Playing competitive games like Valorant can be incredibly frustrating when you're met with an error message preventing you from launching the game. One of the most common recent culprits, especially for Windows 11 users, is the "Vanguard requires TPM version 2.0 and Secure Boot to be enabled" error (VAN9001, VAN9005). This post will dive deep into what TPM 2.0 and Secure Boot are, why Valorant (and its anti-cheat, Vanguard) requires them, and most importantly, guide you through potential solutions to get back into the action, even if your hardware doesn't natively support TPM 2.0 or you prefer to keep it disabled.
Ready to get back to those clutch plays? Let's start by understanding the challenge ahead!
The Vanguard Conundrum: Why TPM 2.0 and Secure Boot?
Before we jump into solutions, it's crucial to understand why you're facing this issue. Riot Games, the developers of Valorant, implemented stricter security measures with their anti-cheat system, Vanguard. This was largely in response to the rise of sophisticated cheating tools.
-
TPM 2.0 (Trusted Platform Module): Think of TPM 2.0 as a secure cryptographic processor on your motherboard. It's a hardware-based security feature that provides a secure environment for cryptographic operations, such as storing encryption keys, digital certificates, and passwords. For Vanguard, it helps ensure the integrity of your system and makes it harder for cheaters to manipulate game files or run malicious software without detection. It essentially creates a trusted execution environment.
-
Secure Boot (UEFI Firmware Setting): Secure Boot is a feature of UEFI (Unified Extensible Firmware Interface) firmware that prevents malicious software from loading during the boot process. It ensures that only trusted software (like your operating system) can run when your computer starts. For Vanguard, this means that the anti-cheat can be sure that no unauthorized programs are interfering with the game at a fundamental level.
In essence, Riot Games implemented these requirements to create a more secure and fair gaming environment by making it significantly more difficult for cheaters to operate. While this is beneficial for the overall player experience, it can unfortunately sideline players with older hardware or specific system configurations.
The Reality: Can You Truly Run Vanguard Without TPM 2.0?
Let's be upfront: If you are running Windows 11, Vanguard officially requires TPM 2.0 and Secure Boot to be enabled. There's no officially supported "bypass" from Riot Games for Windows 11. They've stated this explicitly.
However, there are situations and potential workarounds, primarily for Windows 10 users or users who bypassed the Windows 11 TPM requirement during installation. It's important to note that these "workarounds" often involve disabling other security features or using older operating system versions, which can have implications for your system's overall security. Proceed with caution and understand the risks.
Disclaimer: The following steps involve modifying system settings and potentially disabling security features. This may expose your system to vulnerabilities. Proceed at your own risk. It is always recommended to have a backup of your important data before making significant system changes.
Step-by-Step Guide: Navigating the TPM 2.0 and Secure Boot Requirements
Here's a detailed guide on how to approach this issue, starting with checking your current setup and moving towards potential solutions.
Step 1: Engage! What's Your Current Situation?
Before we dive into technicalities, tell me:
- Are you on Windows 10 or Windows 11? This is crucial, as the solutions often differ.
- What error message are you seeing exactly? Knowing the specific error code (like VAN9001 or VAN9005) can help pinpoint the problem.
Knowing this will help us tailor the advice more accurately. For now, let's assume you're seeing the dreaded "Vanguard requires TPM 2.0 and Secure Boot" message.
Step 2: Checking Your Current TPM and Secure Boot Status
The first order of business is to verify whether TPM 2.0 and Secure Boot are actually enabled on your system. Many users find that these features are simply disabled in their BIOS/UEFI settings, and a quick toggle can resolve the issue.
Sub-heading: Verifying TPM Status
- Open the Run Dialog: Press the
Windows Key + R
on your keyboard. - Type 'tpm.msc': In the Run dialog box, type
tpm.msc
and press Enter. - Check the TPM Management Console: A new window titled "Trusted Platform Module (TPM) Management on Local Computer" will appear.
- If it says "The TPM is ready for use" and "Specification Version: 2.0": Congratulations! Your TPM 2.0 is enabled and functional. This suggests the issue might be with Secure Boot or other settings.
- If it says "Compatible TPM cannot be found" or shows a lower version (e.g., 1.2): Your system either doesn't have a TPM, it's disabled, or it's an older version.
Sub-heading: Verifying Secure Boot and BIOS Mode Status
- Open System Information: Press the
Windows Key + R
, typemsinfo32
, and press Enter. - Navigate to System Summary: In the System Information window, ensure "System Summary" is selected in the left-hand pane.
- Look for "BIOS Mode" and "Secure Boot State":
- "BIOS Mode" should be "UEFI": If it's "Legacy" or "CSM," your system is not running in UEFI mode, which is a prerequisite for Secure Boot.
- "Secure Boot State" should be "On": If it's "Off" or "Unsupported," then Secure Boot is either disabled or not supported on your system.
Step 3: Enabling TPM 2.0 and Secure Boot in BIOS/UEFI
This is the most common and recommended solution if your hardware supports it. If your checks in Step 2 indicated that either TPM 2.0 or Secure Boot is disabled, you'll need to access your computer's BIOS/UEFI settings.
Sub-heading: Accessing Your BIOS/UEFI Settings
- Restart Your Computer: The easiest way to access BIOS/UEFI is by restarting your PC.
- Press the BIOS/UEFI Key During Startup: As your computer starts, repeatedly press the designated key to enter the BIOS/UEFI setup. This key varies by manufacturer:
- Dell: F2, F12
- HP: F10, Esc
- Lenovo: F1, F2, Fn + F2, Enter (then F1 or F2)
- Acer: F2, Del
- ASUS: Del, F2
- MSI: Del
- Gigabyte: Del
- If you're unsure, consult your motherboard manual or search online for "how to enter BIOS [your computer/motherboard model]".
Sub-heading: Enabling TPM (Intel: PTT, AMD: fTPM)
Once in the BIOS/UEFI:
- Navigate to Security or Advanced Settings: Look for menus like "Security," "Advanced," "Boot," or "Peripherals."
- Find TPM Setting: The option might be named:
- Intel Platform Trust Technology (PTT)
- AMD fTPM (Firmware TPM)
- Trusted Platform Module (TPM)
- Security Device
- Enable the Feature: Change its status from "Disabled" to "Enabled."
Sub-heading: Enabling Secure Boot
-
Navigate to Boot or Security Settings: Look for a "Boot," "Security," or "Authentication" tab.
-
Find Secure Boot: The option is usually clearly labeled as "Secure Boot" or "Secure Boot Control."
-
Enable Secure Boot: Change its status to "Enabled."
- You might first need to set "OS Type" to "Windows UEFI mode" or "UEFI mode" if you see such an option.
- Sometimes, you may need to reset security keys to factory defaults within the Secure Boot menu before enabling it.
-
Save and Exit: After making these changes, save your settings (usually F10) and exit the BIOS/UEFI. Your computer will restart.
Step 4: Addressing Compatibility Mode (Windows 8 Trick - Limited Success)
Some users, particularly on Windows 10, have reported limited success by running the Valorant client in Windows 8 compatibility mode. This is not an official solution and may not work for everyone, especially with the latest Vanguard updates. However, it's a quick thing to try if you're desperate and the above steps haven't worked.
- Locate Valorant.exe and RiotClientServices.exe:
- Navigate to your Valorant installation folder (usually
C:\Riot Games\Valorant
). - Find
VALORANT.exe
andRiotClientServices.exe
.
- Navigate to your Valorant installation folder (usually
- Right-Click and Go to Properties: Right-click on each executable one by one.
- Select the 'Compatibility' Tab:
- Check "Run this program in compatibility mode for:":
- Select "Windows 8" from the Dropdown:
- Check "Run this program as an administrator":
- Apply and OK: Click "Apply" and then "OK."
- Restart Valorant (and your PC if necessary): Try launching Valorant.
Step 5: Downgrading to Windows 10 (A Drastic but Effective Option for Some)
If you are on Windows 11 and your hardware genuinely does not support TPM 2.0, or you simply cannot enable it, the most reliable (though inconvenient) solution to play Valorant is to revert to Windows 10.
- Vanguard's strict TPM 2.0 and Secure Boot requirements primarily apply to Windows 11. While Vanguard is still present on Windows 10, it does not enforce the TPM 2.0 requirement in the same way.
- This is a major undertaking, as it involves reinstalling your operating system. Make sure to back up all your important data before proceeding.
- You will need a Windows 10 installation media (USB drive) and a valid Windows 10 license key.
Step 6: Considering a TPM Module Upgrade (Hardware Dependent)
For some older motherboards, it might be possible to purchase and install a physical TPM 2.0 module. This is highly motherboard-specific.
- Check your Motherboard Manual: Look for a dedicated TPM header on your motherboard.
- Research Compatibility: Find out if your motherboard model supports adding a TPM 2.0 module and which specific module is compatible.
- This is generally not a simple plug-and-play solution and requires some hardware expertise.
Frequently Asked Questions (FAQs)
Here are 10 related FAQ questions to help you further:
How to check if my PC supports TPM 2.0?
You can check if your PC supports TPM 2.0 by pressing Windows Key + R
, typing tpm.msc
, and checking the "Specification Version" in the Trusted Platform Module Management console. It should ideally say "2.0".
How to enable Secure Boot in BIOS/UEFI?
To enable Secure Boot, restart your PC, press the designated BIOS/UEFI key (e.g., F2, Del, F10), navigate to the "Boot" or "Security" section, locate "Secure Boot," and set it to "Enabled." Remember to save and exit.
How to switch BIOS Mode from Legacy to UEFI?
To switch from Legacy to UEFI, enter your BIOS/UEFI settings, go to the "Boot" or "Boot Options" section, and change the "Boot Mode" or "OS Type" from "Legacy" or "CSM" to "UEFI." Note that this often requires reinstalling Windows if your drive is MBR, as UEFI requires a GPT partition table.
How to fix Valorant error VAN9001 or VAN9005?
VAN9001 and VAN9005 errors typically indicate that TPM 2.0 and Secure Boot are not enabled. The primary fix is to enable both in your BIOS/UEFI settings as outlined in Step 3.
How to update my BIOS/UEFI firmware?
Updating your BIOS/UEFI firmware is a delicate process. Visit your motherboard manufacturer's website, find your specific model, download the latest firmware, and follow their provided instructions carefully. This can sometimes unlock TPM 2.0 options if your motherboard supports it but it's not visible.
How to disable Virtualization-Based Security (VBS) if it conflicts with Vanguard?
To disable VBS, open Command Prompt as an administrator and type bcdedit /set hypervisorlaunchtype off
. Restart your PC afterwards. This might be a workaround for some VAN errors, especially on Windows 10, but it reduces system security.
How to verify if Valorant is running with Vanguard successfully?
Once Valorant launches, you should see the Vanguard icon in your system tray (bottom-right corner of your screen). If you don't receive any error messages and can enter games, Vanguard is likely running successfully.
How to uninstall and reinstall Vanguard if it's causing issues?
To uninstall Vanguard, go to "Apps & Features" in Windows Settings, find "Riot Vanguard," and uninstall it. Then, simply launch Valorant, and it will prompt you to reinstall Vanguard automatically. A PC restart is often required after reinstallation.
How to check my Windows version (10 vs 11)?
Press Windows Key + R
, type winver
, and press Enter. A small window will pop up showing your Windows version and build number.
How to back up my computer before making system changes?
You can back up your computer using Windows' built-in "Backup and Restore (Windows 7)" utility, creating a system image, or using third-party backup software. Always back up critical data to an external drive or cloud storage before making major system changes.