Valorant TPM 2.0 & Secure Boot (VAN 1067 / 9003) Diagnostic

Q: Can I bypass TPM 2.0 for Valorant on Windows 11?

No. Riot Vanguard operates as a kernel-mode driver (vgk.sys) that queries hardware cryptographic registers directly. If TPM 2.0 is not present on Windows 11, Vanguard refuses to launch.

Step-by-step UEFI BIOS walkthrough for ASUS, MSI, Gigabyte, and ASRock motherboards. Resolve Vanguard VAN 1067, VAN 9003, and factory key enrollment errors in 5 minutes without reinstalling Windows.

1. Your Vanguard Error Code

2. Motherboard Manufacturer

3. Processor Architecture

Quick Verification (PowerShell Admin)

Run this one-liner in PowerShell as Administrator to test whether TPM 2.0 and Secure Boot are currently recognized by Windows:

$tpm = Get-Tpm; $sb = Confirm-SecureBootUEFI; [PSCustomObject]@{ 'TPM_Present' = $tpm.TpmPresent; 'TPM_Ready' = $tpm.TpmReady; 'SecureBoot_Active' = $sb } | Format-List

Expected Healthy Output:TPM_Present: True • TPM_Ready: True • SecureBoot_Active: True

Part 1: Enable TPM 2.0 (AMD fTPM configuration -> Firmware TPM)

1.Press Del or F2 during startup to enter ASUS UEFI BIOS

2.Press F7 to enter "Advanced Mode"

3.Navigate to "Advanced" tab -> "AMD fTPM configuration"

4.Set "TPM Device Selection" to [Firmware TPM] or [Enable AMD fTPM]

Part 2: Secure Boot & Disable CSM

1.Navigate to "Boot" tab -> "Secure Boot"

2.Set "OS Type" to [Windows UEFI mode] (NOT Other OS)

3.Go to "Key Management" -> Select "Install default Secure Boot keys"

4.Ensure "CSM (Compatibility Support Module)" is set to [Disabled]

Key Management Fix: "Secure Boot is Enabled in BIOS, but Windows says Disabled"

If Secure Boot state stays "Disabled" in Windows, click "Clear Secure Boot Keys" then "Install Default Keys" in ASUS Key Management.

Root Cause of the Loop:If you converted an older Windows installation from MBR to GPT or cleared your CMOS, the Platform Key (PK) was wiped. Vanguard requires active Factory Keys. In BIOS Key Management, selecting "Install Default Keys" or "Enroll Factory Keys" activates User Mode and clears VAN 1067 permanently.

Frequently Asked Questions

Will enabling TPM 2.0 or Secure Boot delete my files?

No. Enabling firmware TPM (fTPM/PTT) and Secure Boot does not alter or erase your personal files or games. However, ensure your Windows drive is formatted as GPT (not MBR) before disabling CSM. You can check this by running `mbr2gpt /validate /allowFullOS` in CMD.

Can I bypass TPM 2.0 for Valorant on Windows 11?

No. While Windows 11 installation bypasses exist (Rufus bypasses), Riot Vanguard operates as a kernel-mode driver (vgk.sys) that queries hardware cryptographic registers directly. If TPM 2.0 is not present on Windows 11, Vanguard refuses to launch the game client.

What is VAN 9005 and how do I fix it?

VAN 9005 occurs when Windows 11 requires Virtualization-Based Security (VBS) but your CPU virtualization feature is disabled in BIOS. Enter BIOS and enable "SVM Mode" on AMD processors or "Intel Virtualization Technology (VT-x)" on Intel processors.