Yes. Activision lists TPM 2.0 and Secure Boot as requirements for playing Call of Duty: Modern Warfare 4 on PC. For the Modern Warfare 4 Beta, Activision says a PC that fails either requirement is restricted from every online mode; the full-game PC specifications also list both features as required.
Secure Boot is enabled in your computer’s UEFI/BIOS, not in the game launcher. Before changing firmware, confirm that Windows is booting in UEFI mode from a GPT disk, identify your exact PC or motherboard model, follow that manufacturer’s instructions, and then run Activision’s Call of Duty Secure Attestation Wizard. Firmware menus and labels differ, and an incorrect change can prevent Windows from starting.
Do Modern Warfare 4 players need Secure Boot?
PC players need both Secure Boot and TPM 2.0 to satisfy Activision’s published Modern Warfare 4 requirements. Activision’s Beta support guidance says that players who do not meet both requirements cannot use any online game mode in the Beta. Its full-game PC specifications page also lists both features as required for the released game, so enabling only one of them is not enough.
These requirements apply to the Windows PC version. They do not describe console settings, and buying the game does not alter your computer’s firmware configuration. If your system cannot meet the checks, the practical remedy is to use the manufacturer’s supported firmware and hardware guidance rather than trying random BIOS settings.
Activision’s requirements can change after the pages cited here were accessed on October 7, 2026. Check the current Modern Warfare 4 PC specifications and the current TPM/Secure Boot support article before making a major hardware or firmware decision.
What are Secure Boot and TPM 2.0, and why does Call of Duty use both?
Secure Boot and TPM 2.0 are separate security functions. Activision says they work together with RICOCHET Anti-Cheat and system-integrity checks, but one does not substitute for the other.
What does Secure Boot do?
Secure Boot is a UEFI feature that verifies startup software before Windows loads. Activision describes it as a system-level protection that helps block low-level cheats by ensuring that only trusted software loads during startup. Microsoft Learn likewise identifies Secure Boot as a requirement for Windows 8, 8.1, 10, and 11.
Secure Boot is controlled by firmware. The option may be under a Security, Boot, Authentication, or similarly named menu, but there is no single menu path that works on every desktop, laptop, or motherboard.
What does TPM 2.0 do?
A Trusted Platform Module provides hardware-based security functions used to protect and attest parts of the system. A TPM can be a physical chip, but many modern PCs expose the feature through firmware: Intel systems commonly label it Intel Platform Trust Technology (PTT), while AMD systems commonly label it AMD CPU fTPM.
Activision lists Intel 8th-generation or newer processors with Intel PTT and AMD Ryzen 2000-series or newer processors with AMD CPU fTPM among the supported combinations. Those generation guidelines do not guarantee that a particular motherboard exposes the setting; the exact firmware and model still determine what is available.
Why are both checks required?
Secure Boot establishes a trusted startup chain, while TPM 2.0 supplies hardware-backed security and measurement capabilities. Because they protect different parts of the boot and integrity process, enabling TPM alone or Secure Boot alone leaves one of Activision’s required checks unmet.
What must your PC support before you change firmware?
Check the operating-system, processor, TPM, boot-mode, and disk-layout conditions first. A Secure Boot toggle by itself cannot make a Legacy/MBR installation satisfy Activision’s published requirements.
| Area | Published requirement or support detail | What to confirm |
|---|---|---|
| Operating system | Windows 10 version 22H2 or later, or any Windows 11 version, for the Call of Duty support guidance. | Your installed Windows edition is current enough for the game. |
| TPM software support | TPM 2.0 requires Windows 10 version 20H2 or later; Call of Duty itself requires Windows 10 version 22H2 or later. | The PC can expose a TPM 2.0 implementation to Windows. |
| TPM implementation | Intel PTT, AMD CPU fTPM, or a compatible discrete TPM chip. | Your model’s manual identifies a supported option; a separate module is not automatically necessary. |
| Processor guidance | Intel 8th generation or newer with PTT, or AMD Ryzen 2000 series or newer with CPU fTPM. | The processor and motherboard firmware support the required implementation. |
| Firmware boot mode | UEFI is required; Legacy/CSM boot does not satisfy the listed requirement. | Windows is installed and configured to start in UEFI mode. |
| Boot-disk partition style | GPT is required; an MBR boot partition does not satisfy the listed requirement. | The disk containing the Windows boot partition uses GPT. |
| Secure Boot state | Secure Boot must be enabled. | The firmware reports Secure Boot as active after you save changes. |
Keep the game requirement separate from the general Windows requirement. Activision’s full-game specification article describes a minimum of 64-bit Windows 10 with the latest update, while the game-specific security guidance gives the more precise 22H2-or-later Windows 10 condition (or Windows 11).
How do I prepare safely before opening UEFI/BIOS?
Preparation reduces the chance of an unbootable system. Do not begin by switching random options; first establish your model and current configuration.
- Identify the exact computer or motherboard model. Record the manufacturer, model number, and, for a custom desktop, the motherboard revision if one is listed. Open that manufacturer’s official support or manual page and locate its instructions for entering UEFI/BIOS, enabling Secure Boot, and enabling TPM/PTT/fTPM.
- Confirm the Windows version. The Call of Duty guidance requires Windows 10 22H2 or later or Windows 11. If Windows is older, update it through Microsoft’s supported Windows process before diagnosing firmware settings.
- Check TPM from Windows. Press the Windows key, type
tpm.msc, and open the TPM management console. Activision says the useful result is that the TPM is ready for use and reports version 2.0. If no compatible TPM is shown, consult the PC or motherboard documentation for the PTT or fTPM setting before considering any hardware purchase. - Establish your boot configuration. Activision requires UEFI boot mode and a GPT boot partition. If your installation currently uses Legacy boot or MBR, stop and read the manufacturer’s and Microsoft’s supported conversion guidance for your exact setup. Do not change boot mode or convert a disk merely to make the wizard pass; an unsupported sequence can make Windows fail to boot.
- Protect recovery options. Make sure you can access your Windows recovery method and important files before changing firmware. If your manufacturer warns about encryption or recovery-key handling, follow that model-specific instruction.
Activision explicitly warns that incorrect UEFI/BIOS changes can cause system problems, including boot failures. If you are unfamiliar with firmware menus, use the hardware maker’s support instructions or contact its support team instead of relying on a universal keyboard shortcut.
How do I enable Secure Boot and TPM 2.0?
The exact labels and sequence depend on the PC or motherboard. Use the following order as a decision guide, but use your manufacturer’s manual for the actual menu names and key sequence.
- Enter UEFI/BIOS using the manufacturer’s documented method. Do not assume that a particular function key or Delete key works on your model; vendors use different entry methods and interfaces.
- Verify that the system is using UEFI rather than Legacy/CSM. Secure Boot is intended for UEFI startup. If the firmware shows a Legacy or Compatibility Support Module mode, do not blindly switch it. First confirm that the Windows boot disk is GPT and follow the supported procedure for your model.
- Enable the TPM implementation. Look for Intel PTT on an Intel platform, AMD CPU fTPM on an AMD platform, or a discrete TPM option identified by the manual. Enable the option that your hardware supports; do not assume that installing a module will work in every motherboard.
- Enable Secure Boot. The setting may be located in a Security, Boot, Authentication, or Trusted Computing section. Some firmware requires UEFI mode before the Secure Boot control becomes available. Follow the model-specific instructions if the control is greyed out or asks to load default keys.
- Save changes and restart. Allow Windows to boot normally. If Windows does not start, return to firmware and restore the previous setting, then contact the manufacturer or follow its recovery procedure. Do not keep changing unrelated options while the system is unbootable.
- Recheck Windows. Open
tpm.mscagain and confirm that the TPM is ready for use and reports version 2.0. Secure Boot, UEFI, and GPT should then be verified with Activision’s official scanner rather than assumed from a menu label.
A BIOS update may be needed on some PCs before TPM or Secure Boot can be enabled. Download firmware only from the exact PC or motherboard manufacturer page, verify the model and revision, and follow its update instructions. Activision does not endorse a generic BIOS utility or a universal TPM module.
How do I verify the settings with Activision’s Secure Attestation Wizard?
Use the official Call of Duty Secure Attestation Wizard after Windows restarts. Activision lists version 1.2.0, updated September 16, 2026, on the support page consulted for this guide; the version shown on the live page may be newer.
- Download the wizard ZIP from Activision Support.
- Extract the ZIP to a local folder. Do not run the executable while it remains inside the compressed archive.
- Launch
CODSecureAttestationWizard.exe. - Accept the terms shown by the wizard.
- Run the scan and wait for the compliance result.
- Read the named failure category if the result is not compliant. Use that category to open Activision’s corresponding official instructions rather than resetting firmware or TPM settings at random.
The wizard scans BIOS and Windows security information. A compliant result means the checks it lists passed at scan time; it does not guarantee that future game updates will never change the requirements.
What does each Secure Attestation Wizard failure mean?
Fix the specific category reported by the scan. The following branches mirror the statuses Activision identifies.
TPM not enabled
Windows cannot currently use a TPM 2.0 implementation. Re-enter the manufacturer’s UEFI/BIOS setup and look for Intel PTT, AMD CPU fTPM, or the documented discrete-TPM control. If the setting is absent, confirm the exact motherboard model and firmware version with the manufacturer; do not assume that a separately purchased module is compatible.
Secure Boot not enabled
Secure Boot is off or not being reported as active. Confirm that the system is configured for UEFI startup, then use the manufacturer’s Secure Boot procedure. If the option is unavailable, resolve the boot-mode and disk-layout issue first rather than forcing the control.
Boot partition not GPT
The Windows boot disk is using MBR instead of the required GPT style. Do not convert the disk as a generic fix. Review Microsoft’s supported conversion process and your manufacturer’s recovery guidance for the exact installation, and make sure you have a verified recovery path before attempting any change.
BIOS boot mode not UEFI
The firmware is reporting Legacy or another non-UEFI mode. Changing this setting without confirming a GPT Windows installation can prevent the operating system from starting. Use the PC or motherboard instructions to establish UEFI safely, and stop if the vendor does not document a supported transition.
BIOS firmware update recommended
This is different from Secure Boot being disabled. Activision says this status indicates that the firmware meets the minimum security requirements but an update is recommended and may be required later. Obtain the update from the exact manufacturer support page, verify the model and revision, and follow the vendor’s flashing procedure.
Authorization key failed
The wizard’s authorization step did not complete. Activision describes a User Account Control prompt for enrollaik.exe; allow the prompt only when it appears as part of the official wizard you launched, then rerun the scan. If the prompt never appears or the check still fails, follow Activision’s authorization-key instructions instead of downloading a replacement executable.
TCG Event Log failed
Activision’s guidance for this category is to restart the PC and apply the latest Windows update. Run the wizard again after Windows finishes updating. If the failure persists, use the official troubleshooting instructions for the event-log condition rather than clearing TPM data or changing unrelated firmware options.
What should I do if I cannot enable TPM 2.0 or Secure Boot?
Start with the exact PC or motherboard model and its current firmware version. Activision recommends contacting the hardware vendor when the features cannot be enabled, because the remedy may be a model-specific BIOS update, a documented setting, or confirmation that the hardware does not support the requirement.
- Check the manufacturer’s support page for a firmware release that adds or fixes TPM/PTT/fTPM or Secure Boot support.
- Confirm that the installed processor and board are within the supported Intel or AMD generation guidance, while remembering that firmware support is still decisive.
- Ask the vendor whether the board accepts a discrete TPM and which exact part number is approved. A generic module is not a safe default.
- If the machine cannot provide UEFI, GPT, Secure Boot, and TPM 2.0 together, the official requirements do not provide a software-only workaround.
- Do not use unofficial BIOS files, third-party flashing tools, or instructions that tell you to erase TPM data without a recovery plan.
Replacing a motherboard or PC is a hardware decision, not a standard first step. The official guidance establishes no universal replacement recommendation; determine compatibility and repair options for your specific machine first.
What happens if I leave the requirements disabled?
For the Modern Warfare 4 Beta, Activision says a PC that fails either TPM 2.0 or Secure Boot is restricted from every online mode. For the full game, both features are listed as required PC specifications, so a noncompliant system does not meet the published requirements for PC play.
Activision’s requirement pages do not promise an offline or campaign exception. Treat the checks as a prerequisite for the PC version rather than assuming that a particular mode will bypass them.
Which mistakes most often cause a Secure Boot failure?
Most failures come from changing one setting while overlooking the boot configuration around it.
- Enabling Secure Boot while still using Legacy/MBR: the firmware may reject the configuration or Windows may stop booting. Confirm UEFI and GPT first.
- Enabling TPM but not Secure Boot: the wizard will still report a missing requirement because the two checks are independent.
- Assuming a visible TPM menu proves readiness: use
tpm.mscto confirm that Windows sees a ready TPM 2.0, then run the wizard. - Using instructions for a different motherboard revision: firmware labels and update files can differ even within one product family. Match the exact model and revision.
- Treating a firmware recommendation as an immediate failure: the wizard distinguishes recommended updates from disabled security features. Follow the manufacturer’s update process and scan again.
- Downloading firmware or utilities from an unofficial site: use the PC or motherboard maker’s support page and verify the file before flashing.
- Resetting TPM data to clear an error: Activision’s categories do not call for a generic TPM reset. Use the named official remedy and preserve your recovery access.
How current are these requirements?
The Activision Support article and Secure Attestation Wizard information referenced here were accessed October 7, 2026, and the page identified wizard version 1.2.0 with a September 16, 2026 update. Activision’s full-game specifications state that specifications are valid for launch and may change. Recheck the live support and PC-specification pages whenever the game, Windows, or your firmware receives a major update.
Frequently asked questions
Does purchasing Modern Warfare 4 turn on Secure Boot?
No. Game ownership and firmware configuration are separate. Secure Boot and TPM settings must be enabled on the PC through its UEFI/BIOS according to the hardware manufacturer’s instructions.
Do I need to buy a separate TPM chip?
Not necessarily. Activision lists Intel PTT and AMD CPU fTPM as possible TPM 2.0 implementations, and many systems use one of those firmware-backed options. A discrete module is model-specific, so confirm compatibility with the motherboard maker before buying anything.
Can I keep an MBR Windows installation and still pass the check?
Activision’s published requirements call for a GPT boot partition and UEFI boot mode, so an MBR/Legacy configuration does not satisfy them. A conversion may be possible on some systems, but it must follow Microsoft’s and the manufacturer’s supported procedure for that installation.
What if the wizard passes today but the game later reports a security error?
Run the wizard again and record the exact category it reports; firmware updates, Windows updates, or game requirement changes can alter the result. Compare the current Activision support guidance with your PC manufacturer’s latest firmware notes before changing settings.
Is an offline campaign guaranteed when the checks fail?
Activision’s published material specifically states the Beta’s online-mode restriction and lists TPM 2.0 and Secure Boot as full-game PC requirements. It does not guarantee that campaign or another offline mode will bypass those requirements, so do not rely on an exception that Activision has not documented.
Frequently Asked Questions
Can Secure Boot be enabled without entering UEFI/BIOS?
No. Secure Boot is a firmware-level setting, so Windows alone cannot switch it on. Use the entry method and menu path documented for your exact PC or motherboard.
Why does the wizard still fail after I enable both options?
The remaining failure may be GPT, UEFI boot mode, firmware status, authorization, or the Windows event log rather than the two visible toggles. Read the wizard’s named category and follow that category’s official remedy.
Should I update BIOS before checking TPM?
Check your current model documentation and run the supported Windows checks first. Update firmware only when the manufacturer or the wizard identifies a model-appropriate update, using the exact file and procedure supplied by the vendor.
Does the Windows 10 TPM minimum mean version 20H2 is enough for Modern Warfare 4?
No. Activision’s TPM compatibility note allows Windows 10 version 20H2 or later for TPM 2.0, but the Call of Duty requirement is Windows 10 version 22H2 or later. The game’s higher OS requirement controls for Modern Warfare 4.