Of course! Let's get you back into the game. Here is a very lengthy, step-by-step guide on how to secure boot for Vanguard, specifically for Riot Games' VALORANT.
How to Secure Boot for Vanguard: A Comprehensive Guide to Fixing VAN9001 and VAN9003 Errors
Hello, Agent! Have you been hit with that frustrating "This build of Vanguard requires secure boot to be enabled in order to play" error? Or maybe the dreaded VAN9001 or VAN9003 error code? Don't worry, you're not alone. This is a common issue for many VALORANT players on Windows 11, and sometimes even on Windows 10. The good news is, you can fix it. This guide will walk you through the process step-by-step, helping you get back into the game and crushing the competition.
Let's begin!
Step 1: The Initial Check-Up - Is Secure Boot Really Disabled?
Before you start messing around with your computer's BIOS (and trust me, you need to be careful in there!), let's confirm the current status of Secure Boot and TPM 2.0. This is the first and most crucial step. It's like checking the oil in your car before a long road trip.
There are a couple of quick and easy ways to do this:
Using the System Information Window:
Press the Windows key + R to open the Run dialog box.
Type msinfo32 and press Enter.
In the System Information window that appears, look for "System Summary" on the left-hand side.
On the right-hand side, scroll down and find the lines for "BIOS Mode" and "Secure Boot State."
If "BIOS Mode" says UEFI and "Secure Boot State" says On, congratulations! You're all set and this guide may not be for you. If you're still getting the error, there might be a different issue.
If "BIOS Mode" says Legacy or CSM, or if "Secure Boot State" says Off or Disabled, then you've found your problem. Keep reading!
Using the TPM Management Console:
Press the Windows key + R to open the Run dialog box.
Type tpm.msc and press Enter.
A new window will pop up. Look at the "Status" section.
If it says, "The TPM is ready for use," then TPM 2.0 is enabled. Great!
If you see an error like "Compatible TPM cannot be found," then you'll need to enable it in your BIOS as well.
Step 2: Preparing for the BIOS Journey
The next part involves venturing into your computer's BIOS/UEFI firmware settings. This is where you make changes to how your computer boots up. It is essential to be careful and follow the steps precisely. Changing the wrong settings can cause issues with your computer.
Sub-heading: Understanding the Requirements
UEFI Mode: Secure Boot is a feature that only works in UEFI (Unified Extensible Firmware Interface) mode. If your BIOS mode is currently set to Legacy or CSM (Compatibility Support Module), you will need to switch it to UEFI.
GPT Partition Style: Your main drive (the one with your Windows installation) must be using the GUID Partition Table (GPT) format. If it's using the older Master Boot Record (MBR) format, you'll need to convert it. Don't worry, this can often be done without losing your data!
Sub-heading: Checking Your Disk Partition Style
Press Windows key + X and select Disk Management.
In the Disk Management window, find your primary drive (usually
(C:)).Right-click on the disk number (e.g., Disk 0) and select Properties.
Go to the Volumes tab.
Look at the "Partition style." If it says "Master Boot Record (MBR)", you'll need to convert it to GPT. If it says "GUID Partition Table (GPT)", you can skip the conversion part.
Sub-heading: Converting MBR to GPT (If Needed)
Important: While this method is generally safe, it's always a good idea to back up your important data before proceeding.
This process requires a Windows 10/11 version 1703 or later.
Open the Command Prompt as an administrator.
Type the following command and press Enter to validate your disk:
mbr2gpt /validate /allowFullOSIf the validation is successful, you can now run the conversion command. Type:
mbr2gpt /convert /allowFullOSOnce the conversion is complete, you should see a confirmation message.
Step 3: Entering the BIOS
Now, the main event! You need to restart your PC and enter the BIOS.
Restart your computer.
As your computer is restarting, repeatedly press the BIOS key. The key to enter BIOS varies depending on your motherboard manufacturer. Common keys are F2, F10, F12, DEL, or ESC.
Pro Tip: A quick search for "BIOS key for [Your Motherboard/Laptop Model]" will tell you exactly which key to press. For example, "BIOS key for Dell XPS 15" or "BIOS key for MSI B550 motherboard".
You will now be in the BIOS menu. Don't be intimidated! It's mostly navigable with your keyboard's arrow keys and the Enter key, as the mouse may not work.
Step 4: Enabling UEFI Mode and Secure Boot
Once you're in the BIOS, the specific layout and names of the settings will vary by manufacturer (ASUS, Gigabyte, MSI, Dell, HP, etc.). However, the general process is the same.
Navigate to the Boot or Boot Configuration tab.
Find the option for "Boot Mode" or "BIOS Mode" and ensure it is set to UEFI. If it's on Legacy or CSM, change it to UEFI. You may need to disable the "Compatibility Support Module" (CSM) first.
Go to the Security tab.
Look for the "Secure Boot" option. It may be nested under a sub-menu like "Boot," "Authentication," or "Advanced."
Set the Secure Boot option to Enabled.
While you're in the Security or Advanced section, also look for settings related to TPM. It might be called "TPM State," "Intel Platform Trust Technology (PTT)," or "AMD fTPM switch." Make sure this is also Enabled.
Save your changes and exit the BIOS. The key to save and exit is usually F10. The BIOS will often ask you to confirm your changes.
Step 5: Verifying and Launching VALORANT
After you save and exit the BIOS, your computer will restart. It might take a moment longer than usual as it reconfigures with the new settings.
Once you are back in Windows, re-run the
msinfo32command (from Step 1) to verify that the "Secure Boot State" now says "On".If everything looks good, launch VALORANT. Vanguard should now recognize the secure boot environment, and you should be able to play without any error messages.
Congratulations! You've successfully secured your boot for Vanguard.
Frequently Asked Questions (FAQ)
Here are 10 related FAQ questions that start with 'How to' with quick answers.
How to check my BIOS mode?
You can check your BIOS mode by pressing Windows Key + R, typing msinfo32, and looking at the "BIOS Mode" entry in the System Information window.
How to find my motherboard's BIOS key?
The BIOS key is specific to your motherboard or laptop. Common keys are F2, F10, F12, DEL, or ESC. You can find the exact key by checking your motherboard's manual or by performing a quick online search for your model (e.g., "BIOS key for ASUS ROG STRIX B650-A").
How to convert my drive from MBR to GPT?
Use the mbr2gpt command in an elevated Command Prompt. First, run mbr2gpt /validate /allowFullOS to check compatibility, and if it passes, run mbr2gpt /convert /allowFullOS to perform the conversion.
How to enable TPM 2.0?
TPM 2.0 is a setting in your BIOS/UEFI. Look under the "Security" or "Advanced" tabs for options like "TPM State," "PTT" (Intel), or "fTPM" (AMD), and enable it.
How to fix the "Secure Boot is in Setup Mode" error?
In your BIOS, you may need to navigate to the Secure Boot settings and find an option to "Restore Factory Keys" or "Install Default Secure Boot Keys." This will switch the mode from 'Setup' to 'User'.
How to run VALORANT as an administrator?
Right-click on the VALORANT shortcut, go to "Properties," navigate to the "Compatibility" tab, check the box for "Run this program as an administrator," and click "Apply."
How to update my BIOS?
Updating your BIOS requires downloading the latest firmware from your motherboard manufacturer's website and following their specific instructions. It's a more advanced process and should only be done if other solutions fail.
How to troubleshoot if Secure Boot is enabled but the error persists?
First, ensure your Windows 11 installation is up-to-date. You can also try running a System File Checker (SFC) scan and DISM commands to check for corrupted system files. In some cases, reinstalling Vanguard might also help.
How to disable CSM (Compatibility Support Module)?
In your BIOS, typically under the "Boot" or "Boot Configuration" menu, you will find the CSM setting. Disable it to ensure your system is booting in pure UEFI mode, which is required for Secure Boot.
How to check if my PC supports Secure Boot?
In the System Information window (msinfo32), if the "Secure Boot State" says "Unsupported," your PC's hardware or firmware does not support the feature.
