TPM 2.0 and Secure Boot for Call of Duty: check and turn them on

Call of Duty: Black Ops 7, Warzone and Modern Warfare 4 need two Windows security features turned on to play on PC: TPM 2.0 and Secure Boot. Most Windows 11 PCs already have both. Checking takes two minutes, and turning on whichever is off is a change in your PC’s firmware settings.

This is a requirement of the games, set by Activision for every player. It has nothing to do with what we sell, and it applies whether or not you ever run a build.

Which games need them

Activision says the two settings help it make sure a PC starts in a trusted state, which closes off one of the ways cheats load. Both are part of RICOCHET Anti-Cheat, explained in what RICOCHET is and what it means for your account.

What happens without them

Activision’s pages describe the result in different words:

• The system requirements for each game list TPM 2.0 and Secure Boot as required to play.
• For the Modern Warfare 4 beta, a PC without either could not play online.
• Since Season 04 (June 2026), a Black Ops 7 or Warzone PC that fails the check sees a Failed Attestation Status message and is moved to a separate matchmaking pool, limited to Nuketown 24/7 in Black Ops 7 and Battle Royale Casual in Warzone.

Plan on needing both. Exactly what is locked can change from one season to the next.

Check TPM 2.0

Either of these works.

Windows Security

1. Open Windows Security and select Device security.
2. Under Security processor, select Security processor details.
3. Specification version should read 2.0.

No Security processor section at all usually means the TPM is turned off in your firmware.

The TPM console

1. Press Windows + R, type tpm.msc and press Enter.
2. Status should say the TPM is ready for use.
3. Under TPM Manufacturer Information, Specification Version should read 2.0.

“Compatible TPM cannot be found” means it is turned off in your firmware, or the PC does not have one.

Check Secure Boot

1. Press Windows + R, type msinfo32 and press Enter.
2. In System Summary, find Secure Boot State and BIOS Mode.

You want Secure Boot State: On and BIOS Mode: UEFI. If BIOS Mode says Legacy, read the Secure Boot steps below before you change anything: the order matters.

Open your firmware settings

TPM and Secure Boot are both switched on in your PC’s firmware (UEFI) settings, not in Windows. To get there from Windows 11:

1. Open Settings, then System, then Recovery.
2. Next to Advanced startup, select Restart now.
3. Choose Troubleshoot, then Advanced options, then UEFI Firmware Settings, and restart.

On Windows 10 the same option is under Settings, Update & Security, Recovery. The menus that follow are your motherboard maker’s, so names and places vary. Their manual or support site has the exact steps for your board.

Turn on TPM 2.0

Most PCs from the last several years have a TPM built into the processor’s firmware. Look under Advanced, Security or Trusted Computing for a setting with one of these names, and enable it:

• Intel PTT or Intel Platform Trust Technology on Intel systems;
• AMD fTPM or AMD PSP fTPM on AMD systems;
• Security Device Support or TPM State on some boards.

Activision lists Intel 8th generation and AMD Ryzen 2000 series processors or newer for the firmware TPM, or a separate TPM module on the motherboard. Save, restart and check tpm.msc again. If the setting is missing or the TPM still is not found, update your motherboard’s BIOS from the maker’s site and try again.

Turn on Secure Boot

Secure Boot needs two things in place first: your system disk must use the GPT partition style, and the firmware must boot in UEFI mode, not Legacy or CSM.

Check the partition style

1. Right-click Start and open Disk Management.
2. Right-click the disk Windows is on (usually Disk 0) and choose Properties.
3. On the Volumes tab, Partition style reads GUID Partition Table (GPT) or Master Boot Record (MBR).

If it is GPT and BIOS Mode is UEFI, enable Secure Boot in your firmware settings, usually on the Boot or Security page, then save and restart. That is all.

If it is MBR, convert the disk before you switch the firmware to UEFI, or Windows will not start:

1. Back up first. The conversion cannot be undone.
2. If BitLocker is on, suspend it.
3. Open Command Prompt as administrator and run mbr2gpt /validate /allowFullOS. It checks the disk without changing it. The disk can hold no more than three primary partitions.
4. If validation passes, run mbr2gpt /convert /allowFullOS.
5. Restart into your firmware settings, switch the boot mode from Legacy or CSM to UEFI, then enable Secure Boot.

Check msinfo32 again: Secure Boot State should now read On.

Windows 10 and Windows 11

Windows 11 requires a PC capable of TPM 2.0 and Secure Boot, so most Windows 11 PCs have both turned on already. On Windows 10 you may need the steps above, and Activision requires Windows 10 version 22H2 or later for Call of Duty. Microsoft ended support for Windows 10 on 14 October 2025.

Still stuck?

Activision’s own article, listed below, covers its Secure Attestation Wizard and its error messages. Your motherboard maker’s support site covers the firmware menus. For anything else about your PC and a build, check your PC before you buy or open a ticket.

Meeting these requirements changes nothing about account risk: any account that uses third-party software can be banned.