Facing the "This version of Vanguard requires UEFI Secure Boot" error can be frustrating, especially when you're hyped to jump into a game of Valorant. This error typically means that Riot Games' anti-cheat software, Vanguard, requires certain security features to be enabled on your PC to ensure a fair and secure gaming environment. Don't worry, this isn't a complex issue that requires an IT degree to solve! This comprehensive guide will walk you through the process of enabling UEFI Secure Boot (and often, TPM 2.0, which goes hand-in-hand) step-by-step. Let's get you back into the action!
Hello, Future Valorant Champion! Are you ready to conquer this error and dominate the battlefield?
Before we dive into the technicalities, let's understand why this is happening. Valorant, like many modern games with robust anti-cheat systems, leverages Windows 11's enhanced security features. UEFI Secure Boot and TPM 2.0 (Trusted Platform Module) are key components of this. Secure Boot essentially ensures that only trusted software loads during your PC's startup, preventing malicious programs from tampering with your system. TPM 2.0 provides hardware-based security for cryptographic keys and other sensitive data. Vanguard needs these enabled to verify your PC is a secure and untampered environment.
Let's get started!
A Step-by-Step Guide to Enabling UEFI Secure Boot for Valorant
Step 1: Check Your Current Secure Boot and BIOS Mode Status
First things first, let's confirm whether Secure Boot is indeed disabled and if your system is running in UEFI mode. This will help us understand the scope of changes needed.
Sub-heading: Using System Information (msinfo32)
- Open the Run dialog: Press
Windows Key + Ron your keyboard. - Type
msinfo32: In the Run dialog box, typemsinfo32and pressEnter. This will open the System Information window. - Locate "Secure Boot State" and "BIOS Mode": In the System Information window, look for "Secure Boot State" and "BIOS Mode" in the right-hand panel under "System Summary."
- If "Secure Boot State" says "On" and "BIOS Mode" says ***"UEFI"***, then Secure Boot is already enabled and your system is in UEFI mode. In this rare case, the issue might be something else (perhaps a corrupted Vanguard installation or a need to reset Secure Boot keys – we'll cover this later).
- If "Secure Boot State" says "Off" or ***"Unsupported"***, and/or "BIOS Mode" says "Legacy" or ***"CSM"***, then you'll need to proceed with the next steps.
Sub-heading: Using PowerShell (for Secure Boot only)
- Open PowerShell as Administrator: Type "PowerShell" in the Windows search bar, right-click on "Windows PowerShell," and select "Run as administrator."
- Enter the command: Type
Confirm-SecureBootUEFIand pressEnter.- If the output is ***"True"***, Secure Boot is enabled.
- If the output is ***"False"***, Secure Boot is disabled.
- If it says the cmdlet is not supported, your PC might not support Secure Boot, or your system is not in UEFI mode.
Step 2: Access Your BIOS/UEFI Settings
This is where you'll make the necessary changes. Getting into the BIOS (Basic Input/Output System) or UEFI (Unified Extensible Firmware Interface) is a bit like entering your computer's "brain" before Windows even loads.
Sub-heading: The Restart Method (Most Reliable)
- Save your work: Ensure all your open files and applications are saved and closed. You'll be restarting your PC.
- Open Windows Settings: Click the
Startbutton, then click on thecogwheel iconto open Settings. - Navigate to Recovery: Go to
Update & Security(on Windows 10) orSystem(on Windows 11), then selectRecoveryfrom the left-hand sidebar. - Advanced startup: Under the "Advanced startup" section, click on ***"Restart now"***. Your PC will restart and present you with a blue screen of options.
- Choose UEFI Firmware Settings: On the blue screen, select
Troubleshoot>Advanced options>UEFI Firmware Settings. Then click "Restart" again. This will directly boot you into your BIOS/UEFI.
Sub-heading: The Spam-Key Method (Faster, but can be tricky)
- Restart your PC: Simply restart your computer.
- Press the BIOS key repeatedly: As soon as your computer screen turns black and before the Windows logo appears, start pressing your BIOS/UEFI access key repeatedly. The key varies by motherboard manufacturer, but it's commonly one of the following:
Delete (Del)F2F10F12Esc- Pro-tip: If you're unsure, do a quick online search for "BIOS key for [your computer model/motherboard manufacturer]". For example, "BIOS key for Dell XPS 15" or "BIOS key for MSI Z490".
Step 3: Enable UEFI Boot Mode (if necessary)
If your "BIOS Mode" in Step 1 was "Legacy" or "CSM," you'll need to switch to UEFI mode. Secure Boot requires UEFI.
- Navigate to Boot settings: Once in the BIOS/UEFI, use your keyboard's arrow keys (the mouse often doesn't work in BIOS) to navigate to the
Boot,Boot Options, orBoot Configurationsection. The exact naming varies. - Find "Boot Mode" or similar: Look for an option like
Boot Mode,BIOS Mode, orUEFI/Legacy Boot. - Change to UEFI: Set this option to ***"UEFI"***. Make sure it's not set to "Legacy" or "CSM" (Compatibility Support Module).
- Important Note: Changing from Legacy to UEFI can sometimes prevent your existing Windows installation from booting if it's installed on an MBR (Master Boot Record) partitioned drive. If you encounter this, you might need to convert your drive to GPT (GUID Partition Table) or reinstall Windows in UEFI mode. However, for most modern systems, Windows is already installed in UEFI mode, making this step straightforward.
Step 4: Enable Secure Boot
Now for the main event!
- Locate Secure Boot settings: Within your BIOS/UEFI, navigate to the
Boot,Security, orAuthenticationsection. - Find "Secure Boot": Look for an option specifically labeled ***"Secure Boot"***.
- Enable it: Change the setting from "Disabled" to ***"Enabled"***.
- You might see options like "Secure Boot Mode" (set to "Standard" or "Custom"). If given the choice, stick with "Standard" for now.
- Some motherboards might require you to "Install Default Secure Boot Keys" or "Reset to Factory Keys" before enabling Secure Boot. If you see such an option, proceed with it.
Step 5: Enable TPM 2.0 (Trusted Platform Module)
While the error specifically mentions Secure Boot, Vanguard also often requires TPM 2.0. It's a good practice to ensure this is enabled as well.
- Locate TPM settings: This setting is usually found in the
SecurityorAdvancedsection of your BIOS/UEFI. Look for terms like:TPMTrusted Platform ModuleIntel Platform Trust Technology (IPTT)(for Intel CPUs)AMD fTPM switch(for AMD CPUs)Security Device Support
- Enable it: Set the found option to ***"Enabled"***.
Step 6: Save Changes and Exit BIOS/UEFI
You've made the crucial adjustments. Now, save them and let your PC restart.
- Navigate to "Save & Exit": Use your arrow keys to go to the
ExitorSave & Exittab in your BIOS/UEFI. - Save and Exit: Select "Save Changes and Exit" or a similar option. You might be prompted to confirm your changes. Confirm them.
- Restart: Your computer will now restart.
Step 7: Verify Secure Boot and TPM Status in Windows
After your PC reboots, it's a good idea to double-check if the changes were successfully applied.
- Re-check System Information: Repeat Step 1 (using
msinfo32).- "Secure Boot State" should now say ***"On"***.
- "BIOS Mode" should say ***"UEFI"***.
- Check TPM Status:
- Press
Windows Key + R, typetpm.msc, and pressEnter. - In the TPM Management console, the "Status" should say ***"The TPM is ready for use"***. Under "TPM Manufacturer Information," ensure "Specification Version" is
2.0.
- Press
Step 8: Launch Valorant and Enjoy!
With Secure Boot and TPM 2.0 enabled, you should now be able to launch Valorant without encountering the "This version of Vanguard requires UEFI Secure Boot" error.
Advanced Troubleshooting & Additional Tips
If you're still facing issues, consider these advanced steps:
- Update your BIOS/UEFI Firmware: An outdated BIOS can sometimes cause compatibility issues or hide options. Visit your motherboard manufacturer's website (e.g., ASUS, MSI, Gigabyte, Dell, HP, Lenovo) and download the latest BIOS firmware for your exact model. Follow their instructions carefully for updating the BIOS, as an improper update can brick your motherboard.
- Reset Secure Boot Keys: In your BIOS, within the Secure Boot section, you might find an option to "Reset to Factory Keys" or "Install Default Secure Boot Keys." Sometimes, corrupted Secure Boot keys can cause issues. Resetting them can help.
- Ensure Windows is on a GPT Partition Style: If you had to switch from Legacy to UEFI mode and Windows didn't boot, your Windows installation might be on an MBR (Master Boot Record) partitioned drive. Secure Boot requires a GPT (GUID Partition Table) partition style. You can check this in Disk Management (
Win + X, thenDisk Management). If it's MBR, you'll need to convert it to GPT (a complex process that often requires data backup and potentially reinstalling Windows) or reinstall Windows in UEFI mode on a GPT partitioned drive. - Reinstall Riot Vanguard: A corrupted Vanguard installation can also cause errors.
- Go to
Settings>Apps>Apps & features. - Find
Riot VanguardandValorant, thenUninstallboth. - Restart your PC.
- Reinstall Valorant from the official Riot Games website. Vanguard will be reinstalled automatically.
- Go to
- Update Windows: Ensure your Windows operating system is fully up-to-date. Windows updates often include critical security patches and improvements that can resolve compatibility issues.
- Disable CSM (Compatibility Support Module): If you enabled UEFI mode, ensure CSM is disabled in your BIOS. CSM allows your UEFI firmware to emulate a legacy BIOS, which can interfere with Secure Boot.
- Check for conflicting drivers/software: Rarely, other software or outdated drivers might interfere with Vanguard. Ensure all your drivers (especially graphics and chipset) are up-to-date.
10 Related FAQ Questions
How to check if Secure Boot is enabled on my PC?
You can check this by typing msinfo32 in the Windows Run dialog (Win + R) and looking for "Secure Boot State" in the System Information window. It should say "On" if enabled.
How to enter BIOS/UEFI settings?
The most reliable way is to go to Windows Settings > Update & Security (or System) > Recovery > Advanced startup > Restart now, then Troubleshoot > Advanced options > UEFI Firmware Settings > Restart. Alternatively, repeatedly press a specific key (like Del, F2, F10, or F12) during startup.
How to enable UEFI Boot Mode in BIOS?
In your BIOS/UEFI settings, navigate to the "Boot" or "Boot Options" section and find an option like "Boot Mode" or "BIOS Mode." Change it from "Legacy" or "CSM" to "UEFI."
How to enable Secure Boot in BIOS?
Within your BIOS/UEFI, go to the "Boot," "Security," or "Authentication" section. Find the "Secure Boot" option and set it to "Enabled." You might need to set "Secure Boot Mode" to "Standard" or load default Secure Boot keys.
How to enable TPM 2.0 in BIOS?
Look for "TPM," "Trusted Platform Module," "Intel PTT," "AMD fTPM switch," or "Security Device Support" in the "Security" or "Advanced" section of your BIOS/UEFI. Set it to "Enabled."
How to fix a "Secure Boot State: Unsupported" message?
This usually means your motherboard or CPU does not support Secure Boot. Ensure your BIOS mode is set to UEFI and that your system meets the minimum requirements for Secure Boot (which typically includes TPM 2.0 support). If your hardware is very old, it might not be supported.
How to update my BIOS/UEFI firmware?
Visit your motherboard or PC manufacturer's official website, locate your specific model, download the latest BIOS/UEFI firmware, and follow their detailed instructions for updating. This usually involves putting the firmware on a USB drive and updating it from within the BIOS.
How to convert an MBR disk to GPT without data loss?
While there are tools and methods to convert MBR to GPT without data loss (like Microsoft's MBR2GPT tool for Windows 10/11), it's a complex process that carries risks. It is highly recommended to back up all important data before attempting this. Often, a clean reinstallation of Windows in UEFI mode on a GPT partitioned drive is simpler if data backup is feasible.
How to reinstall Riot Vanguard?
You can uninstall Riot Vanguard and Valorant through Settings > Apps > Apps & features. After restarting your PC, simply reinstall Valorant from the official website, and Vanguard will be automatically installed.
How to contact Riot Games Support if the issue persists?
If you've tried all the steps and the error remains, you can visit the official Riot Games Support website. Look for their support portal, and you'll typically find options to submit a ticket, browse FAQs, or engage in live chat support for Valorant and Vanguard issues.
