TPM event logger error after cpu swap, Event id 86

Arun Kandasamy 131

I just swapped out my cpu, my previous chip had died and just received my replacement, both 5950x, Upon boot I received " New cpu installed, fTPM/PSP NV corrupted" and it asked me to reset, which I did, now im receiving the following error:

SCEP Certificate enrollment initialization for Local system via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep failed:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Thu, 02 Sep 2021 14:27:28 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: d623448f-ee97-4ff8-a54c-c552e6a999be

Method: GET(203ms)
Stage: GetCACaps
Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

How can I fix this?

Reza-Ameri 45,891 Reputation points Volunteer Moderator

2021-09-02T14:52:23.927+00:00

What version of Windows are you using?
Are you running Windows 11?
Arun Kandasamy 131 Reputation points

2021-09-02T14:54:02.297+00:00

Yup Win11 21H2 build 22000.168
Norm Geltz 171 Reputation points

2021-11-16T21:34:28.69+00:00

Evidently this issue has been resolved with the latest Dev-Build update (yesterday, Monday, Nov 15, 2021). I run Insider Editions therefore I cannot validate since I'm generally several days behind the Dev-Build OS updates. None-the-less, I wanted to share this information. The individual who posted did not indicate what the Dev-Build number is. Be patient is all I can say.
hakuma26 6 Reputation points

2021-11-17T06:09:41.543+00:00

Thanks for information. I will try this right away. I'll report the result here.
hakuma26 6 Reputation points

2021-11-17T08:55:29.267+00:00

I installed Windows 11 Insider Preview 10.0.22499.1010 (rs_prerelease) and tried it. Scep amd-keyid errors gone yes. But I'm still experiencing crashes in Red Dead Redemption. Windows Event viewer no longer has previous scep errors. There are no errors with the crashes I've had after the update either. I need to test more.
Starfinger 1 Reputation point

2021-11-20T16:00:07.08+00:00

I wanted to provide some insight and hopefully some useful links. I troubleshooted my pc as much as I possibly could. I do not remember exactly when the the problem started but I do remember I was trying to fix an issue while playing CODMW. The game would suddenly crash every now and then. It would allow me to play a few hours sometimes so it wasn't so bad. But at times the game would crash pretty quickly or when in an intense situation so I decided I wanted to address it. I started troubleshooting the issue. I reinstalled drivers, clean OS install, game scan/repair, updated the bios, upgraded memory, and messed with some backend game settings. After reading a ton of articles regarding this issue I am under the assumption that Microsoft has to issue an update to fix this issue, or has someone found the solution?

Today I will be reseating the graphics card, cpu and rolling back the BIOS but I highly doubt this will solve the issue. My last option is to upgrade the CPU.

Please feel free to only respond with useful links.

Azure Attestation Workflow:
https://learn.microsoft.com/en-us/azure/attestation/workflow

TPM Key Attestation
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/component-updates/tpm-key-attestation

Blog about TPM Part 1
https://call4cloud.nl/2021/11/the-pursuit-of-happy-uhh-tpm-provisioning/

Blog About TPM Part 2
https://call4cloud.nl/2021/11/the-pursuit-of-happy-uhhh-tpm-intel-happyness-part-2/

Blog about TPM Part 3
https://call4cloud.nl/2021/11/the-pursuit-of-happy-uhhh-tpm-amd-happyness-part-3/
Giovanni Galati 1 Reputation point

2021-12-13T23:41:16.91+00:00

So i started getting this error after upgrading from the 2700x to the 5950x, It seemed to crash my pc every few hours but I stopped it from crashing by running OneDrive. Now every time i try to open the hideout in Tarkov it crashes everytime. Not sure what the issue is but it never happened on my old CPU.
Maison da Silva 8,151 Reputation points MVP

2021-12-18T14:59:55.733+00:00

Problem is fix in dev?
Norm Geltz 171 Reputation points

2022-01-09T22:30:29.557+00:00

I ran down this issue for some time. This is a follow-up to my resolution. The issue was the result of my graphic card driver was not up-to-date. ASUS PRIME x470-PRO (mobo), BIOS Ver. 5861, AMD Ryzen 5 2600x, NVIDIA GeForce GT1030. I purchased my GT1030 from Gigabyte. The correct driver was recently (Dec 15, 2021) updated on Gigabyte website. Since installation of the up-to-date graphic card driver, the issue has been resolved - complete attestation, no TPM SCEP Certificate enrollment error w/ Evend ID 86 i.e. complete resolution.

NOTE: Double-check ALL h/w drivers not simply via Windows Update, double-check all h/w drivers from the device manufacturer where you purchased the h/w device - this is critical. Good Luck.
Bharath 1 Reputation point

2022-01-30T07:46:58.093+00:00

I found a temporary fix , whenever you go into the bios and boot from there this error occurs , so just shutdown your pc and do a normal boot by pressing power key ,it doesn't cause this issue
gameinn 1 Reputation point

2022-02-05T17:19:14.677+00:00

I'm running the latest Windows 11 dev build. I'm still getting this error at start up.
gameinn 1 Reputation point

2022-02-05T22:34:57.047+00:00

I am almost certain this is still an issue in latest release preview, almost as if they regressed it or something. Can anyone confirm?

This should show all the relevant info: https://i.imgur.com/btf3Rly.png
Lourens Nel 1 Reputation point

2022-04-04T20:32:55.967+00:00

I have the same problem and pc restart when this happens.
zedd2 6 Reputation points

2022-09-12T08:31:39.077+00:00

If you visit the following website in a browser, note the message https://AMD-KeyId-907d65e9b562315997dd5ad086b2b7598957b92c.microsoftaik.azure.net/templates/Aik/scep

Its the server, not your computer.
Yanko Ilkov 1 Reputation point

2022-10-16T11:44:26.253+00:00

i lost all audio when this error acerd what should i do cuz i don't really want to upgrade to win11
JDT 11 Reputation points

2022-10-26T20:53:25.937+00:00

Its October 26,2022 and this problem still happening! What are they doing?
I have tried to update my BIOS supposedly for this TPM fix and it still doesn't work Im stil getting Critical Process Died with this event SCEP Cert enrollment initialization b.s everytime I launch a game! I have reset and performed clean windows install 2x i have updated all drivers i have benchmarked all hardware everything passed i took my tower to microcenter for them to only charge me 250$ for something that they couldn't fix. This is just it, when i upgraded to Windows 11 which i fully regret now. what a dumb update man. did anyone figure out a complete true fix for this? or should i just go back to windows 10 where everything was running smoothly?

I have AMD "Ryzen" 7 5800x
Tuf RTX 3080.
Im giving up with Microsoft man.
sam moss 1 Reputation point

2022-10-26T21:40:51.673+00:00

All I can say is I was getting those TPM errors in Windows 10 also. I turned TPM off in BIOS settings and have kept the BIOS firmware up to date (Asus) and I stopped getting those errors.
For Windows 11 users that have TPM embedded on the MoBo they (MS) seemingly have not worked out all the bugs and as usual all you get on the forum is the same generic answers that we all know by heart.
GoldenVenom 26 Reputation points

2022-10-28T00:02:08.79+00:00

Here we go again!
I had the same problem with my 5800x (made some comments in this thread) and it was magicaly gone some day. NBow i upgraded to 7950x.. and here we go again! SCEP-Error back.
P S 1 Reputation point

2022-11-16T01:14:40.94+00:00

I changed the Power Options back to "Balance (recommended)" and the symptom stopped since yesterday.
Jamie walker 1 Reputation point

2023-01-08T21:56:03.22+00:00

To Norm G/Ian R

I am ecperienceing the same issue with a new build sam errors and events etc. But I am reluctant to upgrade to windows 11 as it appears to still be buggy is this the only option?
Ken Wu 0 Reputation points

2023-01-13T02:23:22.6133333+00:00

I have the same issue since 2022/12/7(the day of the new installation Windows11 on my whole new PC)
I am surprised that this problem has been so long and may still happen to the latest HW+OS.
(AMD 7950x + B650 (B650M AORUS ELITE)
Ali Malik Gürbüz 0 Reputation points

2023-01-25T07:27:21.7166667+00:00

Ryzen 7 7700x with Asus X670E Extreme - Windows 10 Pro Same error. All drivers are at latest.

https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep aracılığıyla WORKGROUP\GENISYS$ için SCEP Sertifikası kaydı başlatma işlemi başarısız oldu: GetCACaps GetCACaps: Not Found {"Message":"The authority "amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net" does not exist."} HTTP/1.1 404 Not Found Date: Wed, 25 Jan 2023 06:49:48 GMT Content-Length: 121 Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains x-ms-request-id: b9fa4d05-1a12-4ddd-8975-3bbdbccff7a0 Yöntem: GET(437ms) Aşama: GetCACaps Bulunamadı (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Farkas 0 Reputation points

2023-06-14T18:56:07.1533333+00:00

Hello, I have managed to solve the problem by deactivating the tpm in the bios, nothing else has worked for me apart from this.
65873838 0 Reputation points

2024-11-20T02:32:14.6133333+00:00

It is 20 Nov 2024 & this problem is still around. Unbelievable! My system crashes randomly & the event. AMD Ryzen 9 5900X 12-Core and Win 11 Pro V 24H2.

94 answers

GoldenVenom 26 Reputation points

2021-11-01T10:42:04.277+00:00

Editing Error reoccures over time

So, i played around a bit and tried a lot of stuff as finally getting rid of the error was (correspond NormGeltz's steps) i additional did this:

Search for "Task Sceduler" ->drop "Microsoft" ->drop "Windows" ->click "CertificateServiceClient" -> set the "AikCertEnrollTask" to disabled & restart (The error kept occuring for me so read the following). After restart go to Security Chip (or TPM.msc) delete it and restart again. The error is gone now and it hopefully will help you too!
Was this answer helpful?
Norm Geltz 171 Reputation points

2021-11-01T10:52:40.4+00:00

Ah buggers. My error returned, also. I noted yesterday it was a Custom Task with a Custom Trigger; thus, simply disabling the "AikCertEnrollTask task didn't work. I was considering to delete the "AikCertEnrollTask" rather than disabling the task, but wasn't certain. I see you went one step further. I might try to delete the "AikCertEnrollTask" first instead of disabling it. Then, if that doesn't work I'll address your method regarding the Security Chip (TPM.msc) deletion. Glad to get rid of the annoying little bugger.

GoldenVenom 26 Reputation points

2021-11-01T11:05:41.027+00:00

hmm, maybe try to disable the option for new cpus in bios. idk the exact name but its something that means "reset tpm with new cpu". its under tpm section maybe set this to the opposite of what its set currently.
The funny point: i never switched my cpu before upgrading to 11. so my error is with the same cpu i used before the error occures.

Deleting the task.. is possible but i'd never recommend it due possible connected tasks that malfunction if you delete it..

Norm Geltz 171 Reputation points

2021-11-01T11:19:08.457+00:00

Since we didn't right the Custom Task, we really don't know exactly how that task is written/configured (at least at this point). I'm not certain I want to deep dive into viewing the Custom Trigger(s) for this task. But, as you mentioned, you didn't change the CPU and I didn't change my CPU. The error began after upgrading W10>W11 with no change to CPU. I don't know if this AikCertEnrollTask task was a task in the W10 OS Task Scheduler or if it was written into the W11 OS Task Scheduler. If it was in W10 OS Task Scheduler it never produced an error while operating under W10 OS. But, then again, while my Mobo BIOS was UEFI compliant under W10 OS, W10 OS did not "require" TPM to be enabled which is the case for W11. Somehow folks will get this figured out. It's an Event Viewer annoyance for me, but I recognize some people this is causing a BSOD. The issue is I don't believe this error occurs under normal operating conditions while running W10 on a UEFI complaint Mobo BIOS when TPM is NOT enabled; but, as soon as you enable TPM under W10 the error begins to appear. So, I guess I've answered my own question from reading these posts - the AikCertEnrollTask was probably there in W10 but never invoked until UEFI TPM was enabled?

GoldenVenom 26 Reputation points

2021-11-01T11:44:42.243+00:00

I'm with you. Due Win 10 doesn't need TPM the error was never present, even if the error already exists a long time. So due the requirement of TPM, the error will be more present and therefore lead into a lot of problems.
I bet, we literally just did the same, like uefi bios -> enable tpm for win11 and so on... So we haven't done anything wrong. This results again, and as you mentioned, that the error have to be present as long as tpm2.0 exist but never was an issue for "End-User". Some companies that have high security possibly have configurations that solve those problems by default OR the problems never caused a significant issue on W10.

As far as i can see, these are problems with mostly Ryzen? And even a clean install doesn't fix anything.

If you're interested in deleting the Task, keep me/us/this post updated if that works for you. For me, deactivate the task and delete the "tpm cache" worked for now to prevent the error. Idk if this also solve the crashes, for this i have to test my pc for 1-2 days.

I had a look in my event viewer while typing this and noticed some DNS errors (no crash and internet connection works fine), so i bet i have to look why this appears now.. but i bet a simple router restart should solve this... hopefully

Norm Geltz 171 Reputation points

2021-11-01T12:08:11.98+00:00

PaulHaywood-7398
answered • 3 days ago
just tried 3DMark again, when running the Directx12 benchmark, it will complete, but when i try the Directx11 benchmark, i always get the same crash.

I thought W11 required DirectX 12 (I could be wrong). At any rate, we're getting closer to perhaps where the issue/fault may reside. DirectX was invented by MS & was introduced on W95. It provides the OS the ability to gain access to low-level h/w via select .api calls. Prior to DirectX this access to h/w was nothing more than a file which was accessed via MS-DOS. With the advent of DirectX, Windows gained access to the h/w via .api calls invoked w/in the OS. This provided enhanced capabilities to negotiate h/w via OS s/w, but it also ran under the OS security context. Back in the days of W95 there was no such thing as incorporating Windows OS security Attestation for h/w to run. But, it did provide for a simple security context in the fact DirectX ran under the OS and was not longer a simple file.

Moving along, this error may be occurring on select CPUs e.g. AMD or Ryzen, or whatever. The .api calls invoked via DirectX may be influencing this error. Does this error occur on Intel platforms? Is the AMD CPU (Ryzen only?) Or, is there a combination of the GPU + CPU which influences this issue. For me, it's an annoyance, for someone playing a game and crashing their system it's a true hardship. At any rate, I'm beginning to suspect an interplay between DirectX, .api calls to the GPU for select CPUs when UEFI TPM is enabled.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Norm Geltz 171 Reputation points

2021-11-01T12:23:07.373+00:00

BTW, keep a watchful eye on those DNS errors. Did you have DNS errors prior to deleting the TPM cache? It's interesting from a security context. LSA (Local Security Authority) & WinLogon manage security for Windows OS via SAS (Secure Attention Sequence) & SAK (Sequence Authentication Keys). I could go on regarding the creation of SIDs (security tokens), but that's hopefully beyond this issue. None-the-less, for every keystroke entered by an end-user, the SID must have a token to access an operation. The MS GINA is at the lowest level of invoking these conscripts. I have no clue how MS employs GINA to negotiate SAS, SAK & SID for a UEFI TPM enabled OS - this could be far removed from my basic knowledge of security. Yet, it's interesting you're invoking DNS errors.

https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/security-identifiers
Was this answer helpful?
GoldenVenom 26 Reputation points

2021-11-01T13:55:53.637+00:00

Awww shoot. not only the error reoccures after restart the router, the DNS error now reoccures too xD

ID 233

WINHTTP_STATUS_CALLBACK-Statuscode: 2097152 (WINHTTP_CALLBACK_STATUS_REQUEST_ERROR). Fehler: Unknown HResult Error code: 0x80072f9a

Another error ID 204

Unknown HResult Error code: 0x80072f9a.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Dan Hot 41 Reputation points

2021-11-01T13:05:22.52+00:00

I delet AikCertEnrollTask to test and bug is gone. I export the task for backup, but cant import back.
Nice work MS NOT!!!
Was this answer helpful?
Norm Geltz 171 Reputation points

2021-11-01T13:10:31.937+00:00

Ensure you're logged on as a member of the Administrator Group.

Dan Hot 41 Reputation points

2021-11-01T13:13:14.143+00:00

Yeah but didnt help.
This Error comes:
https://www.winhelponline.com/blog/wp-content/uploads/2019/07/task-scheduler-service-not-available.png

Norm Geltz 171 Reputation points

2021-11-01T13:20:31.49+00:00

Not certain how you invoked certain key strokes. You first exported the AikCertEnrollTask task, then you deleted the AikCertEnrollTask task within Task Scheduler, then you attempted to import the same AikCertEnrollTask task? That wouldn't seem to have stopped the Task Scheduler service. None-the-less, go into Services to see if Task Scheduler is running, in the stopped state, set to manual or automatic, etc. I don't believe you'll need a reboot to change any of its states, but you may. Do check the Task Scheduler Service for its Run state and configuration though.

Dan Hot 41 Reputation points

2021-11-01T13:28:37.683+00:00

Under services tasksheduler is running and automatic and u cant change anything!
And yes

export AikCertEnrollTask

delet AikCertEnrollTask

reboot

Error gone

try import back DIDNT WORK

Norm Geltz 171 Reputation points

2021-11-01T13:40:21.773+00:00

Review the Dependencies of Task Scheduler. Ensure Dependencies are Running.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Michael Angle 6 Reputation points

2021-11-02T18:14:44.06+00:00

Ryzen Owners - This is what finally worked for me: (Windows 10) Go to Windows Security, Firewall & Network Protection, Allow an App through Firewall, Scroll down the list of allowed Apps until you reach "TPM Virtual Smart Card Management" - if there isn't a check mark in the box, click the box to select. Click OK. Reboot.
Was this answer helpful?
Norm Geltz 171 Reputation points

2021-11-02T18:59:00.507+00:00

Michael - Interesting. I'm going to give this a try. I'm on W11. I understand the TPM Virtual Smart Card Management technology well enough to suspect this might be the issue, but it's oddly peculiar this error we're referring to is associated with Windows TPM Virtual Smart Card Management since in order to use the TPM Virtual Smart Card, the user of the TPM Virtual Smart Card would have had to have loaded the cryptographic key directly from the UEFI enabled TPM hardware (chip) located on the computer. Why would the TPM Virtual Smart Card feature be making what would appear to be .api calls via Remote Access if there was never a TPM Virtual Smart Card key (PIN) loaded? Interesting.

Norm Geltz 171 Reputation points

2021-11-02T19:04:52.357+00:00

I just tried the exact method as described, upon reboot (during the exact period of reboot), the exact same error reappears. I'm on W11. Therefore, this method does not work on W11.

Michael Angle 6 Reputation points

2021-11-03T02:25:33.3+00:00

Okay, it didn't fix the issue. Everything was good for two days then tonight it rebooted twice while in a dungeon playing WOW. I'm really starting to hate AMD.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Ronald Aigner 21 Reputation points

2021-11-02T20:25:02.967+00:00

Hi,
my team is investigating the cert not found issue. Could one of the people experiencing the issue file a feedback item through feedback hub and use "Security & Privacy" as category and "Device Security" or "Windows Device Security" as sub-category?
This will collect some additional information about the TPM and help us analyze why this issue occurs.

Thank you, Ron.
Was this answer helpful?

2 people found this answer helpful.
Norm Geltz 171 Reputation points

2021-11-02T20:50:06.737+00:00

Created In Feedback.
Filed under:
windows-11
windows-api-security-crypto
azure-functions

Ronald Aigner 21 Reputation points

2021-11-02T21:11:17.9+00:00

Thanks, but the logs I mentioned are only collected with the category & sub-category I mentioned. It would be awesome if you could file another feedback item with the mentioned category/sub-category. Once done, can you share a link to the feedback item: https://www.tenforums.com/tutorials/130174-share-feedback-feedback-hub-windows-10-a.html ?

Thank you, Ron.

Norm Geltz 171 Reputation points

2021-11-02T21:15:51.063+00:00

No worries at all. However, I can't find (cannot view) the categories you mentioned. They don't appear in the Feedback Hub or any other area identified via Tags. That's why I indicated where I filed it. Let me know where/how to find those categories and I'm happy to assist.

Ronald Aigner 21 Reputation points

2021-11-02T21:18:12.08+00:00

Ah, ok. Can you share a link to the feedback item you already filed? See the link I posted before on how to do that.

Norm Geltz 171 Reputation points

2021-11-02T21:22:26.537+00:00

Figured it out. I was posting in MS Ignite. I just posted to the Feedback Hub. I'll get the link and create shared link in the URL you provided.

GoldenVenom 26 Reputation points

2021-11-03T01:22:35.747+00:00

Hi, i submitted it at feedback hub too.

https://aka.ms/AAeqmih

Jelle Revyn 11 Reputation points

2021-11-04T20:41:57.657+00:00

@RonaldAigner-7424 It seems people with Windows 11 are seeing this error in the event viewer and its possible causing some problems but it seems the cause of the error also has some consequences when using Autopilot (whiteglove or self-deploying). I won't clutter this topic since its W11 only related any more but I tagged you on twitter with more details.

FunkStar_

Fairon Pavolini 6 Reputation points

2021-11-05T17:44:54.293+00:00

@RonaldAigner-7424 I have the same issue running Windows 10. Ever since I started getting this error I have also been getting random sudden crashes/reboots in various applications. It happens ever few days.

Ronald Aigner 21 Reputation points

2021-11-05T18:51:55.5+00:00

Please report those crashes through Feedback hub. That allows Microsoft to get more context on the crash. And that will help us address your issue better.

Regarding the event-86 issue with the AMD related link, we think we understand what is causing the issue and are exploring a fix.

GoldenVenom 26 Reputation points

2021-11-15T09:59:12.287+00:00

Any updates? I'll do a rollback to 10 bc even if the updates fixed some bugs, this error is consistent and there are more and more users with the problem regarding to Event ID 86.

These random crashes interrupt the workflow realy bad.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

TPM event logger error after cpu swap, Event id 86

94 answers

Your answer