The recent integration of Riot Vanguard, Riot Games' proprietary anti-cheat system, into League of Legends has brought a new requirement for many players: TPM 2.0 (Trusted Platform Module 2.0) and Secure Boot. If you've been hit with a "This build of Vanguard requires TPM version 2.0" or a similar error (like VAN9001) when trying to launch League of Legends, don't worry! You're not alone, and this comprehensive guide will walk you through the steps to enable these crucial security features on your PC, getting you back into Summoner's Rift in no time.
Why is Vanguard Asking for TPM 2.0?
Before we dive into the "how-to," let's quickly understand why this is necessary. TPM 2.0 is a cryptographic processor that provides hardware-level security functions. It helps Windows generate and store cryptographic keys securely, creating a "trusted" environment for your operating system. Secure Boot, on the other hand, is a security standard that ensures your PC only boots using software that is trusted by the OEM (Original Equipment Manufacturer) or motherboard manufacturer.
Riot Vanguard, being a kernel-level anti-cheat, requires this enhanced security posture to function effectively. By ensuring your system is running with TPM 2.0 and Secure Boot enabled, Vanguard can better detect and prevent cheating, creating a fairer playing field for everyone. It essentially makes your PC a more "trusted" environment for the anti-cheat to operate within.
How to Enable Vanguard TPM 2.0 for League of Legends: A Step-by-Step Guide
This guide will cover the process for Windows 10 and 11 users, as these are the primary operating systems affected by the Vanguard requirements. Please note: BIOS interfaces vary greatly between motherboard manufacturers (ASUS, Gigabyte, MSI, Dell, HP, etc.). While the general steps are the same, the exact names and locations of settings might differ. If you're unsure, consult your motherboard's manual or manufacturer's support website.
Let's begin!
Step 1: Engage! First, Let's Check Your Current TPM and Secure Boot Status
Before you go tinkering in your BIOS, it's absolutely crucial to check if TPM 2.0 and Secure Boot are already enabled or if your system even supports them. This will save you a lot of time and potential headaches.
Sub-heading: Checking TPM Status
- Press the Windows Key + R to open the Run dialog box.
- Type
tpm.msc
and press Enter. - A "TPM Management on Local Computer" window will open.
- If you see a message stating, "Compatible TPM could not be found" or similar, it means your system either doesn't have a TPM chip (unlikely for modern PCs, but possible) or it's severely disabled in the BIOS. You'll need to enable it there.
- If you see information about your TPM, check the "Status" section. It should say: "The TPM is ready for use."
- Also, check the "Specification Version." It must be 2.0. If it's 1.2, you might still need to update your BIOS or check if your motherboard supports upgrading to 2.0 (some older systems do not).
Sub-heading: Checking Secure Boot Status
- Press the Windows Key + R to open the Run dialog box.
- Type
msinfo32
and press Enter. This will open the System Information window. - In the left-hand panel, click on "System Summary."
- In the right-hand panel, scroll down and look for "BIOS Mode" and "Secure Boot State."
- "BIOS Mode" should be UEFI. If it's "Legacy" or "CSM," you'll likely need to convert your drive to GPT and enable UEFI in your BIOS. This is a more complex step and might require reinstalling Windows if not done carefully.
- "Secure Boot State" should be On. If it's "Off," you'll need to enable it in your BIOS.
Take note of these findings. This information will guide your next steps. If both TPM 2.0 is "Ready for use" and "Specification Version: 2.0," and Secure Boot State is "On" with BIOS Mode "UEFI," then your issue might lie elsewhere with Vanguard (e.g., VBS conflict, other error codes), and this guide might not be entirely relevant for your specific problem. However, for the majority of users facing the TPM 2.0 error, one or both of these settings will be disabled.
Step 2: Prepare for the BIOS Journey - Entering Your PC's BIOS/UEFI Settings
The most critical part of this process involves making changes in your computer's BIOS (Basic Input/Output System) or UEFI (Unified Extensible Firmware Interface) settings. This is where your computer's hardware configuration is managed. Proceed with caution, as incorrect changes can lead to boot issues.
Sub-heading: Restarting into BIOS
- Save all your work and close any open applications. You're about to restart your computer.
- Restart your PC.
- As your PC begins to restart, you need to repeatedly press a specific key to enter the BIOS/UEFI setup. This key varies by manufacturer:
- Common keys include:
Delete
,F2
,F10
,F12
, orEsc
. - Look closely at your screen during the very first moments of boot-up. You might see a message like "Press DEL to enter Setup" or "Press F2 for BIOS."
- If you miss it, restart and try again.
- Alternatively (for Windows 10/11):
- Go to Settings > Update & Security (Windows 10) or System > Recovery (Windows 11).
- Under "Advanced startup," click "Restart now."
- Your PC will reboot to a blue screen with several options. Select "Troubleshoot" > "Advanced options" > "UEFI Firmware Settings".
- Click "Restart" (if prompted). This method guarantees you'll get into the BIOS.
- Common keys include:
Sub-heading: Navigating the BIOS Interface
Once you're in the BIOS, you'll typically navigate using your keyboard (arrow keys, Enter, Esc). Some newer UEFI BIOS interfaces might allow mouse input. Do not change anything unless you are certain of its purpose.
Step 3: Unlocking Security - Enabling TPM 2.0 (or Intel PTT/AMD fTPM)
Now that you're in the BIOS, it's time to locate and enable the TPM setting. The exact name and location will vary.
Sub-heading: Locating the TPM Setting
- Look for tabs or menus named:
- "Security"
- "Advanced"
- "Trusted Computing"
- "Integrated Peripherals" (sometimes for AMD systems)
- Within these menus, look for options like:
- "TPM"
- "TPM State"
- "Intel Platform Trust Technology (PTT)" (for Intel CPUs)
- "AMD fTPM switch" or "AMD PSP fTPM" (for AMD CPUs)
- "Security Device" or "Security Device Support"
Sub-heading: Enabling TPM 2.0
- Once you've found the relevant setting, select it and change its status to "Enabled" or "Auto" (if available and recommended by your manufacturer).
- Crucially, ensure it specifically refers to TPM 2.0 if there's an option for version selection. Many modern motherboards default to 2.0 when enabled, but it's good to double-check.
Step 4: Bolstering Defenses - Enabling Secure Boot
After enabling TPM, the next critical step is to enable Secure Boot. This often goes hand-in-hand with TPM for Vanguard's requirements.
Sub-heading: Locating the Secure Boot Setting
- Navigate to tabs or menus often labeled:
- "Boot"
- "Security"
- "Authentication"
- "Boot Options"
- Within these, look for "Secure Boot".
Sub-heading: Enabling Secure Boot
- Select the "Secure Boot" option. It will likely be set to "Disabled." Change it to "Enabled."
- Important considerations:
- If you find a "Secure Boot Mode" option, set it to "Standard" or "Windows UEFI Mode." Avoid "Custom" unless you know what you're doing.
- You might also need to look for options like "OS Type" and ensure it's set to "Windows UEFI Mode" or "UEFI."
- Some motherboards require you to "Restore Factory Keys" or "Install Default Secure Boot Keys" before you can enable Secure Boot. If you see this option and Secure Boot isn't enabling, try this.
Step 5: Sealing the Changes - Saving and Exiting BIOS
Once you've enabled both TPM 2.0 and Secure Boot, you must save your changes and exit the BIOS.
- Look for an option like "Save & Exit," "Exit Saving Changes," or similar. This is often accessible by pressing a specific function key (e.g.,
F10
). - Confirm your decision to save and exit when prompted.
- Your computer will now restart.
Step 6: Verification is Key! - Confirming Changes in Windows
After your PC reboots, it's vital to confirm that your changes have taken effect.
Sub-heading: Re-checking TPM Status
- Once Windows has fully loaded, press Windows Key + R, type
tpm.msc
, and press Enter. - Verify that the "Status" now says "The TPM is ready for use" and the "Specification Version" is 2.0.
Sub-heading: Re-checking Secure Boot Status
- Press Windows Key + R, type
msinfo32
, and press Enter. - Navigate to "System Summary."
- Confirm that "BIOS Mode" is "UEFI" and "Secure Boot State" is "On."
If both these checks pass successfully, congratulations! You have successfully enabled TPM 2.0 and Secure Boot on your system.
Step 7: The Moment of Truth - Launching League of Legends
Now, it's time to launch League of Legends. If all steps were followed correctly and your system supports these features, Vanguard should now be happy, and you should be able to enter the game without encountering the TPM 2.0 error.
If you still encounter issues, please refer to the FAQ section and consider contacting Riot Games Support, as there might be other underlying compatibility problems or a unique configuration on your system.
10 Related FAQ Questions
Here are 10 frequently asked questions, starting with "How to," along with their quick answers, to further assist you with Vanguard, TPM 2.0, and League of Legends:
How to check if my PC supports TPM 2.0?
You can check by pressing Windows Key + R, typing tpm.msc
, and pressing Enter. If a TPM is found, check its "Specification Version" (it needs to be 2.0). If you get an error message, your system likely doesn't have a TPM or it's completely disabled.
How to find my motherboard's BIOS key?
The key to enter BIOS varies by manufacturer. Common keys are Delete
, F2
, F10
, F12
, or Esc
. It's usually displayed on the screen during the initial boot-up, or you can check your motherboard's manual or the manufacturer's website.
How to switch from Legacy BIOS to UEFI mode?
This is a more involved process. You generally need to convert your drive from MBR (Master Boot Record) to GPT (GUID Partition Table) format, then enable UEFI mode in your BIOS. Incorrectly doing this can lead to data loss or your system not booting. It's often safer to perform a clean installation of Windows in UEFI mode if you're not comfortable with disk management tools.
How to resolve the VAN9001 error in League of Legends?
The VAN9001 error specifically indicates that TPM 2.0 is not enabled. Follow the steps in this guide to enable TPM 2.0 and Secure Boot in your BIOS.
How to disable Virtualization-Based Security (VBS) if it conflicts with Vanguard?
While enabling TPM and Secure Boot is usually the primary fix, some users experience issues with VBS. You can check VBS status by typing msinfo32
in the Run dialog and looking for "Virtualization-based security." If it's "Running," you can try disabling "Memory Integrity" in Windows Security (Device Security > Core isolation) and restarting your PC. For more advanced control, you might need to use Group Policy Editor or Registry Editor.
How to update my BIOS firmware?
Updating your BIOS is a delicate process that varies by motherboard manufacturer. You typically download the latest BIOS file from your motherboard's support website, often copy it to a USB drive, and then use a specific utility within your BIOS to perform the update. Always follow your manufacturer's instructions precisely.
How to factory reset Secure Boot keys if I mess them up?
In your BIOS settings, usually under the Secure Boot or Security tab, there's often an option to "Restore Factory Keys" or "Install Default Secure Boot Keys." This can help if you've inadvertently changed or corrupted the Secure Boot keys.
How to tell if Riot Vanguard is running?
When Riot Vanguard is active, you'll typically see its small shield-shaped icon in your system tray (the area near the clock on your Windows taskbar).
How to troubleshoot if League of Legends still gives Vanguard errors after enabling TPM 2.0 and Secure Boot?
If you've enabled both features and still face issues, consider these:
- Restart your PC and the Riot Client multiple times.
- Ensure Windows is fully updated.
- Check for other Vanguard error codes (e.g., VAN 1067, VAN 128) and search for their specific solutions on Riot Games support.
- Temporarily disable any third-party antivirus or firewall software to see if there's a conflict.
- As a last resort, consider a clean reinstallation of both League of Legends and Riot Vanguard.
How to contact Riot Games Support for further assistance?
If all else fails, the best course of action is to contact Riot Games Support directly. You can usually find a "Submit a Ticket" option on their official support websites for League of Legends or Valorant. Provide them with detailed information about your system, the error messages you're receiving, and the steps you've already taken.