TPM event logger error after cpu swap, Event id 86

Arun Kandasamy 131 Reputation points
2021-09-02T14:44:56.32+00:00

I just swapped out my cpu, my previous chip had died and just received my replacement, both 5950x, Upon boot I received " New cpu installed, fTPM/PSP NV corrupted" and it asked me to reset, which I did, now im receiving the following error:

SCEP Certificate enrollment initialization for Local system via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep failed:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Thu, 02 Sep 2021 14:27:28 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: d623448f-ee97-4ff8-a54c-c552e6a999be

Method: GET(203ms)
Stage: GetCACaps
Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

How can I fix this?

Windows for business | Windows Client for IT Pros | User experience | Other

94 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Michael Angle 6 Reputation points
    2021-11-02T18:14:44.06+00:00

    Ryzen Owners - This is what finally worked for me: (Windows 10) Go to Windows Security, Firewall & Network Protection, Allow an App through Firewall, Scroll down the list of allowed Apps until you reach "TPM Virtual Smart Card Management" - if there isn't a check mark in the box, click the box to select. Click OK. Reboot.

    Was this answer helpful?

  2. Dan Hot 41 Reputation points
    2021-11-01T13:05:22.52+00:00

    I delet AikCertEnrollTask to test and bug is gone. I export the task for backup, but cant import back.
    Nice work MS NOT!!!

    Was this answer helpful?

  3. Norm Geltz 171 Reputation points
    2021-11-01T12:23:07.373+00:00

    BTW, keep a watchful eye on those DNS errors. Did you have DNS errors prior to deleting the TPM cache? It's interesting from a security context. LSA (Local Security Authority) & WinLogon manage security for Windows OS via SAS (Secure Attention Sequence) & SAK (Sequence Authentication Keys). I could go on regarding the creation of SIDs (security tokens), but that's hopefully beyond this issue. None-the-less, for every keystroke entered by an end-user, the SID must have a token to access an operation. The MS GINA is at the lowest level of invoking these conscripts. I have no clue how MS employs GINA to negotiate SAS, SAK & SID for a UEFI TPM enabled OS - this could be far removed from my basic knowledge of security. Yet, it's interesting you're invoking DNS errors.

    https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/security-identifiers

    Was this answer helpful?

  4. GoldenVenom 26 Reputation points
    2021-11-01T10:42:04.277+00:00

    Editing Error reoccures over time

    So, i played around a bit and tried a lot of stuff as finally getting rid of the error was (correspond NormGeltz's steps) i additional did this:

    Search for "Task Sceduler" ->drop "Microsoft" ->drop "Windows" ->click "CertificateServiceClient" -> set the "AikCertEnrollTask" to disabled & restart (The error kept occuring for me so read the following). After restart go to Security Chip (or TPM.msc) delete it and restart again. The error is gone now and it hopefully will help you too!

    Was this answer helpful?

  5. Norm Geltz 171 Reputation points
    2021-10-31T23:14:20.303+00:00

    I upgraded from W10>W11 this morning with no issues. Upon reviewing this error, I reviewed the Task Scheduler. There is a Task which runs for Attestation called AikCertEnrollTask task. I disabled that task. That should stop the annoying Event from occurring again! So, to resolve this (hopefully), simply go to Task Scheduler under Certificate Enrollment services (tasks) find the AikCertEnrollTask and disable it.

    Event 86 SCEP Certificate enrollment initialization for WORKGROUP\VINTAGE_CHIEF$ via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep failed:

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.