Call of Duty: How to Use the Secure Attestation Wizard

To use the Call of Duty Secure Attestation Wizard, download it from Activision’s TPM and Secure Boot support page, extract the .zip, double-click CODSecureAttestationWizard.exe, accept the Terms and run the scan. It then reports either System compliant, which means your PC is ready and you can delete the wizard, or System not compliant, with a list of exactly what to fix.

Activision describes it as a tool that “provides a quick way to verify that your PC meets our security requirements,” and it covers Call of Duty: Modern Warfare 4, Warzone and Black Ops 7 at once. Below is where to get the genuine file, how to check it is really Activision’s, every step of a scan, what each result means, and what to do when it says you fail.

What the Wizard Checks

Activision says the wizard “scans the BIOS information on your PC” against the security requirements on its support page:

It does not change your BIOS for you. With one exception (the Generate Key button, below), it only reports, and the fixes are up to you.

Where to Download It (and How to Check It Is Real)

Get it only from Activision’s support page: the Call of Duty Secure Attestation Wizard section has the download link. As of Activision’s October 21, 2026 update, the current version is 1.3.0, and the .zip is about 62 MB.

Because a file called “CODSecureAttestationWizard.exe” asks to read your security settings, it is worth confirming you have the real one before running it. The genuine file is digitally signed by Activision Publishing Inc with a DigiCert code signing certificate. To check:

1. Right-click CODSecureAttestationWizard.exe and choose Properties.
2. Open the Digital Signatures tab.
3. The signer should read Activision Publishing Inc. Select it and choose Details: Windows should say the digital signature is OK.

If there is no Digital Signatures tab or the signer is anyone else, delete the file and download it again from Activision’s page.

Step by Step: How to Run the Wizard

1. Download the wizard .zip from Activision’s support page.
2. Right-click the .zip and choose Extract All. Activision’s steps say to extract it first, so do not run it from inside the .zip.
3. Open the extracted CODSecureAttestationWizard folder and double-click CODSecureAttestationWizard.exe.
4. Accept the Terms.
5. Run the scan.
6. Read the result: System compliant or System not compliant.

To change the wizard’s language, Activision says to “select Settings at the bottom of the wizard.”

What the Results Mean

System compliant. Per Activision, your PC “meets all security requirements” for Modern Warfare 4, Warzone and Black Ops 7, “and you can delete the Secure Attestation from your hard drive.” You do not need to keep it installed for the games to work.

System not compliant. The wizard shows which PC configurations need updating. The results it can list are:

• TPM 2.0: Not Enabled
• Secure Boot: Not Enabled
• Boot Partition not set to GPT
• BIOS Boot mode not set to UEFI
• BIOS Firmware Update Required: Activision says your firmware “meets the minimum security requirements; however, a BIOS Firmware update is recommended and may be required in the future.”
• Authorization Key Failed: a User Account Control problem (see Generate Key, below).
• TCG Event Log Failed: Activision says your copy of Windows is not up to date. Restart and install the latest Windows update.

Our TPM 2.0 and Secure Boot fix guide has the step-by-step BIOS fix for each of these, including turning on Intel PTT or AMD fTPM and converting a disk from MBR to GPT. Run the wizard again after each change to confirm it took.

Generate Key and the enrollaik.exe Prompt

If the result is Authorization Key Failed, the wizard offers Generate Key. Activision says: “Selecting Generate Key will trigger a UAC prompt for an application named enrollaik.exe. Select Yes to allow validation of your TPM 2.0 settings.” The prompt is expected, so say Yes.

You may see a similar prompt the first time you start Modern Warfare 4, Warzone or Black Ops 7, for CODBrokerInstaller.exe. Activision says to enter your PC’s administrator username and password and select Yes, and that selecting No or closing the window means you cannot play. If you get a “CODBrokerInstaller.exe authorization declined” error with no prompt at all, Activision’s fix is to search Start for “change user account control settings” and set the slider to Always notify or the default level just below it, then restart the game.

If the enrollaik.exe prompt keeps coming back even after you select Yes, Activision says that points to an AMD firmware issue (versions 3.*.0.*) and a BIOS update, covered in the next section.

When Your Hardware Is the Problem

Some PCs pass every BIOS setting and still fail. Activision’s page names these cases:

• AMD fTPM. Open tpm.msc and check the TPM’s Manufacturer Version. Activision says a version of 3.*.0.* (for example, 3.92.0.5) is not compatible and needs a firmware update, while 3.92.5.5 is fine.
• Intel PTT. A Manufacturer Version of INTC 302.12.*.* or INTC 303.12.*.* may need a motherboard firmware update.
• Lenovo PCs. Activision says Lenovo prefers that you submit a ticket through Lenovo’s support site for the right BIOS update.

For everyone else, the answer is a BIOS update from your motherboard or PC maker.

What Happens If You Never Pass

Activision says PCs that do not meet the requirements may get a Failed Attestation Status, which means being “restricted from accessing certain game modes (including Ranked Play) and playlists,” and possibly placed in separate matchmaking pools with other players who do not meet the requirements. Our article on Activision’s numbers on the cheat economy covers why the checks exist, and our Modern Warfare 4 PC specs piece lists the rest of the hardware it needs. If your PC passes but the game still will not start, try our Modern Warfare 4 launch and crash fixes or the error codes guide. Every Call of Duty guide we have is on our Call of Duty hub.

Frequently Asked Questions

Is CODSecureAttestationWizard.exe safe? The copy on Activision’s support page is Activision’s own tool, digitally signed by Activision Publishing Inc. Check the Digital Signatures tab in the file’s Properties, and never run a copy from anywhere else.

Where do I download the Call of Duty Secure Attestation Wizard? From the Call of Duty Secure Attestation Wizard section of Activision’s TPM and Secure Boot support article. Version 1.3.0 is current as of October 21, 2026.

Do I need to keep the wizard installed? No. Activision says that once your system is compliant, you can delete it.

Does the wizard fix the problems it finds? Only the authorization key, through Generate Key. Everything else (TPM, Secure Boot, GPT, UEFI and firmware) you change yourself in your BIOS or in Windows.

Which games does it check for? Activision says a compliant result covers Modern Warfare 4, Warzone and Black Ops 7.