Processors

[minimaltech]

Hi. I had a problem with SCEP Certificate enrollment initialization error (0x80190194 HTTP_E_STATUS_NOT_FOUND) for the last 6 months (approximately)... The problem was that when the PC was powered On, suddenly (even if i was in Desktop, without running any other program) it was giving me a blank black screen and restarted (crashed).

Yesterday, 06-May-2023, I made a BIOS update (I updated the BIOS to the latest version 10.01) and loaded UEFI defaults. I made also an SSD Secure Erase and a clean installation of Windows 11 Home 22H2 64-bit. I let Windows update to install the necessary drivers for the system, hoping that the optimal drivers/WHQL drivers for the system will be installed. I installed also basic apps in the PC, such as WinRAR, Firefox, Chrome, VLC, Avast free AV, no games or any sophisticated/heavy apps. All went fine this day. I also run a PassMark MemTest86 v10.4 Free for hours with the PASS as a result.

The next day (today, 07-May-2023) when I just browsing the internet, it made again a restart (crashed). When I logged-in Windows again, I opened the Event Viewer and I saw the same problem again (my Windows is in Greek Language, but I think you will understand):

Η προετοιμασία εγγραφής πιστοποιητικού SCEP για WORKGROUP\PC-RECEPTION$ μέσω 
https://AMD-KeyId-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net/templates/Aik/scep απέτυχε:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 07 May 2023 17:01:40 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: c057795b-200b-4e3f-bac6-40edcab31ceb

Μέθοδος: GET(359ms)
Στάδιο: GetCACaps
Δεν βρέθηκε (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

My system configuration is:

ASRock B450M-HDV R4.0 (Rev 4.02 with v10.01 BIOS)
AMD Ryzen 5 3400G
RAM 2 x 4GB DDR4 Corsair VENGEANCE LPX (CMK8GX4M2C3000C16)
SSD Samsung 860 Evo 250GB 2.5" SATA
Windows 11 Home 22H2 64-bit

I have the PC for my business and I cannot work!

I am in a big problem...

Can you help me?

Does anyone have a solution?

Thank you.

[notsatisfiedwithAMD]

Hello, I'm guessing you still have the Issue? Well me too. The only current known fixes are, getting a sperate TPM module, since the one of AMD is broke or going back to Win 10 the 21H2 version. Sorry to know that there are many of us, just linking you a thread here: https://community.amd.com/t5/processors/scep-certificate-enrollment-initialization-errors-are-back-a...

[ps6067966]

I'm just testing some ways to fix this issue. 
Will let you know guys if this works. 

[Siding4915]

Hope you have luck in fixing this.

[Siding4915]

I have the same issue as you but i have Windows 10.

[notsatisfiedwithAMD]

Hey, I would recommend you to often check new comments of this post: https://community.amd.com/t5/processors/scep-certificate-enrollment-initialization-errors-are-back-a...

I will soon change my cpu to see if the errors go away (what I wrote on the post)

[Siding4915]

I hope it goes away for you i am not so lucky as you as i can't change my CPU i have a laptop.

But this issue stems from Microsoft Removing some kind of a certificate from their Server i guess i mean i am no tech guy its just my best guess.

The OS Calls a Attestation server for a certificate and that certificate was removed.

I googled around and found some Microsoft site then i downloaded this package that they provide on the Microsoft site.

I verified it and then i expanded the cab file like it says then opened the TrustedTPM folder then i opened the version.txt file and in there i went and searched i have this error message: 

SCEP Certificate enrollment failed Error message in Event Viewer

 so i just searched for amd-keyid-52fb59e29aa83a962fb9eef0fe5b4811de6b751e

in the version.txt file And then i found it:

Removed Certificates

So you can see they removed my certificate now if i check the certificate name of the user minimaltech: 8a0578cf56146fea399af903fb5b0ac36eb2786a

I can also see they removed his certificate also (its below mine in the above picture like 2 lines down).

So in theory i imagine this can be fixed by installing all those certificates by running the setup thingy ?? or maybe not? no idea i haven't tried that yet it seems like the setup.ps1 or setup.cmd installs a root certificate found in the TrustedTPM folder under AMD\RootCA then it installs all the other intermediary certificates that are included and maybe this will fix things ? or maybe it will continue calling for the one certificate that was removed ?

now i am not sure that's how this works but its worth a try i currently have like 100gb of data on this Laptop so i will try to do this once i have a drive ready to backup things in the event this goes catastrophically wrong. And then i will try this method and hey maybe this works or maybe i am waaay off!

But all these crashes and blue screens are really bothersome before i try this i will disable secure boot and clear the TPM and then try installing this offline.

I hope to report back with a positive development!

[Siding4915]

Yeah no this doesn't work. In other related news i am replying to a MS Support Moderator and i will make him aware of this version.txt file and see what he says about this.

I Hope to bring back a positive development!