Here is a very detailed, step-by-step guide on how to fix the Vanguard Secure Boot error.
Are you tired of seeing that pesky error message every time you try to launch VALORANT?
You're all set to drop into a match, but instead of the loading screen, you're greeted with a message from Riot Vanguard, VALORANT's anti-cheat system, saying something like, "This build of Vanguard requires Secure Boot to be enabled in order to play." Don't worry, you're not alone! This is a common issue, especially for players on Windows 11, and it's almost always fixable. The good news is that enabling Secure Boot isn't as scary as it sounds, and it won't harm your computer. It's an essential security feature that helps protect your system, and it's a requirement for VALORANT to ensure a fair and secure gaming environment.
Let's dive right in and get you back into the game!
Step 1: Check Your Secure Boot and BIOS Status
Before you start changing settings in your BIOS, you need to know what your current status is. This will help you determine exactly what needs to be changed.
Press the Windows Key + R to open the Run dialog box.
Type
msinfo32and hit Enter. This will open the System Information window.In the System Summary, look for two crucial entries:
BIOS Mode: This should say UEFI. If it says Legacy, you'll need to convert your disk from MBR to GPT. We'll cover that in a later step.
Secure Boot State: This should say On. If it says Off or Unsupported, you'll need to enable it.
Bonus Check: TPM 2.0 Status
Vanguard also requires TPM (Trusted Platform Module) 2.0. Let's check its status while you're at it.
Press the Windows Key + R again.
Type
tpm.mscand hit Enter.A new window will open. Look at the Status section. If it says, "The TPM is ready for use," you're good to go. If not, you'll need to enable it in your BIOS as well.
Step 2: Prepare Your System for BIOS Changes
Before you venture into the BIOS, it's a good idea to take some precautions.
Backup your important files. While the process is generally safe, it's always wise to have a backup in case anything goes wrong.
Ensure your PC is plugged in or has a full battery. You don't want your computer to shut down in the middle of a BIOS update or configuration change.
Close all open programs. Your computer will be restarting, so save your work and close everything.
Step 3: Enter Your BIOS/UEFI Settings
This is where the magic happens. The method to enter the BIOS varies depending on your motherboard manufacturer.
Restart your computer.
As your computer boots up, repeatedly press the key to enter your BIOS. The most common keys are F2, F10, F12, or Delete. The key will usually be displayed on the screen during the initial boot sequence, so keep an eye out for it.
If you're having trouble catching the key, you can access the BIOS through Windows' Advanced Startup options:
Go to Settings (Windows Key + I).
Navigate to Update & Security (Windows 10) or System > Recovery (Windows 11).
Under "Advanced startup," click on Restart now.
Your PC will reboot into a blue screen with several options.
Navigate to Troubleshoot > Advanced options > UEFI Firmware Settings.
Click Restart if prompted.
Step 4: Enable Secure Boot and TPM 2.0 in the BIOS
Once you're in the BIOS, the layout and menu names will differ depending on your motherboard brand (ASUS, MSI, Gigabyte, etc.), but the general process is the same. You'll typically use your keyboard's arrow keys to navigate.
Sub-heading: First, check your BIOS Mode
If your BIOS Mode was Legacy in Step 1, you need to change it to UEFI.
Look for an option like "Boot Mode," "CSM" (Compatibility Support Module), or "BIOS Mode."
Set it to UEFI and ensure that CSM is disabled.
Important Note: Disabling CSM might prevent your Windows installation from booting if it's installed on a disk with an MBR partition style. You'll need to convert it to GPT first (see the troubleshooting section below).
Sub-heading: Now, enable Secure Boot
Navigate to the Boot, Security, or Authentication tab.
Look for the Secure Boot option.
It might be set to "Disabled" or "Custom." Change it to Enabled.
You may also see an option for "OS Type." Make sure it's set to Windows UEFI mode.
Some motherboards require you to first install the default Secure Boot keys before you can enable it. Look for a "Key Management" or similar option and select "Restore Factory Keys" or "Install Default Secure Boot Keys."
Sub-heading: Next, enable TPM 2.0
Navigate to the Security or Advanced tab.
Look for an option like Trusted Computing, TPM, Intel Platform Trust Technology (PTT), or AMD fTPM switch.
Change the setting to Enabled.
Step 5: Save Changes and Exit
Once you've made all the necessary changes, navigate to the Exit or Save & Exit tab.
Select "Save Changes and Exit" or a similar option. The key for this is often F10.
Confirm the changes when prompted.
Your PC will restart.
Step 6: Verify and Relaunch VALORANT
After your computer boots back into Windows, re-run
msinfo32andtpm.mscto confirm that Secure Boot and TPM 2.0 are now enabled.If both show as "On" and "Ready for use," respectively, you're all set!
Now, try launching VALORANT again. You should be able to play without any issues.
Troubleshooting and Advanced Solutions
My disk is MBR, and I can't enable UEFI/Secure Boot!
This is a common roadblock. Secure Boot requires your Windows installation to be on a disk with a GPT (GUID Partition Table) partition style, not MBR (Master Boot Record).
You can convert your MBR disk to GPT without losing data using a built-in Windows tool called
mbr2gpt.Warning: This is an advanced procedure. Follow the steps precisely.
Open Command Prompt as an administrator (search for
cmd, right-click and select "Run as administrator").Run the command:
mbr2gpt /validate /disk:0 /allowFullOS(replacedisk:0with the correct disk number from Disk Management). This will check if your disk can be converted.If the validation is successful, run the command:
mbr2gpt /convert /disk:0 /allowFullOS.After the conversion, your PC might not boot. You'll need to go back into the BIOS and ensure the Boot Mode is set to UEFI.
My motherboard doesn't have Secure Boot or TPM 2.0 options!
First, check your motherboard's manual or the manufacturer's website to confirm if your board supports these features.
If it does, you might need to update your BIOS firmware.
This is a critical process, so follow your motherboard manufacturer's instructions exactly to avoid bricking your motherboard.
The error persists even after enabling Secure Boot and TPM!
Try reinstalling Riot Vanguard. You can do this through "Apps & features" in Windows Settings.
Run the game as an administrator. Right-click on the VALORANT icon and select "Run as administrator." You can also set this as a permanent property in the shortcut's compatibility settings.
Ensure your Windows operating system is fully up to date.
10 Related FAQ Questions
How to check if my PC supports Secure Boot?
You can check if your PC supports Secure Boot by opening the System Information window (msinfo32) and looking at the "Secure Boot State" and "BIOS Mode" values. If the BIOS Mode is UEFI and the Secure Boot State is Off, it means your PC supports it but it's disabled. If it says "Unsupported," your hardware doesn't support it.
How to change my BIOS Mode from Legacy to UEFI?
To change your BIOS Mode, you need to enter the BIOS/UEFI settings (usually by pressing a key like F2, F10, F12, or Del during startup). In the BIOS, find the "Boot" or "Boot Options" menu and change the setting for "Boot Mode" or "CSM" to UEFI.
How to convert my disk from MBR to GPT?
You can convert your disk from MBR to GPT using the mbr2gpt tool in an administrative Command Prompt. First, validate the disk with mbr2gpt /validate /disk:0, and if it passes, convert it with mbr2gpt /convert /disk:0.
How to access BIOS/UEFI settings without restarting?
You can access the BIOS from within Windows by going to Settings > Update & Security > Recovery (Windows 10) or System > Recovery (Windows 11), and then clicking "Restart now" under "Advanced startup." This will take you to a menu where you can select "UEFI Firmware Settings."
How to enable TPM 2.0 in the BIOS?
In your BIOS settings, navigate to the "Security" or "Advanced" tab. Look for an option like "Trusted Computing," "TPM," "PTT," or "fTPM" and set it to Enabled.
How to update my motherboard's BIOS?
Updating your BIOS requires downloading the latest firmware from your motherboard manufacturer's website. The process is specific to each board, so follow the provided instructions carefully, which often involves using a USB drive.
How to know which key to press to enter BIOS?
The key to enter BIOS is usually displayed on the screen during the first few seconds of booting up. Common keys are F2, F10, F12, or Delete. If you miss it, you can look it up in your motherboard's manual or on the manufacturer's website.
How to reinstall Riot Vanguard?
You can uninstall Riot Vanguard through Windows Settings by going to "Apps & features" or "Add or remove programs." Find "Riot Vanguard" in the list, click on it, and select "Uninstall." Then, simply relaunch VALORANT, and it will prompt you to reinstall the anti-cheat.
How to run VALORANT as an administrator permanently?
Right-click on the VALORANT shortcut, go to "Properties," and then to the "Compatibility" tab. Check the box that says "Run this program as an administrator" and click "Apply."
How to reset Secure Boot keys?
In your BIOS's Secure Boot settings, you may find an option for "Key Management." Within that menu, you can select an option to "Restore Factory Keys" or "Install Default Secure Boot Keys," which resets the keys to the default values.
