Ready to level up your gaming experience and solve that pesky "Vanguard requires Secure Boot" error? You're in the right place. Secure Boot is a crucial security feature that ensures your PC only runs trusted software during startup. Riot Games' anti-cheat software, Vanguard, relies on this to verify that your system is a secure environment, free from malicious bootkits and other cheats that could compromise the integrity of the game.
This comprehensive, step-by-step guide will walk you through the entire process of enabling Secure Boot on your PC. It's a journey into your computer's core settings, but don't worry—we'll make it as easy as possible.
Step 1: Check Your Current Status - Are You Even Ready?
Before you dive into the BIOS, let's see where you stand. It's like checking the fuel in your car before a long drive. We need to confirm two things: your BIOS Mode and your Secure Boot State.
1.1. Check Your BIOS Mode and Secure Boot State
Press the Windows Key + R to open the Run dialog box.
Type
msinfo32and press Enter.In the System Information window that opens, look for these two entries in the right-hand panel:
BIOS Mode: This should say UEFI. If it says Legacy, you have an extra step to take. Secure Boot is a feature of UEFI, and it cannot be enabled in Legacy BIOS mode.
Secure Boot State: This should say On. If it says Off or Unsupported, you'll need to enable it. If it says Unsupported, your hardware might not be compatible.
1.2. Check Your TPM 2.0 Status
Vanguard also requires TPM 2.0. Let's quickly check if it's enabled.
Press the Windows Key + R again.
Type
tpm.mscand hit Enter.A new window will appear. If you see a message that says "The TPM is ready for use," you're all set! If not, you may need to enable it in your BIOS, similar to Secure Boot.
If your BIOS Mode is already UEFI and your Secure Boot State is Off, you can jump directly to Step 3. If your BIOS Mode is Legacy, keep reading!
Step 2: Convert Your Disk to GPT (If Needed)
This is a critical step if your BIOS Mode is set to Legacy. Legacy mode typically uses the MBR (Master Boot Record) partition style, which is incompatible with UEFI and Secure Boot. We need to convert your disk to GPT (GUID Partition Table). Warning: Always back up your important data before attempting this.
2.1. Check Your Disk's Partition Style
Press Windows Key + X and select Disk Management.
Find the disk where your Windows OS is installed (usually Disk 0, labeled C:).
Right-click on the disk name (e.g., "Disk 0") and select Properties.
Go to the Volumes tab and look at Partition style.
If it says GUID Partition Table (GPT), you are good to go. Skip to Step 3.
If it says Master Boot Record (MBR), you need to convert it.
2.2. Convert MBR to GPT using mbr2gpt
This is a built-in Windows tool that makes the conversion safe and easy.
Open the Start Menu, search for cmd, right-click on Command Prompt, and select Run as administrator.
In the command prompt, type
mbr2gpt /validate /disk:0 /allowFullOSand press Enter. (Note: Replacedisk:0with the correct disk number from Disk Management if needed).If the validation is successful, you'll see a message that says "Validation completed successfully."
Now, type
mbr2gpt /convert /disk:0 /allowFullOSand press Enter.The conversion process will begin. It should be relatively quick. Once it's done, you'll see a message that it was successful.
Congratulations! You've just converted your disk to GPT. Now you're ready to enable UEFI and Secure Boot.
Step 3: Enter Your BIOS/UEFI Firmware Settings
This is where the real work happens. You need to restart your computer and access the BIOS/UEFI settings.
Restart your computer.
As your computer starts up, you'll need to press a specific key repeatedly to enter the BIOS. This key varies depending on your motherboard manufacturer. Common keys include:
Delete
F2
F10
F12
Esc
Look for a message on the screen during the initial boot, such as "Press DEL to enter setup" or "Press F2 for BIOS." If you miss it, a quick online search for "BIOS key for [Your Motherboard/Laptop Model]" will tell you what you need to know.
Step 4: Configure Your Boot Settings in the BIOS
Once you're in the BIOS, be careful and follow the steps precisely. The BIOS interface is usually controlled with the keyboard's arrow keys and Enter key, as the mouse might not work.
4.1. Disable CSM/Legacy Mode
This is the first and most important step to enable Secure Boot.
Navigate to the Boot or Boot Configuration tab.
Look for an option called CSM (Compatibility Support Module) or Legacy Support.
Disable this option. Disabling CSM forces your system to use UEFI mode.
4.2. Enable Secure Boot
Now, find the Secure Boot setting. It can be under the Boot, Security, or Authentication tab.
Change the setting from Disabled to Enabled.
You might also see an option for OS Type. Make sure it's set to Windows UEFI mode or a similar option.
In some motherboards, you might need to go to Key Management and select Install Default Secure Boot Keys to activate the feature.
4.3. Save and Exit
Once you've made the changes, navigate to the Exit tab.
Select Save Changes and Exit or Save & Exit Setup. The key for this is often F10.
Confirm your choice to save and exit. Your computer will restart.
Step 5: Verify That Secure Boot is Now Enabled
After your computer restarts, you should be able to launch Windows normally. Now, let's double-check our work.
Open the Run dialog box (Windows Key + R).
Type
msinfo32and press Enter.Look at the Secure Boot State. It should now say On.
You can also verify the TPM status again with
tpm.msc.
If both are enabled, you should be able to launch Valorant and play without any issues!
Related FAQ
Here are some quick answers to common questions about Secure Boot and Vanguard:
How to check if my motherboard supports Secure Boot?
You can check your motherboard's manual or the manufacturer's website for specifications. Additionally, in msinfo32, if the "Secure Boot State" says "Unsupported," it indicates that your hardware does not support it.
How to fix the "Vanguard requires UEFI Secure Boot" error on Windows 10? The process is the same for both Windows 10 and 11. You need to check your BIOS mode, convert your disk to GPT if necessary, disable Legacy/CSM mode in the BIOS, and then enable Secure Boot.
How to enter the BIOS/UEFI settings? Restart your computer and repeatedly press a specific key like F2, F10, F12, Del, or Esc as soon as you see the manufacturer's logo. The key is specific to your motherboard or laptop model.
How to change my BIOS mode from Legacy to UEFI? You need to enter your BIOS settings (Step 3), navigate to the Boot options, and disable the "Compatibility Support Module" (CSM) or "Legacy Support" option. This will force your system to boot in UEFI mode.
How to check if my Windows installation is MBR or GPT? Open Disk Management (press Windows Key + X and select Disk Management), right-click on your OS disk, go to Properties, and then the Volumes tab. The "Partition style" will tell you if it's MBR or GPT.
How to convert my MBR disk to GPT without losing data?
Windows has a built-in tool called mbr2gpt. You can use it from an administrative Command Prompt by running the mbr2gpt /convert command.
How to fix Secure Boot if the option is grayed out in BIOS? This often happens if CSM (Compatibility Support Module) is enabled. You need to disable CSM first. In some cases, updating your BIOS to the latest version can also resolve this issue.
How to deal with "Secure Boot state: Unsupported"? If your Secure Boot state is "Unsupported," your hardware does not have the capability to use this feature. This is common on older motherboards and systems. You might not be able to play Valorant with Vanguard in this case.
How to enable TPM 2.0? This is also done in the BIOS. The option is usually under a Security or Advanced tab and may be called "TPM," "fTPM," or "PTT." You need to enable it and save the changes.
How to avoid issues after enabling Secure Boot? Make sure your disk is converted to GPT before you enable Secure Boot. If you enable it on an MBR disk, your system will likely fail to boot. Always back up your data before making changes in the BIOS.
