How to Fix Attestation Required (Secure Boot and TPM) Error in Modern Warfare 4

If Modern Warfare 4 displays an “Attestation Required” or “Action Required” warning when you try to play multiplayer, your PC may not meet one or more of the game’s security requirements. The message usually mentions Secure Boot, TPM 2.0, UEFI, or a combination of these features.

In some cases, the campaign may remain available while multiplayer is blocked. Fortunately, this does not necessarily mean your computer is unsupported. Secure Boot or TPM may simply be disabled in the BIOS.

This guide will show you how to check these features in Windows, enter the BIOS or UEFI settings, and enable the required security options.

Why Does Modern Warfare 4 Show the Attestation Required Error?

Modern Warfare 4 uses hardware-based security checks as part of its anti-cheat protection. Your PC may fail the attestation check for any of the following reasons:

• Secure Boot is disabled.
• TPM 2.0 is disabled or unavailable.
• Windows is running in Legacy BIOS mode instead of UEFI mode.
• Compatibility Support Module (CSM) is enabled.
• Windows, the BIOS, or important system drivers are outdated.
• Your PC supports the required security features, but they have not been configured correctly.

The warning displayed inside the game should tell you which requirement is missing. If you have already closed the message, restart the game to view it again.

Before Changing Your BIOS Settings

BIOS menus and option names vary between manufacturers. Before making any changes, keep the following points in mind:

• Save your work because your computer must be restarted.
• Open this guide on your phone so you can follow the instructions while Windows is unavailable.
• If BitLocker or Device Encryption is enabled, save your recovery key before changing Secure Boot, TPM, CSM, or UEFI settings. Windows may ask for the recovery key after restarting.
• Do not clear or reset the TPM. You only need to enable it.
• Consider taking pictures of the original BIOS settings so you can restore them if something goes wrong.

Important: Do not disable CSM or change from Legacy mode to UEFI without confirming that Windows is installed on a GPT-formatted drive. Changing the boot mode on an older MBR installation could prevent Windows from starting.

Check Secure Boot and BIOS Mode in Windows

Before entering the BIOS, check whether Secure Boot is already enabled:

1. Press Windows + R to open the Run dialog box.
2. Type msinfo32 and press Enter.
3. In the System Information window, locate BIOS Mode and Secure Boot State.

For the correct configuration, BIOS Mode should normally display UEFI, while Secure Boot State should display On.

If Secure Boot State shows Unsupported, your computer may be running in Legacy BIOS mode, CSM may be enabled, or the hardware may not support Secure Boot.

Check TPM 2.0 Status

You can also check whether TPM 2.0 is enabled before entering the BIOS:

1. Press Windows + R.
2. Type tpm.msc and press Enter.
3. Look for the message saying, “The TPM is ready for use.”
4. Under TPM Manufacturer Information, check that Specification Version is listed as 2.0.

If Windows cannot find a compatible TPM, it may be disabled in the BIOS.

On Intel computers, the TPM setting may be called Intel PTT. On AMD computers, it may appear as AMD fTPM, Firmware TPM, or Security Device Support.

How to Enter the BIOS or UEFI

There are several ways to access your computer’s BIOS or UEFI settings.

Method 1: Use the BIOS Startup Key

Restart your computer and repeatedly press the BIOS key as soon as the manufacturer’s logo appears.

Common BIOS keys include:

• Delete
• F2
• F10
• F12
• Esc

The correct key depends on your motherboard, laptop, or desktop manufacturer.

Method 2: Restart Directly to the Firmware From Windows

You can use a Windows command to restart directly into the firmware settings:

1. Open the Start menu and search for Command Prompt.
2. Right-click Command Prompt and select Run as administrator.
3. Enter the following command:

shutdown /r /fw /t 0

1. Press Enter.

Your PC should restart and open the BIOS or UEFI settings automatically.

Method 3: Use Advanced Startup

If the command does not work, follow these steps:

1. Open Settings.
2. Go to System > Recovery.
3. Find Advanced startup and select Restart now.
4. After the computer restarts, select Troubleshoot.
5. Open Advanced options.
6. Select UEFI Firmware Settings.
7. Choose Restart.

How to Enable Secure Boot and TPM in BIOS

The exact menu layout will depend on your motherboard or computer manufacturer. However, the general process is usually the same:

1. Enter the BIOS or UEFI menu.
2. Switch to Advanced Mode if the security settings are not visible.
3. Confirm that the computer is using UEFI boot mode.
4. Disable CSM if Windows is already configured to use UEFI and GPT.
5. Enable TPM 2.0, Intel PTT, AMD fTPM, or Security Device Support.
6. Enable Secure Boot.
7. Save the changes and restart the computer.

If Secure Boot is enabled but still not active, look for an option such as:

• Install Default Secure Boot Keys
• Restore Factory Keys
• Enrol All Factory Default Keys
• Secure Boot Mode: Standard

Use your motherboard or computer manufacturer’s instructions before changing Secure Boot key-management settings.

Enable Secure Boot and TPM on Gigabyte or AORUS

If you have a Gigabyte or AORUS motherboard:

1. Enter the BIOS.
2. Switch to Advanced Mode.
3. Open the Boot tab.
4. Set CSM Support to Disabled if Windows uses UEFI and GPT.
5. Open Secure Boot.
6. Set Secure Boot to Enabled.
7. Locate the TPM setting under Settings, Miscellaneous, or Trusted Computing.
8. Enable Intel PTT or AMD CPU fTPM, depending on your processor.
9. Select Save & Exit Setup.

The computer should restart with Secure Boot and TPM enabled.

Enable Secure Boot and TPM on Lenovo or Lenovo Legion

For Lenovo and Lenovo Legion computers:

1. Enter the BIOS.
2. Open the Security tab.
3. Select Secure Boot.
4. Set Secure Boot to Enabled.
5. Enable Security Chip, Intel PTT, or AMD Platform Security Processor if TPM is disabled.
6. Open the Boot tab.
7. Make sure Boot Mode is set to UEFI.
8. Select Exit Saving Changes.

Allow the computer to restart normally.

Enable Secure Boot and TPM on MSI

If you have an MSI motherboard or computer:

1. Enter the BIOS.
2. Switch to Advanced Mode.
3. Go to Settings > Security > Trusted Computing.
4. Enable Security Device Support.
5. Select the available firmware TPM option instead of Disabled.
6. Go to Settings > Advanced > Windows OS Configuration.
7. Enable UEFI mode or the available Windows WHQL option.
8. Open the Secure Boot settings.
9. Set Secure Boot to Enabled.
10. Save the changes and restart your PC.

Enable Secure Boot and TPM on Dell or Alienware

For Dell and Alienware computers:

1. Enter the BIOS.
2. Open the Security section.
3. Select TPM 2.0 Security.
4. Turn TPM on.
5. Open Secure Boot > Secure Boot Enable.
6. Enable Secure Boot.
7. Apply the changes.
8. Exit the BIOS and restart the computer.

Enable Secure Boot and TPM on ASUS or ASUS TUF

If you have an ASUS or ASUS TUF motherboard:

1. Enter the BIOS.
2. Switch to Advanced Mode.
3. Go to Boot > CSM.
4. Set Launch CSM to Disabled if Windows is installed using UEFI and GPT.
5. Return to the Boot menu.
6. Open Secure Boot.
7. Set OS Type to Windows UEFI Mode.
8. Go to Advanced > Trusted Computing or AMD fTPM Configuration.
9. Enable TPM, Intel PTT, or firmware TPM.
10. Open the Exit section.
11. Select Save Changes & Reset.

Enable Secure Boot on ASUS ROG Ally

For the ASUS ROG Ally handheld:

1. Shut down the device.
2. Hold the Volume Down button.
3. While holding the button, press the Power button.
4. Wait for the BIOS screen to appear.
5. Enter Advanced Mode.
6. Go to Security > Secure Boot.
7. Set Secure Boot to Enabled.
8. Save the changes and restart the device.

Confirm That Secure Boot and TPM Are Working

After Windows starts again, check whether the changes were applied correctly.

Check Secure Boot

1. Press Windows + R.
2. Type msinfo32 and press Enter.
3. Confirm that BIOS Mode shows UEFI.
4. Confirm that Secure Boot State shows On.

Check TPM 2.0

1. Press Windows + R.
2. Type tpm.msc and press Enter.
3. Confirm that the TPM is ready for use.
4. Make sure the specification version is 2.0.

Once both features are working, restart Modern Warfare 4 and try accessing multiplayer again.

What to Do If the Attestation Required Error Continues

If Secure Boot and TPM 2.0 are enabled but Modern Warfare 4 still reports an attestation problem, try the following solutions.

1. Restart Your Computer

Perform a full system restart after making BIOS changes. Simply closing and reopening the game may not be enough for the security check to update.

2. Install Windows Updates

Open Settings > Windows Update and install all available updates.

If you are using Windows 10, make sure you have a version supported by the game. Running an outdated Windows version may cause the security check to fail.

3. Update the BIOS

An outdated BIOS may not detect TPM correctly or may have Secure Boot compatibility problems.

Visit the official support page for your motherboard, desktop, or laptop manufacturer. Download the BIOS update made specifically for your device model and follow the manufacturer’s update instructions carefully.

Do not turn off the computer while a BIOS update is in progress.

4. Update Your Graphics and Chipset Drivers

Install the latest graphics driver from NVIDIA, AMD, or Intel. You should also update the chipset driver provided by AMD, Intel, or your computer manufacturer.

Outdated drivers may not directly cause the attestation warning, but keeping them updated can prevent other crashes and compatibility problems.

5. Make Sure Secure Boot Is Active

Some BIOS menus may show Secure Boot as enabled even though it is not active. This normally happens when the default Secure Boot keys have not been installed.

Open msinfo32 and check the Secure Boot State. If it still displays Off, return to the BIOS and look for an option to install or restore the factory Secure Boot keys.

The wording varies between manufacturers, so check the official guide for your motherboard or computer before changing these settings.

6. Check Whether the Windows Drive Uses GPT

Secure Boot requires Windows to start in UEFI mode. If Windows is installed on an MBR-formatted drive, changing the BIOS to UEFI may prevent the computer from starting.

Do not change the boot mode without checking the system drive first.

If your Windows installation uses MBR, back up your important files and follow Microsoft’s official MBR2GPT conversion instructions. If you are unsure, consider asking an experienced technician for assistance.

7. Verify the Game Files

Damaged or incomplete game files may prevent the game or anti-cheat system from detecting the updated security configuration.

Use the repair or verification option available in your game launcher. Once the verification finishes, restart the computer and launch the game again.

Final Thoughts

The Modern Warfare 4 “Attestation Required” error usually appears because Secure Boot, TPM 2.0, or UEFI mode is disabled. In most cases, enabling the missing security feature in the BIOS and restarting Windows should restore access to multiplayer.

However, BIOS menus are not identical on every computer. If an option is missing or has a different name, check the official support documentation for your exact motherboard, laptop, desktop, or handheld model.

Avoid clearing the TPM or changing from Legacy mode to UEFI unless you understand how your current Windows installation is configured. Once msinfo32 shows Secure Boot as active and tpm.msc confirms that TPM 2.0 is ready, launch Modern Warfare 4 again and check whether the attestation warning has disappeared