How To Secure Boot Riot Vanguard

People are currently reading this guide.

Securing your system is becoming increasingly important in the world of online gaming, and Riot Vanguard, the anti-cheat system for Valorant, is at the forefront of this. If you're seeing those pesky VAN9001 or VAN9003 errors, it's highly likely that Riot Vanguard is demanding you enable Secure Boot and TPM 2.0 on your Windows 11 PC. Don't worry, this isn't as daunting as it sounds! This comprehensive guide will walk you through the process, step-by-step, ensuring you can get back to clutching those rounds in Valorant.

The Valorant Gatekeeper: Why Secure Boot and TPM 2.0 Matter

Before we dive into the "how-to," let's briefly understand why Riot Vanguard insists on these security features. Secure Boot and TPM 2.0 are fundamental components of modern Windows security.

Secure Boot: Imagine a digital bouncer at the club entrance of your PC. Secure Boot ensures that only trusted software, signed by legitimate entities (like Microsoft or your motherboard manufacturer), can load during the system startup process. This prevents malicious software from hijacking your system before Windows even fully loads. For an anti-cheat like Vanguard, this is crucial for maintaining the integrity of the game environment.
TPM 2.0 (Trusted Platform Module): Think of TPM 2.0 as a highly secure, tamper-resistant chip on your motherboard. It's designed to store cryptographic keys and measure the integrity of your system's boot process. This hardware-based security adds another layer of trust, making it much harder for cheats to evade detection.

Riot Vanguard leverages these technologies to verify that your PC is running in a secure and uncompromised state, making it a less hospitable environment for cheaters.

Step 1: Are You Ready for the Challenge? (Checking Your Current Status)

Before you start tinkering with your BIOS, let's confirm if Secure Boot and TPM 2.0 are actually disabled on your system, and if your system even supports them. This will save you a lot of time and potential headaches!

Ready to tackle this? Let's begin by checking your current system information.

Sub-heading: Checking Secure Boot State

Open the Run dialog: Press the Windows key + R simultaneously on your keyboard.
Type and Open System Information: In the "Run" dialog box, type msinfo32 and press Enter.
Locate Secure Boot State: In the "System Information" window, navigate to System Summary on the left-hand pane. On the right, look for the line that says "Secure Boot State."
- If it says "On," congratulations! Secure Boot is already enabled. You can skip the Secure Boot enabling steps.
- If it says "Off," you'll need to enable it.
- If it says "Unsupported," your hardware might not support Secure Boot. You may need to check your motherboard's manual or manufacturer's website for more information, or consider a hardware upgrade.

Sub-heading: Checking TPM 2.0 Status

Open the Run dialog: Press the Windows key + R simultaneously on your keyboard.
Type and Open TPM Management: In the "Run" dialog box, type tpm.msc and press Enter.
Check TPM Status: A new window titled "Trusted Platform Module (TPM) Management on Local Computer" will open.
- If you see a message stating, "The TPM is ready for use," and under "TPM Manufacturer Information," the "Specification Version" is 2.0, then TPM 2.0 is enabled and ready.
- If you see an error message like "Compatible TPM cannot be found," or if the Specification Version is not 2.0, you'll need to enable it in your BIOS. Note that TPM is a physical chip; if your system truly doesn't support it, you might be out of luck without a motherboard upgrade.

Step 2: Entering the Digital Nerve Center (Accessing Your BIOS/UEFI)

This is where things can get a little tricky, as BIOS/UEFI interfaces vary wildly between motherboard manufacturers. Be careful here – incorrect changes in BIOS can affect your system's stability.

Sub-heading: The Easiest Way to BIOS (for Windows 10/11)

This method is generally the most reliable as it allows you to enter the BIOS from within Windows, without needing precise timing.

Open Windows Settings: Click the Start button (Windows icon) and then click the cogwheel icon (Settings).
Navigate to Recovery: Click on "Update & Security" (Windows 10) or "Windows Update" -> "Advanced options" -> "Recovery" (Windows 11) in the left-hand sidebar.
Initiate Advanced Startup: Under the "Advanced startup" section, click "Restart now."
- Important: Save any open files before clicking, as your PC will restart immediately.
Choose Advanced Options: After your PC restarts, you'll see a blue screen with several options. Select "Troubleshoot."
Select UEFI Firmware Settings: On the next screen, choose "Advanced options," then select "UEFI Firmware Settings."
Restart to BIOS: Click "Restart" (if prompted). Your computer will now reboot directly into your BIOS/UEFI settings.

Sub-heading: The Traditional BIOS Entry (for the quick and nimble)

If the above method doesn't work or you prefer the classic approach, you can try this:

Restart your PC: Perform a normal restart.
Press the BIOS Key repeatedly: As your computer is booting up (often when you see the manufacturer's logo like Dell, HP, ASUS, MSI, Gigabyte, etc.), repeatedly press the designated BIOS/UEFI access key.
- Common BIOS Keys: This key varies by manufacturer but is most commonly Delete (Del), F2, F10, F12, or sometimes Esc.
- Tip: If you're unsure, a quick online search for "[Your PC/Motherboard Model] BIOS key" will usually give you the answer.

Step 3: Navigating and Enabling (Inside the BIOS/UEFI)

Once you're in the BIOS, you'll primarily use your keyboard's arrow keys and Enter key to navigate, as your mouse may not work.

Sub-heading: Ensuring UEFI Boot Mode

Secure Boot requires your system to be in UEFI (Unified Extensible Firmware Interface) boot mode. If your system is currently in "Legacy" or "CSM" (Compatibility Support Module) mode, you'll need to switch it.

Locate Boot Settings: Look for a tab or section often labeled "Boot," "Boot Options," "BIOS Features," or "Advanced."
Change Boot Mode: Find an option related to "Boot Mode," "BIOS Mode," or "OS Type."
Select UEFI: Change this setting to "UEFI." Make sure it's not set to "Legacy" or "CSM." If there's an option for "UEFI and Legacy," ensure UEFI is prioritized or the sole option.
- Caution: If your Windows installation was done in Legacy BIOS mode (MBR partition style), changing to UEFI mode (GPT partition style) without converting your drive first can prevent your system from booting. Most modern Windows 10/11 installations are already in UEFI/GPT. You can check your disk partition style in Windows by:
  1. Pressing Windows key + X and selecting Disk Management.
  2. Right-clicking on your primary drive (usually C:) and selecting Properties.
  3. Going to the "Volumes" tab and checking "Partition style." It should say "GUID Partition Table (GPT)." If it says "Master Boot Record (MBR)," you might need to convert it, which is a more advanced process and beyond the scope of this guide.

Sub-heading: Enabling Secure Boot

Find Secure Boot: Within the BIOS, look for a section typically under "Security," "Boot," or "Authentication." You'll find an option called "Secure Boot."
Enable Secure Boot: Change the "Secure Boot" setting to "Enabled."
- Some motherboards might require additional steps:
  - You might need to set the "Secure Boot Mode" to "Standard" or "Windows UEFI mode."
  - There could be an option to "Restore Factory Keys" or "Install Default Secure Boot Keys." If prompted, do this. This action sets up the necessary cryptographic keys for Secure Boot to function.

Sub-heading: Enabling TPM 2.0 (if not already)

This setting is often found near Secure Boot or under a more general "Security" or "Advanced" tab.

Locate TPM/PTT/fTPM: Look for options like "Trusted Platform Module" (TPM), "Intel Platform Trust Technology" (Intel PTT), or "AMD fTPM switch."
Enable TPM: Set this option to "Enabled."

Step 4: Saving Your Changes and Exiting

This is a critical step! If you don't save your changes, all your efforts will be in vain.

Save and Exit: Look for an "Exit" tab or option, and then select "Save Changes and Exit" or "Save & Exit Setup." The specific key to save and exit is usually displayed on the screen (often F10).
Confirm: You'll likely be asked to confirm your changes. Select "Yes."
Reboot: Your computer will then restart.

Step 5: Verifying the Changes in Windows

Once your PC reboots, it's a good idea to confirm that Secure Boot and TPM 2.0 are now active.

Check Secure Boot: Repeat the steps from Step 1, Sub-heading: Checking Secure Boot State. The "Secure Boot State" should now show "On."
Check TPM 2.0: Repeat the steps from Step 1, Sub-heading: Checking TPM 2.0 Status. The "Status" should say "The TPM is ready for use," and the "Specification Version" should be 2.0.

If both are confirmed, you're good to go! Launch Valorant, and Riot Vanguard should now allow you to play without the VAN9001 or VAN9003 errors.

Troubleshooting Tips (If You Encounter Issues)

BIOS/UEFI Layout Variations: Remember, every motherboard manufacturer has a slightly different BIOS/UEFI layout. If you can't find a specific setting, consult your motherboard's manual or search its official website for support documentation.
BIOS Update: An outdated BIOS firmware can sometimes prevent Secure Boot or TPM 2.0 from being enabled or even visible. Check your motherboard manufacturer's website for the latest BIOS update for your specific model and follow their instructions carefully to update it. This can be a complex process, so proceed with caution.
Reset Secure Boot Keys: In some rare cases, resetting the Secure Boot keys to default settings within the BIOS can resolve issues. Look for an option like "Clear Secure Boot Keys" or "Restore Factory Keys" in the Secure Boot section.
Windows 10 vs. Windows 11: While Windows 10 can run Valorant without Secure Boot and TPM 2.0, Windows 11 mandates them. If you're on Windows 11 and still facing issues, the steps above are crucial.
Reinstall Vanguard/Valorant: As a last resort, if everything else fails, try uninstalling and reinstalling Riot Vanguard and Valorant. This can sometimes resolve corrupted anti-cheat files.

Frequently Asked Questions (FAQs)

How to check if my PC supports Secure Boot?

You can check this by typing msinfo32 in the Windows Run dialog (Win + R) and looking at the "Secure Boot State" under System Summary. If it says "Unsupported," your hardware likely doesn't support it.

How to convert my MBR disk to GPT for Secure Boot?

Converting an MBR disk to GPT can be done using the mbr2gpt tool in Windows, but it requires careful execution and a backup of your data is highly recommended. It's a more advanced procedure, and incorrectly doing so can lead to data loss or an unbootable system.

How to update my motherboard's BIOS?

You typically download the latest BIOS file from your motherboard manufacturer's website, place it on a USB drive, and then update it through a dedicated utility in your BIOS. Always follow your specific motherboard's instructions meticulously.

How to find my motherboard model?

Type msinfo32 in the Windows Run dialog (Win + R) and look for "BaseBoard Manufacturer" and "BaseBoard Product" under System Summary.

How to disable CSM (Compatibility Support Module) in BIOS?

CSM settings are usually found in the "Boot" or "Boot Options" section of your BIOS. Look for an option to disable or set it to "UEFI Only."

How to enable Intel PTT or AMD fTPM?

These are the software implementations of TPM 2.0 for Intel and AMD CPUs, respectively. You'll find these options in your BIOS, often under "Security," "Advanced," or "Trusted Computing."

How to reset Secure Boot keys in BIOS?

Within the Secure Boot section of your BIOS, there's usually an option like "Restore Factory Keys," "Install Default Secure Boot Keys," or "Clear Secure Boot Keys." Select the appropriate option to reset them.

How to fix "Secure Boot state not enabled" after enabling it in BIOS?

Double-check that your BIOS is set to UEFI mode, and you've saved the settings correctly. Sometimes, resetting the Secure Boot keys to default after enabling Secure Boot can resolve this.

How to contact Riot Games support for Vanguard issues?

You can visit the official VALORANT Support page on the Riot Games website for further assistance and to submit a ticket if you're still facing problems.

How to ensure Valorant runs smoothly after enabling Secure Boot and TPM 2.0?

Beyond enabling these features, ensure your Windows installation is up-to-date, your graphics drivers are current, and your system meets Valorant's minimum hardware requirements.

7215240502112040223