Hey there, gamer! Are you getting that pesky "This version of Vanguard requires UEFI Secure Boot to be enabled in order to play" error when you try to launch your favorite Riot Games title like Valorant or League of Legends? Don't worry, you're not alone! Many players encounter this, especially on Windows 11 systems.
The good news is, enabling Secure Boot for Vanguard is a straightforward process once you know where to look. This comprehensive guide will walk you through it step-by-step, ensuring you can jump back into the action without a hitch. Let's get your system ready for battle!
Understanding Vanguard and Secure Boot: Why Is This Necessary?
Before we dive into the technicalities, let's understand why Vanguard, Riot Games' anti-cheat system, insists on Secure Boot (and often TPM 2.0).
Vanguard's Purpose: Riot Vanguard is designed to maintain a fair and competitive environment in games by preventing cheating and unauthorized software from interfering with gameplay. It operates at a low level (kernel mode) of your operating system to detect and mitigate exploits.
Secure Boot Explained: Secure Boot is a security feature within your computer's UEFI (Unified Extensible Firmware Interface) firmware – the modern replacement for the old BIOS. Think of it as a bouncer for your PC's startup process. It ensures that only trusted software (signed with digital certificates) can load when your computer boots up. This prevents malicious software, like rootkits or advanced cheats, from injecting themselves into the boot process before your operating system even loads.
The Connection: Vanguard leverages Secure Boot to ensure it's operating in a trusted and uncompromised environment. By requiring Secure Boot, Riot Games aims to make it significantly harder for cheaters to bypass their anti-cheat measures, ultimately leading to a more level playing field for everyone.
Now that we understand the "why," let's get to the "how"!
 |
| How To Give Vanguard Secure Boot |
Step 1: Check Your Current Secure Boot and TPM Status – Let's See Where You Stand!
Before making any changes, it's crucial to confirm your current Secure Boot and TPM (Trusted Platform Module) status. This will help us determine if you even need to enable them or if there's another issue at play.
Sub-heading 1.1: Checking Secure Boot State
You can quickly check your Secure Boot status directly from Windows.
Press Windows Key + R: This will open the "Run" dialog box.
Type
msinfo32and Press Enter: This opens the System Information window.Navigate to "System Summary": On the left-hand side, ensure "System Summary" is selected.
Find "Secure Boot State": Look on the right side of the window.
If it says "On", Secure Boot is already enabled. You might have another issue, or perhaps TPM 2.0 is disabled.
If it says "Off", Secure Boot is disabled, and you'll need to enable it.
If it says "Unsupported", your PC's hardware or firmware may not support Secure Boot. This is rare on newer systems but can happen with older motherboards.
Sub-heading 1.2: Checking TPM 2.0 Status
Vanguard also typically requires TPM 2.0. Let's check that too.
Tip: Don’t just glance — focus.
Press Windows Key + R: Again, open the "Run" dialog box.
Type
tpm.mscand Press Enter: This opens the Trusted Platform Module Management window.Check the Status Section:
If it says "The TPM is ready for use", TPM is enabled.
Under "TPM Manufacturer Information," look for "Specification Version." It should say "2.0" for full compatibility.
If it indicates TPM is disabled or not found, you'll need to enable it in your BIOS/UEFI settings, often alongside Secure Boot.
Step 2: Enter Your BIOS/UEFI Firmware Settings – The Gateway to Control
This is where the magic happens! To enable Secure Boot and TPM, you'll need to access your computer's BIOS (Basic Input/Output System) or UEFI firmware settings. The method for entering these settings varies by manufacturer.
Restart Your Computer: This is the easiest way to get to the boot screen.
Press the BIOS Key Repeatedly During Startup: As soon as your computer starts to power on, begin pressing the designated BIOS key repeatedly.
Common BIOS Keys:
Dell: F2, F12
HP: F10, Esc
Lenovo: F1, F2, Fn + F2, Enter (then F1 or F2)
ASUS: Del, F2
Acer: F2, Del
MSI: Del
Gigabyte: Del, F8
Pro Tip: If you're unsure, a quick search for "how to enter BIOS [Your Laptop/Motherboard Model]" on Google will usually give you the exact key.
Keyboard Navigation: Keep in mind that in many BIOS/UEFI interfaces, your mouse may not work. You'll likely need to use your keyboard's arrow keys and Enter key to navigate.
Sub-heading 2.1: Alternative Entry Method (Windows 10/11)
If you're having trouble catching the boot screen, Windows offers a way to restart directly into UEFI Firmware Settings.
Go to Settings: Click the Start button and then the gear icon.
Navigate to "Update & Security" (Windows 10) or "Windows Update" -> "Advanced options" -> "Recovery" (Windows 11).
Under "Advanced startup," click "Restart now".
Select "Troubleshoot".
Choose "Advanced options".
Click "UEFI Firmware Settings".
Click "Restart". Your computer will then restart directly into the UEFI/BIOS settings.
Step 3: Configure UEFI Boot Mode (if necessary) – Setting the Stage
Secure Boot requires your system to be in UEFI boot mode. If your system is currently in "Legacy" or "CSM" (Compatibility Support Module) mode, you'll need to switch it.
Locate "Boot" or "Boot Configuration" Section: Once inside the BIOS/UEFI, look for a section related to "Boot," "Boot Options," or "BIOS Features."
Find "Boot Mode" or "UEFI/Legacy Boot":
Set this option to "UEFI" or "UEFI Native".
Important Note: If you switch from Legacy to UEFI, and your Windows installation was done in Legacy mode, your operating system might not boot. This is because Legacy mode typically uses MBR (Master Boot Record) partition style, while UEFI requires GPT (GUID Partition Table). If your OS drive is MBR and you switch to UEFI, you may need to convert it to GPT or reinstall Windows. You can check your disk's partition style in Disk Management (Right-click Start -> Disk Management -> Right-click your OS drive -> Properties -> Volumes tab). If it's MBR, you might want to consider converting it using
mbr2gpttool (requires some technical comfort) or reinstalling Windows. However, most modern Windows 10/11 installations are already on GPT and UEFI.
Step 4: Enable Secure Boot – The Core Action
Now for the main event: enabling Secure Boot!
Navigate to the "Security" or "Boot" Section: In your BIOS/UEFI, look for options like "Security," "Boot," "Authentication," or "BIOS Features."
Find "Secure Boot": Locate the "Secure Boot" option. It will likely be set to "Disabled."
Set "Secure Boot" to "Enabled": Change the setting to "Enabled".
Some motherboards might require you to enable a "Secure Boot Mode" and set it to "Standard" or "Windows UEFI mode."
You might also see an option to "Reset to Factory Default Keys" or "Install Default Secure Boot Keys." If Secure Boot doesn't enable immediately, try resetting or installing these keys. This loads the default security certificates that Windows uses.
Step 5: Enable TPM 2.0 (if necessary) – The Trusty Companion
QuickTip: Read actively, not passively.
If your TPM check in Step 1 showed it was disabled or not version 2.0, you'll need to enable it here.
Locate "Trusted Computing" or "Security Device Support": This option is usually found under the "Security" or "Advanced" section of your BIOS/UEFI.
Enable TPM:
Look for an option like "Security Device Support," "AMD fTPM switch" (for AMD CPUs), or "Intel PTT" (for Intel CPUs).
Set this option to "Enabled".
Ensure the TPM version displayed (if any) is 2.0.
Step 6: Save Changes and Exit – Making It Stick!
This is a critical step. If you don't save your changes, all your hard work will be undone!
Find "Save & Exit": Look for an "Exit" tab or option within your BIOS/UEFI.
Select "Save Changes and Exit" or "Exit Saving Changes".
Confirm: You'll likely be prompted to confirm your decision. Select "Yes" or "OK".
Restart: Your computer will restart.
Step 7: Verify Secure Boot and TPM Again – Double-Checking Your Work
Once your computer restarts, it's a good idea to re-verify that Secure Boot and TPM are indeed enabled.
Repeat Step 1.1 (msinfo32): Check "Secure Boot State" and ensure it now says "On".
Repeat Step 1.2 (tpm.msc): Confirm that "The TPM is ready for use" and the "Specification Version" is 2.0.
If both are now showing as enabled, you're all set! You should be able to launch your Riot Games title without the Vanguard error.
Troubleshooting Tips: When Things Don't Go as Planned
Sometimes, even with the right steps, you might encounter issues. Here are some common troubleshooting tips:
BIOS/UEFI Updates: If you can't find the Secure Boot or TPM options, or if they appear but are greyed out, your BIOS/UEFI firmware might be outdated. Visit your motherboard manufacturer's website and download the latest firmware update. Be extremely careful when updating BIOS/UEFI, as an incorrect update can damage your motherboard. Follow the manufacturer's instructions precisely.
Clear CMOS/Reset BIOS to Defaults: In some rare cases, conflicting settings might prevent Secure Boot from enabling. You can try clearing your CMOS (Complementary Metal-Oxide-Semiconductor) or resetting your BIOS settings to factory defaults. This will reset all your BIOS settings, so be prepared to reconfigure any custom settings you had.
Windows Partition Style (MBR vs. GPT): As mentioned in Step 3, Secure Boot requires a GPT partition style for your boot drive. If your drive is MBR, you might need to convert it using the
mbr2gptcommand-line tool (Windows 10/11) or reinstall Windows after formatting the drive as GPT. Back up your data before attempting this!Disable CSM/Legacy Boot: Ensure that the Compatibility Support Module (CSM) or Legacy Boot option is disabled in your BIOS/UEFI after enabling UEFI mode. Secure Boot generally won't work if CSM is enabled.
Vanguard Reinstallation: If Secure Boot and TPM are enabled but you're still getting the error, try uninstalling and reinstalling Riot Vanguard. You can do this through "Add or remove programs" in Windows settings. Remember that uninstalling Valorant (or other Riot games) does not uninstall Vanguard; it's a separate program.
Contact Riot Support: If all else fails, don't hesitate to reach out to Riot Games Support. They have dedicated teams to help with these specific errors and can provide more personalized assistance.
Frequently Asked Questions (FAQs)
QuickTip: Stop to think as you go.
How to check if my PC supports Secure Boot?
You can check if your PC supports Secure Boot by typing msinfo32 in the Run dialog (Windows Key + R) and looking for "Secure Boot State" in the System Information window. If it says "Unsupported," your hardware likely doesn't support it.
How to enable TPM 2.0 for Vanguard?
Enable TPM 2.0 by restarting your PC, entering BIOS/UEFI settings (usually by pressing Del, F2, or F10), and finding options like "Trusted Computing," "Security Device Support," "AMD fTPM switch," or "Intel PTT" under the Security or Advanced sections. Set it to "Enabled" and ensure the version is 2.0.
How to enter BIOS/UEFI settings on my computer?
To enter BIOS/UEFI settings, restart your computer and repeatedly press a specific key (e.g., F2, Del, F10, Esc) during startup. The exact key varies by motherboard manufacturer. You can also access it through Windows' Advanced Startup options.
How to convert MBR to GPT without data loss for Secure Boot?
You can use the mbr2gpt command-line tool in Windows 10/11 to convert an MBR disk to GPT. However, it's highly recommended to back up all your data before attempting this, as there's always a risk of data loss if something goes wrong.
How to fix "This build of Vanguard is out of compliance" error?
This error often means Secure Boot or TPM 2.0 are not enabled. Follow the steps in this guide to enable both. If they are already enabled, try updating your BIOS/UEFI or reinstalling Vanguard.
Tip: Read aloud to improve understanding.
How to update my motherboard's BIOS/UEFI firmware?
To update your BIOS/UEFI, visit your motherboard manufacturer's official website, find your specific model, download the latest firmware, and follow their detailed instructions carefully. This is a delicate process and should only be attempted if you are comfortable with it.
How to disable CSM (Compatibility Support Module) in BIOS?
Locate the "Boot" or "Boot Options" section in your BIOS/UEFI settings. Find the "CSM" or "Legacy Boot" option and set it to "Disabled." This is necessary for Secure Boot to function correctly in UEFI mode.
How to reset Secure Boot keys in BIOS?
Within the Secure Boot section of your BIOS/UEFI, you might find an option like "Reset to Factory Default Keys" or "Install Default Secure Boot Keys." Selecting this will load the default security certificates required for Secure Boot.
How to troubleshoot Vanguard errors after enabling Secure Boot?
If you've enabled Secure Boot and TPM but still face Vanguard errors (like VAN9003), try reinstalling Riot Vanguard, ensuring your Windows is fully updated, and checking for any conflicting security software. Contact Riot Games Support if the issue persists.
How to ensure my Windows installation is UEFI-compatible?
Check your "BIOS Mode" in msinfo32. If it says "UEFI," your installation is UEFI-compatible. If it says "Legacy," your system is booting in Legacy mode, and you may need to convert your disk to GPT or reinstall Windows in UEFI mode for Secure Boot to work.
By following this comprehensive guide, you should be well on your way to enjoying your favorite Riot Games titles with Vanguard securely enabled! Good luck, and happy gaming!
 |
