SCEP Certificate enrollment initialization EVENT ID: 86

mickyfin1966 said:

Hi All,

I am getting the very same problem, my machine is crashing and the only thing in the logs is this error.
There is no error on screen the machine just hangs completely. No reset buttons work you basically have to switch off the power.

My problems started when I switched on in bios TPM as I was running the windows 11 checks. I also update my bios on my Asus Crossfire Viii. I dont want to downgrade my bios as it addresses some other issues.
I have tried to switch off the in Bios TPM but to no avail, I have noticed though it thinks TPM is still activated even though I set not in bios. I have just been into TPM and seen appears to be functioning so I can see an option to clear cache and wondering if this will get me back to a steady state, just worried as it talks about backups. I am fully backed up so will clear. I just posting as this I think is part of the issue and my direction of travel. Will let people know if this helps.

I am not sure what else I can do I have run all the standard tools to check my configuration

I too am getting the same issue, Event ID 86 on my AMD Ryzen 3500x system. PC will randomly "hang" (not BSOD, restart etc) apps freeze and cant use them and am forced to restart my PC whenever this happens. To my knowledge the EVENT ID86 is a TPM issue. I am running Windows 10 Pro at the moment.

Could I just disable TPM via my BIOS and hope it fixes the issue?

I have tried other things such as

ipconfig refreshes
DNS server 8.8.8.8 / 1.1.1.1
Services > Software Protection > start (With Automatic delayed start enabled)

But to no avail I had a crash yesterday.

Hi,

Done a little more digging into this and it looks like I cannot switch the FTPM off in my bios (I was trying to switch it to Discrete mode there is no off) selecting and saving in bios. But no matter what it goes back to FTPM enabled. So that's a fail, I have had an occurrence of entry in the Event log but no crash so clearing the cache may of helped. I am thinking something is flawed in the fTPM so I have purchased hardware TPM which I will fit later, I have a socket on the motherboard. Will report back my findings.

mickyfin1966 said:

Hi,

Done a little more digging into this and it looks like I cannot switch the FTPM off in my bios (I was trying to switch it to Discrete mode there is no off) selecting and saving in bios. But no matter what it goes back to FTPM enabled. So that's a fail, I have had an occurrence of entry in the Event log but no crash so clearing the cache may of helped. I am thinking something is flawed in the fTPM so I have purchased hardware TPM which I will fit later, I have a socket on the motherboard. Will report back my findings.

When you mention clearing of your cache, where are you doing this? and is this for TPM or something else?

Apologies not named cache meant clear of TPM, type tpm and return in a command prompt, goto security processor troubleshooting, then clear TPM. I have now installed the hardware TPM I bought and for 20 hours or so have not see the error, so optimistic that solved it for me. Will report back in couple of days.

SCEP Cert Issue RESOLVED
After having this issue for a couple months, x3 weeks ago I noticed x5 short beeps during POST which I had not heard previously. Long story short, I began further diagnostics/analysis. There were two additional GIGABYTE NVIDA GeForce GT 1030 graphics card diver updates available - one (the latest) was difficult to find but I found it on the NVIDA site - since I originally upgraded W10>W11. MoBo is ASUS PRIME X470-PRO, BIOS Ver. 5861 w/ AMD Ryzen 5 2600x (8/10/2021). After updating (today) to the latest display driver, several items: (1) No longer received x5 beeps during POST, (2) SCEP Event Viewer error is gone, and; (3) Processor Attestation is now continuously indicated as "Ready". Previously, the Processor Attestation would become "Not Ready" during a hard reboot. I'd go in and "Clear" the TPM & Attestation would be fine until the next hard Reboot. Now, Processor TPM "Attestation" remains in the "Ready" state.

I'm seeing this error after a reboot, it shows in Event viewer but nothing is crashing. I don't think it's been happening for long or I'd have noticed it before. Windows 11 Pro

I just stumbled upon this. It seems that many people here experience the same crash-freeze/hang I do and this error coincidentally also shows up in event viewer.
Has anyone ever solved this or will it magically go away in a couple of windows/gpu driver updates?

Vintage Chief said:

ISSUE:
SCEP Certificate enrollment initialization for WORKGROUP\VINTAGE_CHIEF$ via https://AMD-KeyId-578c545f7969514212...lates/Aik/scep failed:

Issues are very numerous. Appears to be AMD Ryzen related but this has not been confirmed. Many experiencing BSOD, eradicate OS behavior with continual Event ID: 86 in Event Viewer.

Began when I prepared for W10>W11 upgrade. I don't game, basic mid-tower PC. Error continues w/ W11. I suspect it has to do w/ UEFI AMD cert enrollment via TPM.

Windows 11 Version 21H2 (OS Build 22000.282)

Processor: AMD Ryzen 5 2600X Six-Core Processor 3.60 GHz
Installed RAM: 32.0 GB
System Type: 64-bit OS, x64 Based Processor
Network Adapter: Intel(R) I211 Gigabit Network Connection (1000/1000 (Mbps)
Disk Drive: Seagate BarraCuda 510 SSD ZP500CM30001

SCEP Certificate enrollment initialization for WORKGROUP\VINTAGE_CHIEF$ via https://AMD-KeyId-578c545f7969514212...lates/Aik/scep failed:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority "amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 31 Oct 2021 14:16:58 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 01a2e416-6955-4cd5-aeda-3bb5367e8fc8

Method: GET(141ms)
Stage: GetCACaps
Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Log Name: Application
Source: Microsoft-Windows-CertificateServicesClient-CertEnroll
Date: 10/31/2021 10:16:57 AM
Event ID: 86
Task Category: None
Level: Error
Keywords: Classic
User: SYSTEM
Computer: Vintage_Chief
Description:
SCEP Certificate enrollment initialization for WORKGROUP\VINTAGE_CHIEF$ via https://AMD-KeyId-578c545f7969514212...lates/Aik/scep failed:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority "amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 31 Oct 2021 14:16:58 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 01a2e416-6955-4cd5-aeda-3bb5367e8fc8

Method: GET(141ms)
Stage: GetCACaps
Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">;;
<System>
<Provider Name="Microsoft-Windows-CertificateServicesClient-CertEnroll" Guid="{54164045-7C50-4905-963F-E5BC1EEF0CCA}" EventSourceName="CertEnroll" />
<EventID Qualifiers="49754">86</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2021-10-31T14:16:57.4877893Z" />
<EventRecordID>184</EventRecordID>
<Correlation />
<Execution ProcessID="7160" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Vintage_Chief</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Context">WORKGROUP\VINTAGE_CHIEF$</Data>
<Data Name="Url">https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep</Data>;;
<Data Name="MessageText">GetCACaps
GetCACaps: Not Found
{"Message":"The authority "amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net" does not exist."}
HTTP/1.1 404 Not Found
Date: Sun, 31 Oct 2021 14:16:58 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 01a2e416-6955-4cd5-aeda-3bb5367e8fc8
</Data>
<Data Name="Method">GET(141ms)</Data>
<Data Name="Stage">GetCACaps</Data>
<Data Name="ErrorCode">Not found (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)</Data>
</EventData>
</Event>


https://aka.ms/AAeqtvb

alll you got to do is uninstalll all the new windows updates and reinstall bios and under optional features installl tpm diagnostics you should be all set and do not install the new update

hi im having this same issue could i get any help?, below is my current error with ID 86 and below that is my system specs