Call of Duty Modern Warfare 4: How to Fix the TPM 2.0 and Secure Boot Errors

If Call of Duty: Modern Warfare 4 tells you your PC does not meet its security requirements, TPM 2.0 or Secure Boot is switched off, and the fix is to turn both on in your PC’s UEFI firmware: Intel PTT or AMD fTPM for TPM 2.0, and Secure Boot with the boot mode set to UEFI instead of Legacy or CSM. Then confirm both in Windows with tpm.msc and msinfo32, say Yes to the one-time administrator prompt when the game first starts, and update your motherboard’s BIOS if the game still complains.

Activision makes both features mandatory on every PC storefront, and without them Modern Warfare 4 blocks every online mode. Everything below comes from Activision’s TPM 2.0 and Secure Boot support page and Microsoft’s official support pages. Firmware menus differ from one motherboard to the next, so treat the menu names here as examples and keep your board’s manual open.

What Modern Warfare 4 Requires on PC

Activision’s PC requirements say “TPM 2.0 and Secure Boot are required to play Call of Duty: Modern Warfare 4 on PC,” as part of the hardware protections behind its RICOCHET anti-cheat, and the Steam store page carries the same notice. Its support page breaks that down into five things:

Modern Warfare 4 is stricter than its siblings. In Black Ops 7 and Warzone, a PC that fails the check loses Ranked Play and some playlists and may be matched with other failing PCs. In Modern Warfare 4, Activision says those players “will be restricted from playing any online game mode.” Our Modern Warfare 4 PC specs story has the rest of the requirements, and our story on Activision’s fight with the cheat economy explains why these checks exist.

Step 1: Check Both Settings in Windows

This takes about two minutes and tells you exactly which fix you need.

1. Check TPM. Press Windows key + R, type tpm.msc and press Enter. If you see “The TPM is ready for use” under Status, look at Specification Version under TPM Manufacturer Information: it should say 2.0. If you see “Compatible TPM cannot be found,” TPM is probably switched off in your firmware, or your PC does not have one.
2. Check Secure Boot and boot mode. Press Windows key + R, type msinfo32 and press Enter. In System Summary, BIOS Mode should read UEFI and Secure Boot State should read On.
3. Read the result. Secure Boot State “Off” means your PC supports it but it is disabled (go to Step 4). BIOS Mode “Legacy” means you need to switch to UEFI, which usually means converting your disk first (also Step 4). “Unsupported” means your system may not support Secure Boot, per Activision, so check your motherboard’s documentation.
4. Check the disk. Search Windows for Disk Management and open it. Right-click the disk that holds Windows (the “Disk 0” style label on the left, not the partition), choose Properties, open the Volumes tab and look at Partition Style. GUID Partition Table (GPT) is what you want.

Prefer a single scan? Activision’s Call of Duty Secure Attestation Wizard checks everything at once. Download it from the Activision support page (version 1.3.0, updated October 21, 2026), extract the .zip, run CODSecureAttestationWizard.exe, accept the terms and run the scan. “System compliant” means you are ready, and you can delete the tool.

What Each Attestation Wizard Result Means

If the wizard says “System not compliant,” it names the problem. Here is what each result means, per Activision, and where the fix is in this guide:

Step 2: Save Your BitLocker Recovery Key First

Do this before touching any firmware setting. Microsoft lists turning off or clearing the TPM, BIOS or UEFI firmware upgrades and changes to the partition table among the events that can make BitLocker ask for its 48-digit recovery key at startup, and Microsoft Support cannot recover a lost key for you.

• Find your key now. Microsoft’s recovery key page says keys backed up to a Microsoft account are at aka.ms/myrecoverykey. Write it down or keep it on your phone.
• Suspend protection for firmware work. For planned firmware changes, Microsoft recommends suspending BitLocker, which keeps the drive encrypted but skips the recovery prompt. AMD gives the same advice for its TPM firmware updates. In Control Panel, open BitLocker Drive Encryption and choose Suspend protection, then resume it when you are done.

Step 3: Turn On TPM 2.0 in Your Firmware

1. Open your UEFI firmware. On Windows 11, go to Settings > System > Recovery and select Restart now next to Advanced startup. On Windows 10, go to Settings > Update and Security > Recovery and select Restart now under Advanced startup. When the blue menu appears, choose Troubleshoot > Advanced options > UEFI Firmware Settings > Restart. Pressing Del, F2 or F10 while the PC boots also works on many boards, per Activision.
2. Find the TPM setting. Microsoft says it usually sits in a menu labeled Advanced, Security or Trusted Computing, and may be called Security Device, Security Device Support, TPM State, AMD fTPM switch, AMD PSP fTPM, Intel PTT or Intel Platform Trust Technology.
3. Switch it on. On Intel systems, enable Intel PTT or Security Device Support. On AMD systems, enable AMD CPU fTPM.
4. Save and restart. Save changes and exit (usually F10, per Activision), then run tpm.msc again to confirm.

Every motherboard maker words this differently. On ASUS AMD boards, for example, ASUS’s own guide has you switch to Advanced Mode, open the Advanced tab, go to AMD fTPM configuration and set Firmware TPM switch to Enable Firmware TPM. Activision’s support page links official TPM and Secure Boot guides from Acer, ASRock, ASUS, Biostar, Dell and Alienware, GIGABYTE, HP, Lenovo, MSI and Razer, so start there for your brand.

Activision lists Intel 8th Gen or newer and AMD Ryzen 2000 series or newer as supported, and also accepts a discrete TPM chip. If your processor is older, ask your motherboard maker what your board supports before you buy anything.

Step 4: Turn On Secure Boot

Secure Boot needs two things in place first: UEFI boot mode and a GPT disk. If msinfo32 already shows BIOS Mode as UEFI, skip to “Enable Secure Boot” below.

If your PC boots in Legacy mode, convert the disk first. Microsoft’s MBR2GPT tool converts a disk from MBR to GPT without deleting data, though we would still back up anything you care about. Activision’s conditions: Windows 10 version 1703 or later, 64-bit Windows, an MBR disk with at most three partitions, no dual boot, BitLocker or other encryption turned off (Microsoft says suspended BitLocker also works), and Secure Boot off before you start.

1. Open Command Prompt as administrator (press the Windows key, type cmd, right-click Command Prompt and choose Run as administrator).
2. Type mbr2gpt /validate /allowFullOS and press Enter. Continue only if it succeeds.
3. Type mbr2gpt /convert /allowFullOS and press Enter.
4. Restart into your firmware, change Boot Mode from Legacy to UEFI (or UEFI Only), and disable CSM if your board lists it. Microsoft notes the firmware must boot in UEFI mode after the conversion.

Enable Secure Boot.

1. Open your firmware the same way as in Step 3.
2. Go to the Boot tab (on some boards, Security) and set Secure Boot to Enabled. Activision notes many firmware screens have a search, often on F9.
3. If Secure Boot is greyed out, make sure UEFI mode is selected, save, and reboot into the firmware again.
4. Save and exit, then confirm in msinfo32 that Secure Boot State reads On.

On ASUS boards, ASUS’s guide puts this under Advanced Mode > Boot > Secure Boot, with OS Type set to Windows UEFI mode and Secure Boot Mode set to Standard. Other brands use different names for the same switches.

Both Are On, but Modern Warfare 4 Still Complains

• Say Yes to the administrator prompt. On first launch, Windows may show a User Account Control prompt for CODBrokerInstaller.exe, which needs an administrator username and password, or in some cases one for enrollaik.exe. Activision says choosing No means you cannot play.
• Got “CODBrokerInstaller.exe authorization declined” with no prompt? Your User Account Control notifications are set too low. Search Start for “change user account control settings,” move the slider to Always notify or the default notch below it, select OK and restart the game.
• Update your BIOS. Activision says a PC that has TPM 2.0 on but keeps getting prompted probably needs a firmware update. In tpm.msc, look at Manufacturer Version. AMD versions in the 3.x.0.x pattern are not compatible (3.92.0.5 needs an update, 3.92.5.5 is fine), which matches AMD’s own support note. Intel versions INTC 302.12.x.x or 303.12.x.x may need one too. Get the update from your motherboard or PC maker; Lenovo asks owners to open a support ticket for it.
• Update Windows. A TCG Event Log failure clears after a restart and the latest Windows update, and Windows 10 must be version 22H2 or later.
• Report it. If none of this works, Activision’s TPM incompatibility report passes failing setups to its engineers, which it says may help hardware makers ship compatible firmware.

What Not to Do

• Do not use bypass tools. Skip any download, script or video that promises to get around or fake the check. Activision says these features are required for anti-cheat enforcement, so the only real fix is to switch them on.
• Do not change firmware settings you do not recognize. Activision warns that wrong UEFI or BIOS changes can cause boot failures and says it is not responsible for them. If you are unsure, your PC or motherboard maker’s support team is the right call.

Once you are in, our best PC settings guide for Modern Warfare 4 covers the benchmark tool, upscalers and the settings worth changing first. Every other guide is on our Call of Duty hub.

Frequently Asked Questions

Does Modern Warfare 4 need TPM 2.0 and Secure Boot on Steam and Battle.net? Yes. Activision’s PC requirements apply to every PC version, including Steam, Battle.net and the Xbox PC app, and the Steam store page states “TPM 2.0 and Secure Boot required.”

Can you play Modern Warfare 4 without TPM 2.0 or Secure Boot? Not online. Activision says PC players who do not meet the requirements “will be restricted from playing any online game mode” in Modern Warfare 4.

My PC runs Windows 11. Am I already set? Probably. Activision says Windows 11 PCs “likely already have both security features enabled,” but a two-minute check with tpm.msc and msinfo32 before launch costs nothing.

Does Modern Warfare 4 work on Windows 10? Yes, on Windows 10 version 22H2 or later, with TPM 2.0 and Secure Boot both switched on.

Do PlayStation, Xbox or Switch 2 players need to do anything? No. The TPM 2.0 and Secure Boot requirement applies to PC only.

Will turning on Secure Boot erase my files? Switching Secure Boot on does not touch your files. A PC that boots in Legacy mode first needs its disk converted to GPT, which Microsoft’s MBR2GPT tool does without deleting data, but back up first and have your BitLocker recovery key ready.

Do Steam players need anything else to play? Yes. The Steam store page says a mobile phone number must be linked to your Steam account to play Modern Warfare 4.