How To Fix This Version Of Vanguard Requires Tpm 2.0

People are currently reading this guide.

"This build of Vanguard requires TPM 2.0 and Secure Boot to be enabled." If you're a Valorant player, seeing this message pop up can be incredibly frustrating. It stops you dead in your tracks, preventing you from diving into the tactical shooter action. But don't despair! This isn't an insurmountable hurdle. It's a security measure put in place by Riot Games to combat cheating and ensure a fairer gaming environment.

So, what exactly are TPM 2.0 and Secure Boot, and why does Valorant need them?

Trusted Platform Module (TPM) 2.0: Imagine a tiny, highly secure chip embedded in your computer's motherboard. That's essentially what a TPM is. It acts as a secure cryptoprocessor, storing cryptographic keys, passwords, and digital certificates. For Valorant, specifically its anti-cheat system Vanguard, TPM 2.0 helps verify the integrity of your system and makes it much harder for malicious software (like cheats) to operate undetected. It essentially creates a "trusted" environment for the game to run in.
Secure Boot: This is a security feature within your computer's UEFI (Unified Extensible Firmware Interface) firmware. UEFI is the modern successor to the traditional BIOS. Secure Boot ensures that only trusted software is loaded during the system startup process. It prevents unauthorized operating systems or malicious rootkits from loading before your main OS, further enhancing system security. Riot Games leverages this to prevent cheats from injecting themselves early in the boot process.

Together, TPM 2.0 and Secure Boot create a robust security foundation that makes it significantly more challenging for cheaters to compromise the game. While it might seem like an extra hoop to jump through, it's ultimately for the benefit of all legitimate players.

Now, let's get down to business and fix this so you can get back to clutching those rounds!

A Step-by-Step Guide to Fixing the "TPM 2.0 and Secure Boot" Error for Valorant

Are you ready to banish that pesky error and jump back into your favorite game? Let's get started!

Step 1: Check Your Current TPM and Secure Boot Status

Before we dive into the BIOS, let's first confirm if TPM 2.0 and Secure Boot are indeed disabled on your system. This will help us pinpoint the exact issues we need to address.

Sub-heading: Checking TPM Status
1. Open the Run dialog box: Press the Windows key + R on your keyboard.
2. Type tpm.msc: In the Run dialog box, type tpm.msc and press Enter.
3. Review the TPM Management window: A new window titled "TPM Management on Local Computer" will appear.
  - If you see "The TPM is ready for use" under the Status section, and the "Specification Version" under "TPM Manufacturer Information" is 2.0, then your TPM is already enabled and up to date. You can skip the TPM enabling steps and move to checking Secure Boot.
  - If it says "Compatible TPM cannot be found" or the "Specification Version" is less than 2.0, then you'll need to enable or update your TPM.
Sub-heading: Checking Secure Boot Status
1. Open System Information: Press the Windows key + R again, type msinfo32, and press Enter.
2. Locate "Secure Boot State" and "BIOS Mode": In the System Information window, look for these two entries.
  - If "Secure Boot State" says "On" and "BIOS Mode" says "UEFI", then Secure Boot is enabled and configured correctly. You might only need to focus on the TPM.
  - If "Secure Boot State" says "Off" or "BIOS Mode" says "Legacy" (or "CSM Mode"), then you'll need to enable Secure Boot and potentially convert your drive to GPT if you're on Windows 10/11.

Step 2: Access Your BIOS/UEFI Settings

This is where the real magic happens. Enabling TPM and Secure Boot usually requires entering your computer's BIOS or UEFI settings.

Sub-heading: Restarting and Pressing the Key
1. Restart your PC: Save any open work and restart your computer.
2. Press the BIOS/UEFI access key repeatedly: As your PC starts up and you see the manufacturer's logo (Dell, HP, Lenovo, ASUS, MSI, etc.), you'll need to repeatedly press a specific key to enter the BIOS/UEFI settings. This key varies by manufacturer but is commonly one of the following:
  - Del or Delete (most common for desktops)
  - F2 (common for laptops)
  - F10
  - F12
  - Esc
  - Pro-Tip: If you're unsure which key to press, a quick search for "[Your Laptop/Motherboard Brand] BIOS key" will usually give you the answer.
Sub-heading: Alternative Method for Windows 10/11 (if direct key press fails)
1. Go to Settings: Click the Start button, then click the Gear icon (Settings).
2. Navigate to Recovery: Go to Update & Security (Windows 10) or System (Windows 11), then select Recovery from the left-hand menu.
3. Choose Advanced Startup: Under "Advanced startup," click Restart now.
4. Troubleshoot and UEFI Firmware Settings: Your PC will restart to a blue screen with several options. Select Troubleshoot > Advanced options > UEFI Firmware Settings.
5. Restart: Click Restart again. This will directly boot you into your UEFI firmware settings.

Step 3: Enable TPM 2.0 in BIOS/UEFI

Once you're in the BIOS/UEFI, the exact location of the TPM setting can vary significantly depending on your motherboard manufacturer. Don't worry if it's not exactly where we describe, just look for similar names.

Sub-heading: Locating the TPM Setting
1. Navigate to the Security or Advanced Tab: Use your keyboard's arrow keys (the mouse might not work in BIOS) to navigate through the menu tabs. Look for tabs like Security, Advanced, Boot, or Peripherals.
2. Find TPM/PTT/fTPM: Within these tabs, look for options related to:
  - TPM (Trusted Platform Module)
  - Intel Platform Trust Technology (Intel PTT) if you have an Intel CPU.
  - AMD fTPM switch or Firmware TPM if you have an AMD CPU.
  - Security Device Support
Sub-heading: Enabling the TPM
1. Change the setting to "Enabled": Select the TPM-related option and change its status from Disabled to Enabled.
2. Confirm (if prompted): Some BIOS versions might ask for confirmation. Select Yes or OK.

Step 4: Enable Secure Boot in BIOS/UEFI

Just like TPM, the Secure Boot option's location can vary.

Sub-heading: Locating Secure Boot
1. Go to the Boot or Security Tab: Navigate to the Boot tab or the Security tab.
2. Find "Secure Boot": Look for an option explicitly labeled Secure Boot.
Sub-heading: Configuring and Enabling Secure Boot
1. Set BIOS Mode to UEFI: Crucially, for Secure Boot to function, your BIOS Mode must be set to UEFI. If it's currently on Legacy or CSM Mode, you'll need to change it to UEFI.
  - Important Note: If your Windows installation is on an MBR (Master Boot Record) partition, switching to UEFI will prevent your system from booting. You might need to convert your drive to GPT (GUID Partition Table) before enabling UEFI. For most modern Windows 10/11 installations, this is already GPT. You can check this in Disk Management (right-click Start -> Disk Management, then right-click your OS drive, go to Properties -> Volumes tab).
2. Enable Secure Boot: Once UEFI mode is confirmed, change the Secure Boot setting to Enabled.
3. Key Management (if applicable): Some motherboards might have a "Key Management" or "Restore Factory Keys" option within Secure Boot. If you encounter this, try restoring factory keys or ensuring standard mode is selected. This helps ensure that the necessary keys for secure booting are present.

Step 5: Save Changes and Exit BIOS/UEFI

Save and Exit: After making all the necessary changes, find the "Save and Exit" option. This is often found on the Exit tab.
Confirm Save: You'll likely be prompted to confirm that you want to save the configuration changes. Select Yes or OK.
Reboot: Your computer will now reboot.

Step 6: Verify TPM and Secure Boot (Again!)

After your PC restarts, it's a good idea to quickly re-verify that the settings stuck.

Re-check TPM: Follow the steps in "Step 1: Check Your Current TPM and Secure Boot Status" to confirm that tpm.msc shows "The TPM is ready for use" and "Specification Version" is 2.0.
Re-check Secure Boot: Follow the steps in "Step 1: Check Your Current TPM and Secure Boot Status" to confirm that msinfo32 shows "Secure Boot State" as On and "BIOS Mode" as UEFI.

Step 7: Launch Valorant!

With TPM 2.0 and Secure Boot enabled, you should now be able to launch Valorant without encountering the "This build of Vanguard requires TPM 2.0 and Secure Boot" error.

If you still face issues, consider restarting your PC one more time, and then trying to launch Valorant. Sometimes, a fresh reboot helps Riot Vanguard correctly detect the changes.

Troubleshooting Tips if the Issue Persists

Update Windows: Ensure your Windows operating system is fully updated. Go to Settings > Update & Security (Windows 10) or Windows Update (Windows 11) and click Check for updates.
Update Motherboard BIOS/UEFI Firmware: An outdated BIOS/UEFI might not fully support TPM 2.0 or Secure Boot, or might have bugs. Visit your motherboard manufacturer's website and download the latest firmware for your specific model. Be extremely careful when updating BIOS, as an incorrect update can brick your motherboard. Follow the manufacturer's instructions precisely.
Reinstall Riot Vanguard: Sometimes, a corrupted Vanguard installation can cause issues.
1. Go to Settings > Apps > Apps & features.
2. Find Riot Vanguard and Valorant.
3. Uninstall Riot Vanguard first, then Valorant.
4. Restart your computer.
5. Reinstall Valorant (which will also reinstall Vanguard).
Disable Virtualization-Based Security (VBS): While less common for TPM 2.0 errors, VBS can sometimes conflict with Vanguard.
1. Search for "Core isolation" in the Windows search bar and open it.
2. Turn off "Memory integrity" if it's enabled.
3. Restart your PC.
Contact Riot Games Support: If you've tried everything and the issue persists, your best bet is to reach out to Riot Games Support. Provide them with detailed information about your system and the steps you've already taken. They have dedicated tools to diagnose and help with Vanguard-related issues.

Frequently Asked Questions (FAQs)

How to check if my PC supports TPM 2.0?

You can check this by pressing Windows key + R, typing tpm.msc, and pressing Enter. In the "TPM Management on Local Computer" window, look for "Specification Version." If it's 2.0, your PC supports it. If you don't see a "Security processor" section or it says "Compatible TPM cannot be found," your TPM might be disabled or not present.

How to enable TPM 2.0 if it's disabled?

You need to restart your PC and enter your BIOS/UEFI settings (usually by pressing Del or F2 during startup). Look for settings related to "TPM," "PTT" (for Intel), or "fTPM" (for AMD) under the "Security" or "Advanced" tabs, and enable them. Save and exit the BIOS.

How to enable Secure Boot in BIOS/UEFI?

Restart your PC and enter BIOS/UEFI settings. Navigate to the "Boot" or "Security" tab. Ensure "BIOS Mode" is set to "UEFI" (not "Legacy" or "CSM Mode"). Then, find the "Secure Boot" option and set it to "Enabled." Save and exit.

How to convert my MBR disk to GPT for UEFI/Secure Boot?

This is an advanced step and requires caution. Windows 10/11 has a built-in tool called MBR2GPT.exe that can convert your OS drive from MBR to GPT without data loss. You'll need to run this from a Windows Recovery Environment. Always back up your data before attempting this.

How to update my motherboard's BIOS/UEFI firmware?

Visit your motherboard manufacturer's official website, locate your specific motherboard model, and download the latest BIOS/UEFI firmware. Follow their provided instructions carefully, as the process varies.

How to know if my Windows is running in UEFI mode?

Press Windows key + R, type msinfo32, and press Enter. In the System Information window, look for "BIOS Mode." It should say "UEFI."

How to reinstall Riot Vanguard?

Go to Settings > Apps > Apps & features, find "Riot Vanguard" and uninstall it. Then, find "Valorant" and uninstall it. Restart your PC and reinstall Valorant; Vanguard will be reinstalled automatically.

How to disable Virtualization-Based Security (VBS)?

Search for "Core isolation" in the Windows search bar and open it. If "Memory integrity" is toggled on, turn it off. Restart your computer for the changes to take effect.

How to contact Valorant/Riot Games support?

You can visit the official Valorant Support website (support-valorant.riotgames.com) and submit a ticket. Provide as much detail as possible about your issue and the troubleshooting steps you've already taken.

How to find my motherboard model?

Press Windows key + R, type msinfo32, and press Enter. In the System Information window, look for "BaseBoard Manufacturer" and "BaseBoard Product" for your motherboard details.

2267240520183510319