A Comprehensive Guide to Enabling Secure Boot for Riot Vanguard and VALORANT
Are you getting the dreaded "VAN9001" or "VAN9003" error when you try to launch VALORANT on Windows 11? You're not alone! Many players encounter this issue because Riot Vanguard, the game's anti-cheat software, requires certain security features to be enabled on your PC. Specifically, it needs Secure Boot and TPM 2.0 to be active.
Don't worry, this isn't as scary as it sounds. Think of it as a one-time security upgrade for your system that not only lets you play your favorite tactical shooter but also makes your computer more secure against malware and other threats.
Let's dive into the step-by-step process of enabling Secure Boot and getting you back into the game!
Step 1: Check Your Current Status - Are you ready for the mission?
Before we enter the BIOS, let's confirm whether Secure Boot and TPM 2.0 are already enabled or not. This is a quick and easy check that saves you from going through the process if it's not needed.
To check Secure Boot state:
Press the Windows key + R to open the Run dialog box.
Type
msinfo32and press Enter.In the System Information window, look for the "System Summary" section on the left.
On the right, find the entries for "BIOS Mode" and "Secure Boot State."
If your BIOS Mode is "UEFI" and Secure Boot State is "On," you're good to go! You likely don't need to do anything.
If your BIOS Mode is "Legacy" or "Secure Boot State" is "Off," you'll need to continue to the next steps.
If Secure Boot State says "Unsupported," your motherboard may not support this feature. Check your motherboard's manual or manufacturer's website.
To check TPM 2.0 status:
Press the Windows key + R to open the Run dialog box.
Type
tpm.mscand press Enter.A new window will pop up. If you see a message that says "The TPM is ready for use," you're all set with TPM.
Under "TPM Manufacturer Information," check the "Specification Version." It should be 2.0.
If you see a message stating that a compatible TPM cannot be found, you'll also need to enable this in your BIOS.
Step 2: Enter the BIOS/UEFI Settings - Gearing up for the change
This is where things can get a little different depending on your computer's manufacturer. The BIOS (Basic Input/Output System) or UEFI (Unified Extensible Firmware Interface) is the firmware that controls your hardware. You'll need to access it to make the necessary changes.
Find Your BIOS Key:
The most common keys to press during startup to enter the BIOS are Delete, F2, F10, or Esc.
The exact key varies by motherboard or PC manufacturer (e.g., Dell, HP, Lenovo, ASUS, MSI). When you restart your computer, keep an eye on the screen for a message like "Press [Key] to enter Setup" or "Press [Key] to enter BIOS."
Restart Your PC and Enter the BIOS:
Save your work and close all applications.
Restart your computer.
As soon as the computer starts to boot up (before the Windows logo appears), repeatedly press the designated BIOS key.
You will be taken to a blue or gray screen with a text-based menu. This is your BIOS/UEFI.
Note: In this environment, your mouse may not work, so you'll need to use your keyboard's arrow keys and the Enter key to navigate.
Step 3: Switch to UEFI Mode and Enable Secure Boot - The core mission
Secure Boot requires your system to be running in UEFI mode, not the older Legacy/CSM mode. If you are already in UEFI mode, you can skip to enabling Secure Boot.
Sub-heading 3.1: Switch Boot Mode to UEFI
In the BIOS menu, find the "Boot," "Boot Configuration," or "Advanced" tab.
Look for an option like "Boot Mode," "UEFI/Legacy Boot," or "CSM."
Make sure this is set to "UEFI" and not "Legacy" or "CSM."
Warning: If your Windows installation is on an MBR (Master Boot Record) partition, switching to UEFI mode without converting your disk to GPT (GUID Partition Table) first can prevent Windows from booting. You can check this in "Disk Management" in Windows before you start. If you are on MBR, you'll need to convert it to GPT first.
Sub-heading 3.2: Enable Secure Boot
Navigate to the "Boot," "Security," or "Authentication" section of your BIOS.
Look for the "Secure Boot" option.
Set it to "Enabled."
On some motherboards, you may need to first set "OS Type" to "Windows UEFI mode" or "Windows 8/10/11 WHQL Support" to "Enabled" before the Secure Boot option becomes visible or can be changed.
You may also see an option for "Key Management." Here, you can sometimes "Install Default Secure Boot Keys" if needed.
Sub-heading 3.3: Enable TPM 2.0 (if not already enabled)
While you are in the BIOS, navigate to the "Security" or "Advanced" tab.
Look for an option related to "Trusted Platform Module" (TPM), "Intel PTT," "AMD fTPM," or "Security Device Support."
Enable this setting.
Step 4: Save and Exit - Completing the mission
Once you have made all the necessary changes, navigate to the "Exit" tab in your BIOS.
Select "Save Changes and Exit" or a similar option (often the F10 key).
Confirm the changes and let your PC restart.
Step 5: Verify Again and Launch VALORANT - Mission success!
After your computer restarts, you can repeat the steps in Step 1 to verify that both Secure Boot and TPM 2.0 are now enabled. If everything looks good, launch VALORANT. You should now be able to play without any errors!
10 Related FAQ Questions
How to check if my Windows disk is MBR or GPT? You can check your disk's partition style by pressing Windows Key + X and selecting "Disk Management." Right-click on your OS drive (usually C:), go to "Properties," and then the "Volumes" tab. "Partition style" will show you whether it's MBR or GPT.
How to convert my MBR disk to GPT without losing data?
Windows has a built-in tool called mbr2gpt for this. You need to open Command Prompt as an administrator and run the command mbr2gpt /validate to check if your disk is compatible, and then mbr2gpt /convert to perform the conversion. This is a critical step, so be sure to back up your important data first.
How to find my motherboard's BIOS key? The BIOS key is usually displayed on the screen during the first few seconds of booting up. If you miss it, you can search online for your motherboard manufacturer and model (e.g., "ASUS ROG Strix Z690 BIOS key").
How to get into BIOS from Windows without restarting? You can use the Advanced Startup options in Windows. Go to Settings > System > Recovery > Advanced startup > Restart now. This will bring you to a special menu where you can select "Troubleshoot" > "Advanced options" > "UEFI Firmware Settings" to enter the BIOS.
How to reset Secure Boot keys if I have issues? Some motherboards have an option within the Secure Boot menu (often under "Key Management") to "Restore Factory Keys" or "Reset to Default." This can sometimes resolve conflicts.
How to fix the Secure Boot option being grayed out in my BIOS? This often happens if you are in Legacy boot mode. You first need to switch your BIOS Mode to "UEFI" and then the Secure Boot option should become available.
How to update my BIOS/UEFI firmware? Visit your motherboard manufacturer's website, find your specific model, and download the latest BIOS update. Follow the manufacturer's instructions very carefully to update the firmware, as a failed update can be catastrophic.
How to enable TPM 2.0 if the option is not visible? Some motherboards have the TPM setting hidden under different names like "Intel PTT" or "AMD fTPM" in the "Advanced," "Security," or "Trusted Computing" sections of the BIOS. Look for these alternative names.
How to fix VAN9003 error after enabling Secure Boot? If you've enabled Secure Boot and TPM but still get the error, check if "Memory Integrity" is enabled in Windows. Go to Settings > Update & Security > Windows Security > Device Security > Core isolation and toggle "Memory integrity" on. Then restart your PC.
How to reinstall Riot Vanguard to fix issues? You can uninstall Riot Vanguard from the "Add or remove programs" section in Windows Settings. After uninstalling, restart your PC, and then launch VALORANT. The game will automatically prompt you to reinstall Vanguard. This can sometimes fix corrupted installations.