A Comprehensive Guide: How to Turn on Secure Boot for Vanguard and Get Back in the Game!
Tired of seeing that pesky "VAN9001" error message when you try to launch Valorant? Don't worry, you're not alone! With Riot Games' anti-cheat system, Vanguard, becoming more and more stringent on its security requirements, many players are finding themselves locked out of the game. The culprit? Often, it's the lack of two key security features: Secure Boot and TPM 2.0.
If you're ready to get back into the action and show off your skills in Valorant, follow this detailed, step-by-step guide. We'll walk you through the process, from checking your current settings to navigating your computer's BIOS and finally, verifying that everything is working as it should.
Are you ready? Let's dive in!
How To Turn On Vanguard Secure Boot |
Step 1: Check Your PC's Current Status - Are You Secure?
Before you start changing anything, it's crucial to know what your current Secure Boot and TPM status is. This will help you determine exactly what you need to do. Let's find out!
Sub-heading: Check Secure Boot State with System Information
Press the Windows key + R on your keyboard to open the Run dialog box.
Type msinfo32 and press Enter. This will open the System Information window.
In the System Summary, look for a line that says "Secure Boot State".
If it says "On", then you're all set! Secure Boot is already enabled.
If it says "Off", you'll need to follow the steps in this guide to enable it.
If it says "Unsupported," your PC may not support Secure Boot. You'll need to check your motherboard's manual or manufacturer's website to confirm.
Sub-heading: Check TPM Status with tpm.msc
Press the Windows key + R again to open the Run dialog box.
Type tpm.msc and press Enter.
A new window will pop up. Look at the "Status" section.
If it says "The TPM is ready for use", you're good to go on the TPM front.
If you see a message like "Compatible TPM cannot be found", then you'll need to enable it in the BIOS as well.
Step 2: Enter the BIOS/UEFI Firmware Settings
This is where many people get a little nervous, but don't worry. It's a straightforward process. The BIOS (Basic Input/Output System) or UEFI (Unified Extensible Firmware Interface) is a low-level software that controls your computer's hardware. You need to access it to change the Secure Boot setting.
Tip: Share one insight from this post with a friend.
Sub-heading: The Easy Way - Advanced Startup
This is the most reliable way to get into your BIOS from Windows 10 or 11.
Click the Start button and then go to Settings.
Navigate to System > Recovery (on Windows 11) or Update & Security > Recovery (on Windows 10).
Under the "Advanced startup" section, click "Restart now".
Your computer will restart and show a blue screen with several options.
Select Troubleshoot > Advanced options > UEFI Firmware Settings.
Click Restart once more. Your PC will now boot directly into the BIOS/UEFI.
Sub-heading: The Classic Way - BIOS Key
If the above method doesn't work, you can try this. You'll need to be quick!
Restart your computer.
As soon as the computer starts, before the Windows logo appears, repeatedly press the BIOS key.
This key is different for every manufacturer. It is commonly Del, F2, F10, or F12.
You'll often see a message on the screen during startup that tells you which key to press (e.g., "Press F2 to enter BIOS"). If not, consult your motherboard or PC manufacturer's manual.
Step 3: Enable Secure Boot and TPM
Once you're in the BIOS, you'll need to navigate through the menus. Keep in mind that the layout and names of the options can vary greatly between manufacturers (e.g., ASUS, Dell, HP, MSI). You'll typically use your keyboard's arrow keys to navigate and Enter to select options, as the mouse may not work.
Sub-heading: Switch to UEFI Mode (If Required)
Secure Boot only works with UEFI mode. If your BIOS is set to Legacy or CSM (Compatibility Support Module) mode, you'll need to change it first.
Look for a "Boot" or "Boot Configuration" tab.
Find the "Boot Mode" or similar option and set it to UEFI.
You may also need to disable CSM.
Important Note: Switching from Legacy to UEFI mode may make your Windows installation unbootable if it was installed in Legacy mode. In this case, you'll need to convert your OS drive from MBR to GPT. This is a more advanced step, and it's highly recommended to back up your data beforehand.
Sub-heading: Locate and Enable Secure Boot
QuickTip: Keep going — the next point may connect.
Navigate to the "Boot" or "Security" tab in your BIOS.
Find the "Secure Boot" option.
Set the option to Enabled.
You may also see a "Secure Boot Mode" setting. Make sure it's set to "Standard" or "Windows UEFI mode".
Sub-heading: Enable TPM 2.0 (if needed)
Look for a "Security" or "Advanced" tab.
Find an option related to "Trusted Computing," "TPM," "PTT" (Intel), or "fTPM" (AMD).
Enable this setting.
Step 4: Save Changes and Exit
Once you have made all the necessary changes, it's time to save and reboot.
Navigate to the "Exit" or "Save & Exit" tab.
Select "Save Changes and Exit" or press the designated key (often F10).
Confirm the changes when prompted.
Your computer will restart with Secure Boot and TPM 2.0 enabled.
Step 5: Verify Secure Boot is On
After your PC restarts, you can do one final check to make sure everything is working.
Go back to the System Information window by pressing Windows key + R and typing msinfo32.
Look at the "Secure Boot State" line again.
It should now say "On".
Congratulations! You have successfully enabled Secure Boot and should now be able to launch Valorant and play without the Vanguard error.
10 Related FAQ Questions
How to check if my computer supports Secure Boot?
You can check in System Information. If the "Secure Boot State" shows "Unsupported," your PC may not be compatible.
Reminder: Short breaks can improve focus.
How to convert my disk from MBR to GPT?
You can use the built-in Windows tool mbr2gpt.exe
. Open Command Prompt as an administrator and run mbr2gpt /validate /allowFullOS
and then mbr2gpt /convert /allowFullOS
. Always back up your data first!
How to find the BIOS key for my PC?
The BIOS key is specific to your motherboard manufacturer. Common keys are Del, F2, F10, or F12. You can search online for "BIOS key for [your PC/motherboard model]".
How to re-enter the BIOS if I missed the key press?
Simply restart your computer again and keep pressing the key as soon as the screen turns on. The Advanced Startup method from Windows is a more reliable alternative.
How to enable TPM 2.0 if the option is missing in my BIOS?
Some motherboards may hide the TPM setting. Look for options like "Trusted Computing," "PTT," or "fTPM" under the Security or Advanced tabs. You may also need to update your BIOS to the latest version.
How to fix "Secure Boot is enabled but Windows still reports it as off"?
Tip: Read once for gist, twice for details.
First, double-check that you've saved the changes in the BIOS. If the issue persists, you might need to reset your BIOS settings to default or check for a "Secure Boot Mode" setting that needs to be set to "Standard."
How to disable Secure Boot if I need to?
You can follow the same steps to enter the BIOS and simply change the Secure Boot setting from "Enabled" to "Disabled."
How to fix a grayed-out Secure Boot option in BIOS?
This often happens if your Boot Mode is set to "Legacy" or if CSM is enabled. You must switch to UEFI mode and disable CSM before you can enable Secure Boot.
How to run Valorant as an administrator to fix the issue?
Right-click the Valorant shortcut and select "Run as administrator." For a permanent change, right-click the shortcut, go to "Properties," click the "Compatibility" tab, and check the box for "Run this program as an administrator."
How to contact Riot Games support for more help?
If you have followed all the steps and are still facing issues, you can visit the official Riot Games support website and submit a ticket. They have a dedicated support team to assist with Vanguard and game-related issues.