or the measured-boot log does not match.
- Have your BitLocker recovery key available before changing Secure Boot settings.
- Keep the laptop connected to AC power and do not interrupt the recovery.
- I did not clear the TPM, reinstall Windows or reflash the BIOS.
I also posted the Call of Duty-specific write-up here:
https://www.reddit.com/r/CODWarzone/comments/1w47rim/msi_laptop_attestation_failure_fix_bios_firmware/
Hopefully this saves another MSI laptop owner from spending months toggling the same settings or attempting an unnecessary BIOS reflash.