How to Enable TPM 2.0 and Secure Boot for Windows 11 & Valorant: Complete UEFI Setup Guide

Modern PC gaming security and operating system integrity require hardware-enforced trust. Both Windows 11 and Riot Games' Vanguard anti-cheat engine enforce Trusted Platform Module (TPM) 2.0 and UEFI Secure Boot. When either setting is disabled or misconfigured in motherboard firmware, players encounter errors such as VAN9001 and VAN9003, while clean OS installers display the prompt: "This PC doesn't currently meet Windows 11 system requirements."

You do not need to buy a physical hardware module. Modern Intel and AMD processors manufactured since 2017 feature integrated firmware TPM (Intel PTT or AMD fTPM). Here is the safe, verified procedure to enable them.

Crucial Pre-Flight Check: Verify Drive Partition Style (MBR vs GPT)

Warning: Secure Boot strictly requires a UEFI environment with a GPT (GUID Partition Table) formatted boot drive. If your Windows installation runs on legacy MBR, simply disabling CSM (Compatibility Support Module) will result in a "No bootable device found" error.

1. Press Win + X and open Disk Management.
2. Right-click your main boot drive (Disk 0) and choose Properties.
3. Switch to the Volumes tab. Look at Partition style.
4. If it displays GUID Partition Table (GPT), you can safely proceed directly to the BIOS configuration.
5. If it displays Master Boot Record (MBR), open PowerShell as Admin and run Windows' native non-destructive conversion tool:

   mbr2gpt /validate /allowFullOS
   mbr2gpt /convert /allowFullOS

   Once conversion finishes with success status, reboot your machine.

Motherboard BIOS Configuration Matrix

Reboot your PC and repeatedly press Del or F2 as soon as the manufacturer logo appears to enter the UEFI BIOS interface. Press F7 if prompted to enter Advanced Mode.

Step-by-Step BIOS Adjustments

1. Disable CSM (Compatibility Support Module): Under the Boot tab, find CSM Support and switch it to Disabled. Secure Boot cannot run alongside legacy BIOS emulation.
2. Enable Firmware TPM:
   • On AMD platforms: Set AMD fTPM switch to AMD CPU fTPM (or Firmware TPM).
   • On Intel platforms: Set Intel Platform Trust Technology (PTT) to Enabled.
3. Enable Secure Boot: Navigate to the Secure Boot menu. Set Secure Boot Mode to Standard and toggle Secure Boot to Enabled.

   Note on "Setup Mode" error: If the BIOS displays "Secure Boot can be enabled when system in user mode", select Key Management > Enroll Factory Default Keys, then enable Secure Boot.

4. Press F10 to save changes and reboot.

Verifying Hardware Status Inside Windows

Once your desktop loads, verify both security features are functioning correctly:

1. Check TPM 2.0 Status

Press Win + R, type tpm.msc, and hit Enter. The window should state: "The TPM is ready for use" with Specification Version 2.0.

2. Check Secure Boot State

Press Win + R, type msinfo32, and hit Enter. Under System Summary, verify:

• BIOS Mode: UEFI
• Secure Boot State: On

With these parameters verified, Vanguard errors disappear, Valorant launches normally, and your system maintains maximum hardware-backed security against bootkits and kernel-level exploits.

In-Depth Hardware Benchmarks, System Stability, and Diagnostic Steps

System performance optimization and component reliability require a methodical approach to diagnostic telemetry and firmware calibration. Operating systems frequently enable background hypervisor isolation and aggressive scheduling policies that, while improving platform security, introduce measurable frame-time variance and thermal throttles during sustained heavy throughput tasks.

Long-Term Maintenance and Reliability Guidelines

Conducting routine preventative maintenance—including thermal paste reapplications, heatsink cleaning, and storage SMART health audits—prevents sudden hardware degradation and guarantees stable, high-performance operation over multi-year deployment cycles.