Anti-Cheat TPM 2.0 & Secure Boot BIOS Navigator
Resolve Vanguard VAN 9003, VAN 1067, and FACEIT TPM 2.0 restrictions. Step-by-step verified BIOS navigation paths for ASUS, MSI, Gigabyte, and ASRock motherboards.
Verify Your TPM 2.0 & Secure Boot Status in Windows (1-Click CMD)
Before rebooting into BIOS, run these safe read-only PowerShell commands to verify whether your operating system already recognizes TPM 2.0 and Secure Boot.
Get-Tpm
Open PowerShell → paste command. If TpmPresent: True and TpmReady: True, your CPU firmware TPM is operational.
Confirm-SecureBootUEFI
If output is True, Secure Boot is active. If False or throws an error, Secure Boot is disabled in BIOS or Windows is in Legacy MBR mode.
Motherboard BIOS Setup Walkthrough (ASUS, MSI, Gigabyte, ASRock)
Select your motherboard brand to reveal the exact menu paths to enable fTPM / PTT and Secure Boot without bricking your PC boot sequence.
ASUS (ROG / TUF / Prime)
ASUS UEFI BIOS Utility (EZ & Advanced Mode)
Enable Firmware TPM
Advanced (F7) → Trusted Computing (or AMD fTPM Configuration) → Security Device Support: [Enable] → TPM Device Selection: [Firmware TPM]
Disable CSM (Compatibility)
Boot → CSM (Compatibility Support Module) → Launch CSM: [Disabled]
Enable Secure Boot
Boot → Secure Boot → OS Type: [Windows UEFI mode] → Key Management: [Install Default Secure Boot Keys]
Manufacturer Specific Tip: If Secure Boot state stays "Disabled" after enabling, change OS Type to "Other OS", restart, then change back to "Windows UEFI mode".
Major Anti-Cheat Engine Requirements Matrix (2026)
Compare which competitive games mandate TPM 2.0 and Secure Boot on Windows 11 vs Windows 10.
| Anti-Cheat Engine | Popular Games | TPM 2.0 (Win 11) | Secure Boot | Kernel-Level | Enforcement Policy |
|---|---|---|---|---|---|
| Riot Vanguard | Valorant, League of Legends | MANDATORY | MANDATORY | Ring 0 Driver | Windows 11 requires TPM 2.0 + Secure Boot + UEFI. Throws VAN 9003 or VAN 1067 if disabled. |
| FACEIT Anti-Cheat | Counter-Strike 2 (FACEIT Comp) | MANDATORY | MANDATORY | Ring 0 Driver | Requires TPM 2.0 and Secure Boot enabled on all Windows 11 installations. Strict Hypervisor integrity. |
| Easy Anti-Cheat (EAC) | Apex Legends, Fortnite, Rust, Elden Ring, War Thunder | Optional | Recommended | Ring 0 Driver | Does not strictly mandate TPM 2.0 yet, but Fortnite tournaments enforce Secure Boot on Win 11. |
| BattlEye (BE) | Rainbow Six Siege, Escape from Tarkov, Destiny 2, DayZ | Optional | Recommended | Ring 0 Driver | Hardware GUID based. Secure Boot recommended to prevent EFI bootkit interception. |
| EA Anti-Cheat (EAAC) | EA SPORTS FC 25, Battlefield 2042, F1 24 | MANDATORY | MANDATORY | Ring 0 Driver | Throws "Secure Boot is not enabled on this machine" error on launch if BIOS is in CSM mode. |
| Ricochet Anti-Cheat | Call of Duty: Black Ops 6, Warzone | MANDATORY | MANDATORY | Ring 0 Driver | Enforces Secure Boot on Windows 11 to validate kernel-level driver signatures. |
Common Errors Resolved by Enabling TPM 2.0 & Secure Boot
"This build of Vanguard requires Secure Boot to be enabled in order to play." Enabling Secure Boot in your motherboard BIOS permanently resolves this.
Occurs on Windows 11 when Secure Boot is enabled but TPM 2.0 (Intel PTT / AMD fTPM) is either disabled or running outdated BIOS firmware.
EA Anti-Cheat terminates launch immediately if UEFI Secure Boot is not in User/Deployed mode. Setting BIOS Mode to strictly "UEFI" fixes it.
FACEIT enforces TPM 2.0 to bind player hardware identity and prevent hardware spoofing in competitive Counter-Strike 2.