Intel PTT AIK Enrollment Fails with HTTP 404 for Core Ultra (Z890)

PC User 0 Reputation points
2026-09-04T10:21:33.8333333+00:00

SCEP Certificate enrollment initialization is failing on my new hardware, Intel Core Ultra 7 270k plus with Gigabyte z890 Eagle Wifi7 Plus, on Windows 10 Pro.

Here is the complete application error event:

SCEP Certificate enrollment initialization for Local system via<PII removed> failed:

GetCACaps

GetCACaps: Not Found

{"Message":"The authority "intc-keyid-<PII removed>.microsoftaik.azure.net" does not exist."}

HTTP/1.1 404 Not Found

Date: Fri, 04 Sep 2026 10:09:09 GMT

Content-Length: 122

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff

Strict-Transport-Security: max-age=31536000;includeSubDomains

x-ms-request-id: <PII removed>

Method: GET(3875ms)

Stage: GetCACaps

Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Thanks in advance for any help you could offer in onboarding the missing keys to the azure infrastructure.

Windows for home | Windows 10 | Performance and system failures
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Carl-L 21,320 Reputation points Microsoft External Staff Moderator
    2026-09-09T06:45:04.9666667+00:00

    Hello PC User ,

    Welcome to Microsoft Q&A forum.

    You're not alone in this, I've seen other users report the same issue with Intel computer. In this case, the issue seems to be not fixable from the client side, so reports have been submitted to the Feedback Hub so they can provide a fix from Microsoft side in future updates.

    Just want to check, can you please run this command: certreq -enrollaik -config "" so I can check on the cause of this?

    I'm waiting for your reply.

    Was this answer helpful?

  2. AlexCodex 100 Reputation points
    2026-09-04T10:58:30.74+00:00

    SCEP Certificate enrollment initialization is failing on my new hardware, Intel Core Ultra 7 270k plus with Gigabyte z890 Eagle Wifi7 Plus, on Windows 10 Pro. Here is the complete application error event: SCEP Certificate enrollment initialization for Local system via https://INTC-KeyId-6be80519dd622d1b7c93705afb7a096085fbf983.microsoftaik.azure.net/templates/Aik/scep failed: GetCACaps GetCACaps: Not Found {"Message":"The authority "intc-keyid-6be80519dd622d1b7c93705afb7a096085fbf983.microsoftaik.azure.net" does not exist."} HTTP/1.1 404 Not Found Date: Fri, 04 Sep 2026 10:09:09 GMT Content-Length: 122 Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains x-ms-request-id: 418748de-8930-4a42-a26c-a4f1df841331 Method: GET(3875ms) Stage: GetCACaps Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND) Thanks in advance for any help you could offer in onboarding the missing keys to the azure infrastructure.

    The 404 is the part I would focus on first. It looks less like a problem with the Z890 board itself and more like the SCEP endpoint/AIK enrollment service being unavailable or the authority in the generated URL no longer existing.

    Since the error is specifically:

    GetCACaps: Not Found The authority "...microsoftaik.azure.net" does not exist.

    I’d check Windows Update and the Intel/Gigabyte firmware and chipset/ME drivers first, then reboot and see whether the SCEP enrollment retries successfully.

    If the same 404 persists after that, I wouldn't keep changing BIOS settings blindly. The endpoint is returning an actual HTTP 404, so it may need to be resolved on Microsoft's AIK/SCEP infrastructure side rather than locally.

    If you can share the relevant TPM/Device Management event entries around the same timestamp, that could help determine whether the AIK provisioning itself is failing or whether Windows is simply reaching a stale/invalid SCEP authority.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.