Call of Duty TPM 2.0 and Secure Boot Requirements Explained

TPM 2.0 for Call of Duty is now a PC requirement, alongside Secure Boot, for Black Ops 7, Warzone and Modern Warfare 4. According to Activision's support page, players who don't meet it are shut out of some modes in Black Ops 7 and Warzone, including Ranked Play, and from every online mode in Modern Warfare 4. Most Windows 11 PCs already comply; older Windows 10 setups often need a firmware change.

Which Call of Duty Games Require TPM 2.0 and Secure Boot?

Activision lists three PC titles that require both TPM 2.0 and Secure Boot: Call of Duty: Black Ops 7, Call of Duty: Warzone and Call of Duty: Modern Warfare 4. The consequences of not meeting the requirement differ by game.

This reflects Activision's TPM 2.0 and Secure Boot support article at the time of writing. Activision updates its requirements as new seasons and titles arrive, so check that page before buying new hardware for a specific game.

Why Does Call of Duty Need TPM 2.0?

Call of Duty needs TPM 2.0 because its RICOCHET anti-cheat uses the chip to verify that your PC started in a trusted state before the game runs. Activision describes this as remote attestation: the TPM produces a signed record of how the PC booted, and the game's servers check it.

A TPM (Trusted Platform Module) is a security processor, either a separate chip or built into the CPU as Intel PTT or AMD fTPM. It records measurements of the firmware and boot loader as the PC starts. Because those measurements are stored in hardware that software cannot rewrite, a cheat that loads before Windows leaves a trace the server can detect. The cause and effect for players: no working TPM 2.0 means the game cannot prove the PC is clean, so it limits what you can join.

Why Does Call of Duty Need Secure Boot?

Secure Boot stops unsigned code from loading before Windows, which is exactly where the most stubborn cheats used to hide. It is a UEFI firmware feature that checks each piece of start-up code against a list of trusted signatures and refuses anything that isn't on it.

The two features work as a pair. Secure Boot blocks untrusted boot code, and TPM 2.0 records that the boot was clean so the server can confirm it. Secure Boot also only works in UEFI mode, so a PC still set to Legacy or CSM boot, or a Windows drive partitioned as MBR instead of GPT, will fail the check even if the TPM is fine.

How Do You Check If Your PC Is Ready for Call of Duty?

You can check both requirements from Windows in under two minutes.

1. Press Windows + R, type tpm.msc and press Enter. Look for "The TPM is ready for use" and Specification Version 2.0. Our guide to tpm.msc explains every message you might see.
2. Press Windows + R, type msinfo32 and press Enter.
3. In System Summary, confirm BIOS Mode reads UEFI and Secure Boot State reads On.
4. Open Settings → System → About and confirm you are on Windows 11, or Windows 10 version 22H2.
5. Run Activision's Secure Attestation Wizard, linked from its support article, to confirm the game itself sees a compliant system.

If either check fails, the fix is usually in your firmware settings rather than in Windows.

How Do You Enable TPM 2.0 and Secure Boot for Call of Duty?

Enable the firmware TPM first, then make sure the PC boots in UEFI mode, then switch Secure Boot on. Doing it in that order avoids the most common "Windows won't start" mistake.

1. Restart into the UEFI/BIOS setup (often Del, F2 or F10 during start-up).
2. Enable Intel PTT or AMD fTPM (sometimes labelled Security Device Support). Our step-by-step guide on enabling TPM 2.0 shows where this sits on popular boards.
3. Back in Windows, if msinfo32 shows BIOS Mode: Legacy, convert the system disk from MBR to GPT using Microsoft's mbr2gpt tool before changing boot mode. Back up first.
4. Return to the firmware, switch Boot Mode from Legacy/CSM to UEFI, and set Secure Boot to Enabled.
5. Save, restart and re-check msinfo32 and tpm.msc.

Windows 10 users will find the full Secure Boot process in our guide to enabling Secure Boot in Windows 10. If Windows logs a TPM-WMI warning about Secure Boot certificates afterwards, that is a separate Microsoft update covered in our TPM-WMI Event 1801 guide, and it doesn't mean Secure Boot is off.

What If My TPM Is On but Call of Duty Still Fails the Check?

If the TPM and Secure Boot are both on but the game still complains, outdated TPM firmware is a likely cause. Activision's article notes that AMD firmware TPMs with a manufacturer version of 3.x.0.x, and some Intel firmware TPMs with versions INTC 302.12.x.x or 303.12.x.x, may need an update. You can read the version in tpm.msc under TPM Manufacturer Information.

The fix is a motherboard BIOS or chipset firmware update from your board or laptop maker. Follow their instructions precisely and keep the PC on mains power during the flash. Activision also says the game may show a User Account Control prompt for CODBrokerInstaller.exe or enrollaik.exe at first launch; approving it lets the game enrol with the TPM.

A Common Mistake We See

A common mistake is switching Secure Boot on before checking whether the Windows disk is MBR. On an older PC installed in Legacy mode, flipping to UEFI makes the drive unbootable until you switch back, and many people assume Windows is broken. Check msinfo32 first and convert the disk if needed.

The other is assuming a gaming PC that runs Windows 10 cannot meet the requirement. Activision supports Windows 10 version 22H2, and most PCs that fail are simply set up with the firmware TPM disabled. That said, Windows 10 support ended in October 2025, and if you are rebuilding the boot setup anyway, moving to Windows 11 at the same time saves doing it twice.

Frequently Asked Questions

Does Call of Duty Black Ops 7 require TPM 2.0?

Yes. On PC, Call of Duty Black Ops 7 requires TPM 2.0 and Secure Boot. Activision says players who don't meet the requirement are restricted from certain modes and playlists, including Ranked Play, and may be matched separately. The check is enforced by the RICOCHET anti-cheat at launch.

Can I play Call of Duty on Windows 10?

Yes, if you run Windows 10 version 22H2 or later with TPM 2.0 and Secure Boot enabled, according to Activision. Bear in mind that Windows 10 no longer receives free general security updates, which matters on a PC you use online every day.

Does Warzone require Secure Boot?

Yes. Activision lists Warzone alongside Black Ops 7 and Modern Warfare 4 as requiring both TPM 2.0 and Secure Boot on PC. Without them you can lose access to some modes and playlists, including Ranked Play, and may be placed in separate matchmaking pools.

Do I need a separate TPM chip for Call of Duty?

Usually not. Most modern Intel and AMD processors include a firmware TPM 2.0 (Intel PTT or AMD fTPM) that only needs switching on in the UEFI settings. A plug-in TPM module is only needed on boards without firmware TPM support.

Will enabling Secure Boot delete my games or files?

No. Enabling Secure Boot changes how the PC starts, not what is on the drive. The risk is a PC that won't boot if Windows was installed in Legacy/MBR mode, which is why you should confirm UEFI mode and a GPT disk before turning it on.

Do consoles need TPM 2.0 for Call of Duty?

No. Activision's TPM 2.0 and Secure Boot requirement is written for PC players, and the settings it describes exist only in PC firmware. PlayStation and Xbox players have no equivalent setting to change and play under the console platform's own security.

Conclusion

TPM 2.0 for Call of Duty is a firmware setting for most players, not a hardware upgrade: enable the firmware TPM, boot in UEFI mode, switch on Secure Boot and run Activision's checker. Since Windows 11 is built around the same requirements, a PC that passes is ready for a genuine licence from our Windows 11 collection.

Useful Links