TPM event logger error after cpu swap, Event id 86

Arun Kandasamy 131 Reputation points
2021-09-02T14:44:56.32+00:00

I just swapped out my cpu, my previous chip had died and just received my replacement, both 5950x, Upon boot I received " New cpu installed, fTPM/PSP NV corrupted" and it asked me to reset, which I did, now im receiving the following error:

SCEP Certificate enrollment initialization for Local system via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep failed:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Thu, 02 Sep 2021 14:27:28 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: d623448f-ee97-4ff8-a54c-c552e6a999be

Method: GET(203ms)
Stage: GetCACaps
Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

How can I fix this?

Windows for business | Windows Client for IT Pros | User experience | Other

94 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Norm Geltz 171 Reputation points
    2021-11-03T01:39:28.067+00:00

    Was this answer helpful?

  2. Michael Angle 6 Reputation points
    2021-11-02T18:14:44.06+00:00

    Ryzen Owners - This is what finally worked for me: (Windows 10) Go to Windows Security, Firewall & Network Protection, Allow an App through Firewall, Scroll down the list of allowed Apps until you reach "TPM Virtual Smart Card Management" - if there isn't a check mark in the box, click the box to select. Click OK. Reboot.

    Was this answer helpful?

  3. Dan Hot 41 Reputation points
    2021-11-01T13:05:22.52+00:00

    I delet AikCertEnrollTask to test and bug is gone. I export the task for backup, but cant import back.
    Nice work MS NOT!!!

    Was this answer helpful?

  4. Norm Geltz 171 Reputation points
    2021-11-01T12:23:07.373+00:00

    BTW, keep a watchful eye on those DNS errors. Did you have DNS errors prior to deleting the TPM cache? It's interesting from a security context. LSA (Local Security Authority) & WinLogon manage security for Windows OS via SAS (Secure Attention Sequence) & SAK (Sequence Authentication Keys). I could go on regarding the creation of SIDs (security tokens), but that's hopefully beyond this issue. None-the-less, for every keystroke entered by an end-user, the SID must have a token to access an operation. The MS GINA is at the lowest level of invoking these conscripts. I have no clue how MS employs GINA to negotiate SAS, SAK & SID for a UEFI TPM enabled OS - this could be far removed from my basic knowledge of security. Yet, it's interesting you're invoking DNS errors.

    https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/security-identifiers

    Was this answer helpful?

  5. GoldenVenom 26 Reputation points
    2021-11-01T10:42:04.277+00:00

    Editing Error reoccures over time

    So, i played around a bit and tried a lot of stuff as finally getting rid of the error was (correspond NormGeltz's steps) i additional did this:

    Search for "Task Sceduler" ->drop "Microsoft" ->drop "Windows" ->click "CertificateServiceClient" -> set the "AikCertEnrollTask" to disabled & restart (The error kept occuring for me so read the following). After restart go to Security Chip (or TPM.msc) delete it and restart again. The error is gone now and it hopefully will help you too!

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.