Windows 10: TPM Attestation Failure

I have been trying to put some devices through the autopilot process, but keep getting an error of TPM Attestation Failed. Error: 0x80280009How do I fix this please, the laptops are all Dell devices, it keeps happening every time, I remove device from Azure/Endpoint and reload it and it still keeps doing it, I have 12 devices with this issue, all Dells, but different models.

:)

 

TPM Attestation Not Supported after CPU Upgrade

I recently upgraded my CPU from a Ryzen 5600X to a Ryzen 5800X3D. Since upgrading in Windows Security it states Attestation Not supported. It states Storage is Ready. I have tried nearly everything to get it fixed to no avail;

• Cleared TPM in Windows
  
• Cleared TPM in BIOS
  
• Reset Secure Boot
  
• Ran the Attestation script from Rudy from Call4Cloud, which states the EKCert is missing - The Last TPM Attestation Script
  
• Updated to the latest beta channel build (22623.1245) as Rudy had said on Twitter that an AMD TPM Attestation bug was fixed in 22621.1192 but this didn't fix it for me either - Rudy's Tweet
  

 

TPM Attestation Not Supported after Upgrading CPU

I posted my issue on the learn Microsoft aswell. Thanks for the tip.

https://learn.microsoft.com/en-us/a...ttestation-not-supported-after-amd-ryzen-upgr

 

TPM Attestation Not Supported after Upgrading CPU

Hi,

after Upgrading my CPU from Ryzen 5 2600 to Ryzen 7 5700x Windows Security Chip App reports "Attestation: Not Supported" but "Memory: Ready".

In die TPM Console it shows that the TPM Module is Ready for use.

The Registry Key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TPM\WMI\Endorsement\EKCertStore\Certificates is empty with the R 7 5700x but has an entry when I use my old CPU.



I already tried to reset TPM, CMOS and Secureboot in Bios and in Windows TPM Console.

I disabled/enabled fTPM and Secure Boot several times.

Windows 10 and Windows 11 report the same. I already did a complete reinstall.

fTPM, Securechip, UEFI and Secureboot are enabled in BIOS.

Latest BIOS Updates and Windows Updates are installed.

The Windows Device Manager shows no errors. The AMD PSP 11.0 and TPM 2.0 is installed correctly.

When I switch back to my old Ryzen 5 2600 everything works.

I also cannot find my CPU on the Microsoft Windows 11 AMD CPU Support List.....



My Setup:

Mainboard: ASUS TUF X470-PLUS GAMING

BIOS: Version 6042 from 2022/05/12

CPU: AMD Ryzen 7 5700x

Windows 10 x64 22H2 (also tried with Win11 fresh installed/updated)