"This build of Vanguard requires TPM 2.0 and Secure Boot to be enabled." If you're a Valorant player, seeing this message pop up can be incredibly frustrating. It stops you dead in your tracks, preventing you from diving into the tactical shooter action. But don't despair! This isn't an insurmountable hurdle. It's a security measure put in place by Riot Games to combat cheating and ensure a fairer gaming environment.
So, what exactly are TPM 2.0 and Secure Boot, and why does Valorant need them?
- Trusted Platform Module (TPM) 2.0: Imagine a tiny, highly secure chip embedded in your computer's motherboard. That's essentially what a TPM is. It acts as a secure cryptoprocessor, storing cryptographic keys, passwords, and digital certificates. For Valorant, specifically its anti-cheat system Vanguard, TPM 2.0 helps verify the integrity of your system and makes it much harder for malicious software (like cheats) to operate undetected. It essentially creates a "trusted" environment for the game to run in.
- Secure Boot: This is a security feature within your computer's UEFI (Unified Extensible Firmware Interface) firmware. UEFI is the modern successor to the traditional BIOS. Secure Boot ensures that only trusted software is loaded during the system startup process. It prevents unauthorized operating systems or malicious rootkits from loading before your main OS, further enhancing system security. Riot Games leverages this to prevent cheats from injecting themselves early in the boot process.
Together, TPM 2.0 and Secure Boot create a robust security foundation that makes it significantly more challenging for cheaters to compromise the game. While it might seem like an extra hoop to jump through, it's ultimately for the benefit of all legitimate players.
Now, let's get down to business and fix this so you can get back to clutching those rounds!
A Step-by-Step Guide to Fixing the "TPM 2.0 and Secure Boot" Error for Valorant
Are you ready to banish that pesky error and jump back into your favorite game? Let's get started!
Step 1: Check Your Current TPM and Secure Boot Status
Before we dive into the BIOS, let's first confirm if TPM 2.0 and Secure Boot are indeed disabled on your system. This will help us pinpoint the exact issues we need to address.
- Sub-heading: Checking TPM Status
- Open the Run dialog box: Press the
Windows key + R
on your keyboard. - Type
tpm.msc
: In the Run dialog box, typetpm.msc
and pressEnter
. - Review the TPM Management window: A new window titled "TPM Management on Local Computer" will appear.
- If you see "The TPM is ready for use" under the Status section, and the "Specification Version" under "TPM Manufacturer Information" is 2.0, then your TPM is already enabled and up to date. You can skip the TPM enabling steps and move to checking Secure Boot.
- If it says "Compatible TPM cannot be found" or the "Specification Version" is less than 2.0, then you'll need to enable or update your TPM.
- Open the Run dialog box: Press the
- Sub-heading: Checking Secure Boot Status
- Open System Information: Press the
Windows key + R
again, typemsinfo32
, and pressEnter
. - Locate "Secure Boot State" and "BIOS Mode": In the System Information window, look for these two entries.
- If "Secure Boot State" says "On" and "BIOS Mode" says "UEFI", then Secure Boot is enabled and configured correctly. You might only need to focus on the TPM.
- If "Secure Boot State" says "Off" or "BIOS Mode" says "Legacy" (or "CSM Mode"), then you'll need to enable Secure Boot and potentially convert your drive to GPT if you're on Windows 10/11.
- Open System Information: Press the
Step 2: Access Your BIOS/UEFI Settings
This is where the real magic happens. Enabling TPM and Secure Boot usually requires entering your computer's BIOS or UEFI settings.
- Sub-heading: Restarting and Pressing the Key
- Restart your PC: Save any open work and restart your computer.
- Press the BIOS/UEFI access key repeatedly: As your PC starts up and you see the manufacturer's logo (Dell, HP, Lenovo, ASUS, MSI, etc.), you'll need to repeatedly press a specific key to enter the BIOS/UEFI settings. This key varies by manufacturer but is commonly one of the following:
Del
orDelete
(most common for desktops)F2
(common for laptops)F10
F12
Esc
- Pro-Tip: If you're unsure which key to press, a quick search for "[Your Laptop/Motherboard Brand] BIOS key" will usually give you the answer.
- Sub-heading: Alternative Method for Windows 10/11 (if direct key press fails)
- Go to Settings: Click the
Start
button, then click theGear icon
(Settings). - Navigate to Recovery: Go to
Update & Security
(Windows 10) orSystem
(Windows 11), then selectRecovery
from the left-hand menu. - Choose Advanced Startup: Under "Advanced startup," click
Restart now
. - Troubleshoot and UEFI Firmware Settings: Your PC will restart to a blue screen with several options. Select
Troubleshoot
>Advanced options
>UEFI Firmware Settings
. - Restart: Click
Restart
again. This will directly boot you into your UEFI firmware settings.
- Go to Settings: Click the
Step 3: Enable TPM 2.0 in BIOS/UEFI
Once you're in the BIOS/UEFI, the exact location of the TPM setting can vary significantly depending on your motherboard manufacturer. Don't worry if it's not exactly where we describe, just look for similar names.
- Sub-heading: Locating the TPM Setting
- Navigate to the Security or Advanced Tab: Use your keyboard's arrow keys (the mouse might not work in BIOS) to navigate through the menu tabs. Look for tabs like
Security
,Advanced
,Boot
, orPeripherals
. - Find TPM/PTT/fTPM: Within these tabs, look for options related to:
TPM (Trusted Platform Module)
Intel Platform Trust Technology (Intel PTT)
if you have an Intel CPU.AMD fTPM switch
orFirmware TPM
if you have an AMD CPU.Security Device Support
- Navigate to the Security or Advanced Tab: Use your keyboard's arrow keys (the mouse might not work in BIOS) to navigate through the menu tabs. Look for tabs like
- Sub-heading: Enabling the TPM
- Change the setting to "Enabled": Select the TPM-related option and change its status from
Disabled
toEnabled
. - Confirm (if prompted): Some BIOS versions might ask for confirmation. Select
Yes
orOK
.
- Change the setting to "Enabled": Select the TPM-related option and change its status from
Step 4: Enable Secure Boot in BIOS/UEFI
Just like TPM, the Secure Boot option's location can vary.
- Sub-heading: Locating Secure Boot
- Go to the Boot or Security Tab: Navigate to the
Boot
tab or theSecurity
tab. - Find "Secure Boot": Look for an option explicitly labeled
Secure Boot
.
- Go to the Boot or Security Tab: Navigate to the
- Sub-heading: Configuring and Enabling Secure Boot
- Set BIOS Mode to UEFI: Crucially, for Secure Boot to function, your BIOS Mode must be set to
UEFI
. If it's currently onLegacy
orCSM Mode
, you'll need to change it toUEFI
.- Important Note: If your Windows installation is on an MBR (Master Boot Record) partition, switching to UEFI will prevent your system from booting. You might need to convert your drive to GPT (GUID Partition Table) before enabling UEFI. For most modern Windows 10/11 installations, this is already GPT. You can check this in
Disk Management
(right-click Start -> Disk Management, then right-click your OS drive, go to Properties -> Volumes tab).
- Important Note: If your Windows installation is on an MBR (Master Boot Record) partition, switching to UEFI will prevent your system from booting. You might need to convert your drive to GPT (GUID Partition Table) before enabling UEFI. For most modern Windows 10/11 installations, this is already GPT. You can check this in
- Enable Secure Boot: Once UEFI mode is confirmed, change the Secure Boot setting to
Enabled
. - Key Management (if applicable): Some motherboards might have a "Key Management" or "Restore Factory Keys" option within Secure Boot. If you encounter this, try restoring factory keys or ensuring standard mode is selected. This helps ensure that the necessary keys for secure booting are present.
- Set BIOS Mode to UEFI: Crucially, for Secure Boot to function, your BIOS Mode must be set to
Step 5: Save Changes and Exit BIOS/UEFI
- Save and Exit: After making all the necessary changes, find the "Save and Exit" option. This is often found on the
Exit
tab. - Confirm Save: You'll likely be prompted to confirm that you want to save the configuration changes. Select
Yes
orOK
. - Reboot: Your computer will now reboot.
Step 6: Verify TPM and Secure Boot (Again!)
After your PC restarts, it's a good idea to quickly re-verify that the settings stuck.
- Re-check TPM: Follow the steps in "Step 1: Check Your Current TPM and Secure Boot Status" to confirm that
tpm.msc
shows "The TPM is ready for use" and "Specification Version" is2.0
. - Re-check Secure Boot: Follow the steps in "Step 1: Check Your Current TPM and Secure Boot Status" to confirm that
msinfo32
shows "Secure Boot State" asOn
and "BIOS Mode" asUEFI
.
Step 7: Launch Valorant!
With TPM 2.0 and Secure Boot enabled, you should now be able to launch Valorant without encountering the "This build of Vanguard requires TPM 2.0 and Secure Boot" error.
- If you still face issues, consider restarting your PC one more time, and then trying to launch Valorant. Sometimes, a fresh reboot helps Riot Vanguard correctly detect the changes.
Troubleshooting Tips if the Issue Persists
- Update Windows: Ensure your Windows operating system is fully updated. Go to
Settings
>Update & Security
(Windows 10) orWindows Update
(Windows 11) and clickCheck for updates
. - Update Motherboard BIOS/UEFI Firmware: An outdated BIOS/UEFI might not fully support TPM 2.0 or Secure Boot, or might have bugs. Visit your motherboard manufacturer's website and download the latest firmware for your specific model. Be extremely careful when updating BIOS, as an incorrect update can brick your motherboard. Follow the manufacturer's instructions precisely.
- Reinstall Riot Vanguard: Sometimes, a corrupted Vanguard installation can cause issues.
- Go to
Settings
>Apps
>Apps & features
. - Find
Riot Vanguard
andValorant
. - Uninstall
Riot Vanguard
first, thenValorant
. - Restart your computer.
- Reinstall Valorant (which will also reinstall Vanguard).
- Go to
- Disable Virtualization-Based Security (VBS): While less common for TPM 2.0 errors, VBS can sometimes conflict with Vanguard.
- Search for "Core isolation" in the Windows search bar and open it.
- Turn off "Memory integrity" if it's enabled.
- Restart your PC.
- Contact Riot Games Support: If you've tried everything and the issue persists, your best bet is to reach out to Riot Games Support. Provide them with detailed information about your system and the steps you've already taken. They have dedicated tools to diagnose and help with Vanguard-related issues.
Frequently Asked Questions (FAQs)
How to check if my PC supports TPM 2.0?
You can check this by pressing Windows key + R
, typing tpm.msc
, and pressing Enter
. In the "TPM Management on Local Computer" window, look for "Specification Version." If it's 2.0, your PC supports it. If you don't see a "Security processor" section or it says "Compatible TPM cannot be found," your TPM might be disabled or not present.
How to enable TPM 2.0 if it's disabled?
You need to restart your PC and enter your BIOS/UEFI settings (usually by pressing Del
or F2
during startup). Look for settings related to "TPM," "PTT" (for Intel), or "fTPM" (for AMD) under the "Security" or "Advanced" tabs, and enable them. Save and exit the BIOS.
How to enable Secure Boot in BIOS/UEFI?
Restart your PC and enter BIOS/UEFI settings. Navigate to the "Boot" or "Security" tab. Ensure "BIOS Mode" is set to "UEFI" (not "Legacy" or "CSM Mode"). Then, find the "Secure Boot" option and set it to "Enabled." Save and exit.
How to convert my MBR disk to GPT for UEFI/Secure Boot?
This is an advanced step and requires caution. Windows 10/11 has a built-in tool called MBR2GPT.exe
that can convert your OS drive from MBR to GPT without data loss. You'll need to run this from a Windows Recovery Environment. Always back up your data before attempting this.
How to update my motherboard's BIOS/UEFI firmware?
Visit your motherboard manufacturer's official website, locate your specific motherboard model, and download the latest BIOS/UEFI firmware. Follow their provided instructions carefully, as the process varies.
How to know if my Windows is running in UEFI mode?
Press Windows key + R
, type msinfo32
, and press Enter
. In the System Information window, look for "BIOS Mode." It should say "UEFI."
How to reinstall Riot Vanguard?
Go to Settings
> Apps
> Apps & features
, find "Riot Vanguard" and uninstall it. Then, find "Valorant" and uninstall it. Restart your PC and reinstall Valorant; Vanguard will be reinstalled automatically.
How to disable Virtualization-Based Security (VBS)?
Search for "Core isolation" in the Windows search bar and open it. If "Memory integrity" is toggled on, turn it off. Restart your computer for the changes to take effect.
How to contact Valorant/Riot Games support?
You can visit the official Valorant Support website (support-valorant.riotgames.com) and submit a ticket. Provide as much detail as possible about your issue and the troubleshooting steps you've already taken.
How to find my motherboard model?
Press Windows key + R
, type msinfo32
, and press Enter
. In the System Information window, look for "BaseBoard Manufacturer" and "BaseBoard Product" for your motherboard details.