MW4 BIOS Firmware Update Required? TPM 2.0, PCR7 & Attestation Fixes

Updated November 7, 2026

Getting a "BIOS Firmware Update Required" warning in Call of Duty: Modern Warfare 4 can be frustrating, especially when you have already updated your BIOS, enabled TPM 2.0, and confirmed that Secure Boot is active.

The problem becomes more confusing when Windows reports that everything is enabled, but the Call of Duty Secure Attestation Wizard still displays a firmware warning or fails its security checks.

If MW4 still says BIOS Firmware Update Required after updating your BIOS, the next step is to determine whether the problem involves TPM firmware compatibility, PCR7 measurements, authorization, or another attestation requirement.

The good news is that not every BIOS warning means Multiplayer is completely blocked. However, some failed attestation results can restrict access, and certain hardware configurations may require manufacturer support rather than another Windows setting change.

This guide explains how to identify your exact error, check TPM 2.0 and Secure Boot, understand PCR7 Binding Not Possible, troubleshoot HP OMEN BIOS F.35 problems, and find the safest next step when no newer BIOS is available.

Quick Answer: How to Fix BIOS Firmware Update Required in MW4

If MW4 reports a BIOS firmware problem even though TPM 2.0 and Secure Boot are enabled, follow these steps:

  1. Run the official Secure Attestation Wizard. Check whether the result is BIOS Firmware Update Required, Failed Attestation Status, Authorization Key Failed, or TCG Event Log Failed.
  2. Check whether Multiplayer is actually blocked. A BIOS update recommendation does not automatically mean the entire game is unavailable.
  3. Open tpm.msc. Confirm TPM 2.0 is ready and record the TPM manufacturer version.
  4. Open msinfo32. Check that BIOS Mode is UEFI and Secure Boot State is On.
  5. Check PCR7 Configuration. If it says Binding Not Possible, investigate further without assuming the BIOS is defective.
  6. Check the exact PC or motherboard model. Look for compatible firmware updates from the manufacturer.
  7. If the latest BIOS still fails, contact the manufacturer. Submit an Activision failed attestation report if the problem remains unresolved.

Important: Do not clear TPM, delete TPM registry keys, disable security features, or flash unofficial BIOS files just to remove the warning. These actions can introduce additional problems without resolving the underlying attestation failure.

Find Your Error and Jump to the Right Fix

What you see What to check next
TPM 2.0 Not Enabled Verify TPM settings
Secure Boot Not Enabled Check UEFI and Secure Boot
BIOS Firmware Update Required Check TPM firmware
TPM and Secure Boot pass, but PCR7 fails PCR7 troubleshooting
HP OMEN 875 with BIOS F.35 HP OMEN troubleshooting
Generate Key or authorization failed Authorization fixes
Latest BIOS installed, still blocked Manufacturer escalation

The most useful first step is identifying the exact security-check result. A firmware warning, TPM configuration failure, and authorization error may require different solutions.

⬆ Back to Table of Contents

Why Does MW4 Say BIOS Firmware Update Required?

Modern Warfare 4 uses RICOCHET security checks that can evaluate more than whether TPM 2.0 and Secure Boot are enabled.

Your computer might report:

  • TPM 2.0 is ready for use.
  • Secure Boot is enabled.
  • Windows is running in UEFI mode.
  • The BIOS is the newest version listed by the manufacturer.

Even when all four conditions are satisfied, the Secure Attestation Wizard may still report a firmware warning or an unsuccessful attestation.

This can happen because security verification may also depend on TPM firmware compatibility, measured-boot information, authorization, and other platform security requirements.

BIOS Firmware Update Required vs. Failed Attestation

These results are related, but they do not mean exactly the same thing.

Security result What it means Can it affect access?
BIOS Firmware Update Required Firmware needs attention; an update may be recommended or required under applicable security rules Not necessarily a complete block
Failed Attestation Status The security verification did not complete successfully May restrict protected game features
TPM 2.0 Not Enabled The required TPM configuration is unavailable or disabled May prevent access
Secure Boot Not Enabled Secure Boot requirement is not satisfied May prevent access
Authorization Key Failed The required authorization process did not complete May prevent successful verification

A BIOS firmware warning does not automatically prove that the game is completely unplayable.

Activision's security requirements can also vary by game mode. Failed attestation may affect protected Multiplayer features, including Ranked Play, or cause other access restrictions.

What to do: Before updating firmware or changing BIOS settings, identify the exact warning and check whether the mode you want to play is actually unavailable.

⬆ Back to Table of Contents

Check the Exact Secure Attestation Wizard Result

Start with the official Call of Duty security diagnostics instead of immediately resetting TPM or changing BIOS settings.

Open Activision's TPM 2.0 and Secure Boot support guide and follow the instructions for checking your system.

The exact result determines what you should investigate next.

Diagnostic result Recommended next step
TPM 2.0 Not Enabled Verify TPM availability and BIOS settings
Secure Boot Not Enabled Check UEFI and Secure Boot configuration
BIOS Firmware Update Required Check BIOS and TPM firmware compatibility
Authorization Key Failed Follow the official Generate Key process
TCG Event Log Failed Check Windows updates and restart
Failed Attestation Status Investigate the underlying failure and report it if unresolved

What If TPM 2.0 and Secure Boot Both Pass?

If both checks pass, repeatedly switching them off and on is unlikely to help unless the manufacturer has identified a configuration problem.

Instead, record:

  • TPM manufacturer firmware version.
  • BIOS version and date.
  • Motherboard or complete PC model.
  • PCR7 Configuration.
  • The wizard's exact warning or failure.
  • Whether the game launches and Multiplayer is accessible.

These details can help distinguish a firmware compatibility issue from an authorization or Windows-related problem.

⬆ Back to Table of Contents

Verify TPM 2.0, Secure Boot and UEFI in Windows

Windows provides several built-in tools for checking security configuration without modifying firmware.

Step 1: Check TPM 2.0 with tpm.msc

  1. Press Windows + R.
  2. Type tpm.msc.
  3. Press Enter.
  4. Check the TPM status.
  5. Find Specification Version and Manufacturer Version.

If Specification Version shows 2.0, Windows detects a TPM 2.0 implementation.

However, the manufacturer version is a separate value. It can matter when checking firmware compatibility.

Record both values before continuing.

Step 2: Check Secure Boot and BIOS Mode

  1. Press Windows + R.
  2. Type msinfo32.
  3. Press Enter.
  4. In System Summary, locate the following entries:
Windows entry What to look for
BIOS Mode UEFI
Secure Boot State On
PCR7 Configuration Record the displayed result
BIOS Version/Date Record the installed version
BaseBoard Product Identify the motherboard
System Model Identify the complete PC model

If BIOS Mode is UEFI and Secure Boot State is On, those basic requirements are already satisfied.

If Secure Boot is disabled, consult the motherboard or PC manufacturer's official instructions.

Warning: Do not switch from Legacy to UEFI or change disk partition settings without checking compatibility and backing up important data. Incorrect changes can prevent Windows from booting.

Step 3: Check TPM Details with PowerShell

For additional information, open PowerShell or Windows Terminal and run:

tpmtool getdeviceinformation

Review the reported TPM information.

This is a diagnostic command. It does not reset TPM, modify stored keys, or update your BIOS.

What If Everything Is Already Enabled?

If TPM 2.0 is ready, Secure Boot is On, and BIOS Mode is UEFI, move to the TPM firmware and PCR7 sections.

Do not repeatedly change working security settings without a specific reason.

⬆ Back to Table of Contents

Check AMD and Intel TPM Firmware Versions

One of the most important troubleshooting steps is understanding the difference between TPM specification version and TPM manufacturer firmware version.

These are not the same thing.

For example, Windows might report:

  • Specification Version: 2.0
  • Manufacturer Version: 3.58.0.5

The first value identifies the TPM specification supported by the device.

The second identifies the manufacturer's firmware version.

A computer can pass the TPM 2.0 check while still having firmware that requires attention under a particular security compatibility policy.

AMD TPM Firmware: Check the Manufacturer Version

Activision identifies certain AMD TPM firmware versions matching the 3.*.0.* pattern as requiring compatible firmware updates.

If your TPM manufacturer version matches that pattern, compare it with Activision's current compatibility guidance.

For example, a system reporting AMD TPM firmware version 3.58.0.5 should be checked against the applicable manufacturer and game security requirements.

This does not mean every AMD system has a TPM problem. The version pattern is a compatibility indicator, not a diagnosis of all AMD hardware.

If your version is affected:

  1. Identify your exact motherboard or PC model.
  2. Visit the manufacturer's official support page.
  3. Check the available BIOS and TPM firmware updates.
  4. Read the release notes and compatibility instructions.
  5. Install only firmware explicitly supported for your hardware.

The newest available BIOS does not necessarily include every TPM firmware update.

If the manufacturer offers no applicable update, contact support rather than using firmware from another model.

Intel TPM Firmware and Intel PTT

Many Intel-based computers use Intel Platform Trust Technology, or PTT, to provide TPM functionality.

Intel PTT can satisfy TPM 2.0 requirements, but the platform's firmware version may still matter for security compatibility.

Check the TPM manufacturer version using tpm.msc, then compare it with Activision's current requirements.

If a firmware version is flagged, check for an official update from the PC or motherboard manufacturer.

Do not assume that enabling Intel PTT again will resolve a firmware attestation problem.

Should You Install a Separate TPM Firmware Update?

Only when your manufacturer explicitly provides a compatible update for your exact hardware.

Avoid downloading standalone TPM firmware packages intended for unrelated computers.

If you use a Dell, HP, Lenovo, MSI, or Corsair prebuilt PC, start with the complete system's support page rather than assuming that a retail motherboard BIOS is interchangeable.

⬆ Back to Table of Contents

PCR7 Binding Not Possible — Does It Mean Your BIOS Is Broken?

If you open msinfo32, you may see:

PCR7 Configuration: Binding Not Possible

This result can appear even when TPM 2.0 is ready and Secure Boot is enabled.

PCR stands for Platform Configuration Register. TPM PCRs are used in connection with measurements of system components and boot-related security information.

PCR7 is particularly relevant to Secure Boot-related measurements.

What Does Binding Not Possible Mean?

It indicates that Windows cannot use the expected PCR7 binding configuration under the current conditions.

However, this does not automatically mean:

  • Your TPM is broken.
  • Secure Boot is disabled.
  • Your motherboard is defective.
  • Your BIOS must be replaced.
  • PCR7 is definitely causing the MW4 attestation failure.

PCR7 Binding Not Possible is a diagnostic clue, not a complete explanation of the problem.

How to Troubleshoot PCR7 Binding Not Possible

If msinfo32 displays this result:

  1. Confirm BIOS Mode is UEFI.
  2. Confirm Secure Boot State is On.
  3. Record your BIOS version and TPM manufacturer version.
  4. Check whether the manufacturer provides a relevant firmware update.
  5. Compare the PCR7 result with the Secure Attestation Wizard's exact failure.
  6. Contact the manufacturer if the problem appears related to firmware measurements.

Some attestation problems involve measured-boot information or firmware behavior that cannot be corrected by simply changing Windows settings.

If the manufacturer confirms a firmware compatibility problem, a supported firmware update may be necessary.

Do not reset Secure Boot keys, clear TPM, or reinstall Windows solely because PCR7 says Binding Not Possible.

⬆ Back to Table of Contents

HP OMEN 875 / Motherboard 84FD / BIOS F.35 Troubleshooting

Certain HP OMEN Obelisk 875 configurations can be particularly difficult to troubleshoot when Call of Duty reports a BIOS firmware or attestation problem.

One affected configuration includes:

Component Configuration
PC HP OMEN Obelisk 875
Motherboard HP 84FD
BIOS AMI F.35
TPM Intel PTT 2.0
Secure Boot Enabled
BIOS Mode UEFI
PCR7 Binding Not Possible

On systems with this combination, Windows may recognize TPM 2.0 and Secure Boot while the Call of Duty attestation process still reports a problem.

Why Is HP OMEN BIOS F.35 Difficult to Troubleshoot?

The issue may involve the firmware's handling of measured-boot information rather than a disabled TPM or Secure Boot setting.

If BIOS F.35 is already the latest compatible version listed for your exact HP model, there may be no publicly available firmware update that addresses the problem.

That does not prove the system can never pass attestation. It means the next step may depend on HP firmware support.

What If BIOS F.35 Is Already the Latest Version?

If you have already confirmed all of the following:

  • TPM 2.0 is enabled and ready.
  • Secure Boot is On.
  • BIOS Mode is UEFI.
  • BIOS F.35 is the latest version offered for your exact system.
  • The Secure Attestation Wizard still reports a failure.

Then repeatedly toggling Secure Boot or reinstalling Windows is unlikely to resolve a genuine firmware limitation.

However, do not assume the BIOS is definitely defective based only on PCR7 Binding Not Possible.

The next useful step is to contact HP with the complete diagnostic information and ask whether the installed firmware supports the required attestation measurements.

What to Do on HP OMEN 875

Step 1: Confirm the exact HP model.

Open msinfo32 and record:

  • System Model.
  • BaseBoard Product.
  • BIOS Version/Date.
  • Secure Boot State.
  • PCR7 Configuration.

Step 2: Record TPM information.

Open tpm.msc and record the specification and manufacturer versions.

Step 3: Check official HP firmware availability.

Visit HP Customer Support and search using your exact HP product number.

Do not install a BIOS intended for another OMEN model.

Step 4: Contact HP if no compatible update exists.

Explain that Windows reports TPM 2.0 and Secure Boot as enabled but Call of Duty attestation still fails.

Include the BIOS version, motherboard identifier, TPM manufacturer version, PCR7 result, and exact wizard error.

Step 5: Report the unresolved attestation problem to Activision.

Use the official reporting process described later in this guide.

Will Reinstalling Windows Fix HP OMEN F.35?

Not necessarily.

A clean Windows installation may help if the problem is caused by Windows configuration, but it cannot be relied upon to repair a firmware-level measurement problem.

Reinstalling Windows should not be the first troubleshooting step.

If HP confirms that no compatible firmware update is available, there may be no safe immediate user-side solution.

⬆ Back to Table of Contents

Dell, Alienware, MSI and Corsair — Hardware-Specific Troubleshooting

Not every BIOS attestation failure has the same cause.

Some systems encounter TPM provisioning problems, while others may have firmware compatibility or Secure Boot measurement issues.

A procedure that works on one PC may be ineffective or unsafe on another.

Dell and Alienware: TPM Provisioning Problems

Certain Dell and Alienware configurations can encounter problems involving TPM provisioning or authorization.

This is different from a BIOS that cannot provide the expected measured-boot information.

If your Secure Attestation Wizard reports an authorization or key-generation failure:

  1. Follow the official Generate Key instructions.
  2. Check whether Windows displays an authorization prompt.
  3. Confirm that the required authorization completes successfully.
  4. Review the exact Dell or Alienware model's official support guidance.

Disabling Intel Trusted Execution Technology (TXT) has helped with an attestation issue on a particular Alienware configuration, but it is not a confirmed universal fix.

Do not disable Intel TXT as a general troubleshooting step. Changing firmware security settings without manufacturer-specific instructions can create new compatibility or security problems.

MSI: Secure Boot Recovery and PCR7 Problems

Some MSI systems can display PCR7 Binding Not Possible even when Secure Boot appears enabled.

On a particular MSI Raider 18 HX AI notebook configuration, a manufacturer-provided Secure Boot recovery procedure has resolved an attestation problem.

However, that does not mean the same procedure is suitable for every MSI laptop or motherboard.

If you use an MSI system:

  1. Identify the complete model number.
  2. Visit MSI Support.
  3. Check for official BIOS, TPM, or Secure Boot guidance.
  4. Confirm that any recovery tool applies to your exact hardware.
  5. Back up important files and save your BitLocker recovery key before making manufacturer-directed firmware changes.

Do not reset Secure Boot keys or use a recovery utility intended for another MSI model.

Corsair: Check for Model-Specific Firmware

Some prebuilt PCs may receive firmware support through their system manufacturer rather than through a publicly listed retail motherboard BIOS.

If your Corsair PC reports that its BIOS is current but attestation still fails, contact Corsair Support with your exact system model and diagnostic information.

Ask whether a compatible firmware update or official recovery procedure is available.

Never apply another user's BIOS file or flashing instructions simply because their computer displayed the same error.

Manufacturer Troubleshooting Summary

System Recommended next action
HP OMEN 875 / 84FD / F.35 Check HP firmware availability and escalate persistent attestation problems
Dell / Alienware Investigate authorization and TPM provisioning through official support
MSI Check exact-model BIOS and Secure Boot recovery guidance
Corsair prebuilt Request model-specific firmware support
Other desktop motherboards Check manufacturer firmware and TPM compatibility guidance

⬆ Back to Table of Contents

Generate Key Failed, Authorization Error or TCG Event Log Failed

Not every security warning requires a BIOS update.

The Secure Attestation Wizard can display errors involving authorization or Windows event-log information.

Authorization Key Failed

An authorization failure may prevent the wizard from completing its security checks.

If the wizard offers Generate Key, follow the official Activision instructions and complete any required Windows authorization prompt.

Do not assume that this error means your TPM firmware is outdated.

If the authorization prompt is declined or the process cannot complete, see our Modern Warfare 4 CODBrokerInstaller.exe Authorization Declined? TPM & UAC Fixes guide for the related Windows authorization problem.

TCG Event Log Failed

A TCG event-log failure is different from a TPM-not-enabled warning.

If the wizard reports this error:

  1. Restart Windows.
  2. Open Settings → Windows Update.
  3. Install applicable Windows updates.
  4. Restart again if required.
  5. Rerun the official attestation check.

If the error continues, record the exact message before contacting support.

Avoid deleting event logs or modifying TPM security data unless an official support procedure specifically instructs you to do so.

What If MW4 Closes Before You Can Run the Check?

A startup crash, corrupted game update, or RICOCHET installation problem may require different troubleshooting.

If the game closes before reaching the security diagnostics, follow our MW4 Season 1 Won't Launch After Update? Corrupted Files, Ricochet & Campaign Fixes guide instead.

A startup crash should not automatically be treated as a BIOS attestation failure.

⬆ Back to Table of Contents

What If Your BIOS Is Already the Latest Version?

This is one of the most frustrating situations: Windows security settings look correct, the manufacturer offers no newer BIOS, and the game still reports a firmware warning.

If that describes your system, follow these steps.

Step 1: Confirm the BIOS Version Against Your Exact Model

Check the support page for your complete PC or motherboard model.

A newer BIOS for a similar motherboard does not mean it is compatible with yours.

For prebuilt PCs, the manufacturer may use customized firmware that differs from the retail motherboard version.

Step 2: Check Whether the Warning Actually Blocks Access

Determine whether you can:

  • Start the game.
  • Access the main menu.
  • Enter ordinary Multiplayer.
  • Access the particular mode you want to play.

A firmware recommendation and an attestation-related restriction are not necessarily the same condition.

Do not make risky firmware changes solely to remove an informational warning if the system otherwise meets the applicable requirements.

Step 3: Collect Diagnostic Information

Before contacting support, prepare:

  • PC or motherboard manufacturer.
  • Exact system model.
  • BIOS version and date.
  • TPM specification version.
  • TPM manufacturer version.
  • Secure Boot State.
  • BIOS Mode.
  • PCR7 Configuration.
  • Exact Secure Attestation Wizard result.
  • Whether Multiplayer is blocked or the warning is informational.

This information can help support distinguish firmware compatibility problems from authorization or measured-boot issues.

Step 4: Contact the Manufacturer

Ask whether your installed BIOS supports the security measurements and attestation requirements expected by the game.

If the manufacturer confirms that no compatible update is available, request further guidance.

There may be no safe user-side fix for a genuine firmware compatibility limitation.

Step 5: Submit an Activision Failed Attestation Report

Use Activision's official TPM Failed Attestation Report.

Provide the requested diagnostic information and describe the exact symptom.

Submitting a report does not guarantee an individual response or immediate fix, but it provides Activision with information about the affected hardware configuration.

Step 6: Recheck After Official Updates

If Activision or your manufacturer releases a relevant update, follow the official installation instructions and rerun the security check afterward.

Avoid repeating the same TPM resets, BIOS toggles, or Windows reinstalls without a clear reason.

⬆ Back to Table of Contents

Unsafe BIOS and TPM Fixes to Avoid

Because this problem involves security firmware, some troubleshooting suggestions can cause more damage than the original warning.

Do Not Clear TPM Without a Specific Reason

Clearing TPM can affect stored security information and access to protected data.

If BitLocker or Device Encryption is enabled, you may need your recovery key afterward.

Do not clear TPM simply because PCR7 says Binding Not Possible.

Do Not Delete TPM Provisioning Registry Keys

Deleting security-related registry entries is not a general solution for firmware attestation.

Such changes can disrupt Windows security configuration and may not address the actual cause.

Do Not Flash an Unofficial or Incorrect BIOS

Installing incompatible firmware can leave a computer unable to boot.

Use only manufacturer-supported firmware for your exact model.

Do Not Randomly Disable Security Features

Disabling Intel TXT, Secure Boot, TPM, or other firmware security settings may change the diagnostic result without correcting the underlying problem.

It can also reduce security or create new compatibility issues.

Only make such changes when the manufacturer provides a documented procedure for your hardware.

Do Not Reinstall Windows as the First Fix

A Windows reinstall can remove applications, settings, and data.

It may not resolve a problem originating in system firmware.

Use it only when there is a specific reason to suspect Windows itself and safer troubleshooting has failed.

Before any manufacturer-directed TPM or firmware change, back up important files and save your BitLocker recovery key.

⬆ Back to Table of Contents

Frequently Asked Questions

Why does MW4 say BIOS Firmware Update Required when my BIOS is already updated?
The warning can relate to firmware compatibility or security attestation requirements rather than simply the age of the BIOS. Check the exact wizard result, TPM manufacturer version, and support information for your motherboard.

Can I play MW4 with the BIOS Firmware Update Required warning?
Possibly. A BIOS update recommendation does not automatically mean every Multiplayer mode is blocked. Failed attestation or other security requirements may restrict access, so check the actual status and whether the desired mode is available.

Why does TPM 2.0 pass but attestation still fail?
TPM 2.0 detection confirms that the system exposes a compatible TPM implementation. Attestation may also depend on firmware measurements, supported TPM firmware, authorization information, and other security conditions.

What does PCR7 Binding Not Possible mean?
It means Windows cannot use the expected PCR7 binding configuration under the current conditions. It is a useful diagnostic clue but does not independently identify the cause of a Call of Duty attestation failure.

Is PCR7 Binding Not Possible always a BIOS problem?
No. Several configuration and firmware-related conditions can affect PCR7 binding. Review the broader diagnostic results before concluding that the BIOS is defective.

How do I check my TPM manufacturer firmware version?
Press Windows + R, type tpm.msc, and look for Manufacturer Version. You can also run tpmtool getdeviceinformation in PowerShell for additional TPM details.

Can HP OMEN 875 BIOS F.35 pass MW4 attestation?
Some HP OMEN 875 systems using motherboard 84FD and BIOS F.35 have experienced persistent attestation problems despite TPM 2.0 and Secure Boot being enabled. This does not establish that every system with BIOS F.35 will fail. Check your exact configuration and contact HP if the problem continues.

Does disabling Intel TXT fix MW4 attestation?
It has helped with an attestation problem on a particular Alienware configuration, but it is not a confirmed universal fix. Do not change Intel TXT settings without manufacturer-specific guidance.

Should I clear TPM or reinstall Windows?
Neither should be your first step. Clearing TPM can affect protected keys, while reinstalling Windows may not resolve a firmware-level problem. Start with read-only diagnostics and official support instructions.

What if my manufacturer has no newer BIOS?
Record your hardware and attestation details, contact the manufacturer, and submit an Activision failed attestation report if applicable. If the issue requires firmware changes that are not available for your system, there may be no safe immediate workaround.

How do I report a failed attestation to Activision?
Visit the official TPM Failed Attestation Report page and follow the submission instructions. Include the exact error and requested hardware information.

⬆ Back to Table of Contents

Final Recommendations

If Modern Warfare 4 displays BIOS Firmware Update Required, begin by identifying whether the message is an update recommendation, an authorization problem, or an actual failed attestation.

If TPM 2.0 and Secure Boot already pass, focus on the TPM manufacturer version, the exact firmware installed, and any additional diagnostic results.

For systems such as the HP OMEN 875 with motherboard 84FD and BIOS F.35, the problem may require manufacturer firmware support rather than another Windows setting change.

The safest approach is to diagnose first, use only firmware intended for your exact hardware, and avoid TPM resets or unofficial BIOS modifications. If no compatible firmware update exists, contact your PC manufacturer and report the unresolved attestation problem through Activision's official support process.

⬆ Back to Table of Contents

Comments