Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →If VALORANT displays a Vanguard error about Secure Boot or TPM, the usual fix is to boot Windows in UEFI mode, enable Secure Boot and TPM 2.0 in your PC’s UEFI firmware, then verify the result inside Windows. Do not switch from Legacy/CSM to UEFI blindly: an older MBR installation may stop booting until it is converted to GPT.
Vanguard’s checks can change, so use the exact notification shown on your PC and Riot’s current Vanguard security requirements as the final authority.
As an Amazon Associate I earn from qualifying purchases.
Check Secure Boot and TPM before changing BIOS settings
You may not need to change anything if the required features are already active.
Check UEFI and Secure Boot
- Press Windows + R.
- Enter
msinfo32and press Enter. - In System Summary, find BIOS Mode and Secure Boot State.
| What you see | What it means |
|---|---|
| BIOS Mode: UEFI Secure Boot State: Off |
Usually ready for Secure Boot to be enabled in UEFI firmware. |
| BIOS Mode: UEFI Secure Boot State: On |
Secure Boot is already active. Check TPM and the exact Vanguard message instead. |
| BIOS Mode: Legacy | Do not simply enable Secure Boot. The Windows installation may use MBR/Legacy boot and may need conversion to GPT/UEFI first. |
Secure Boot is a UEFI firmware feature. It allows trusted, digitally signed boot software to load and helps prevent bootkits and rootkits from loading before Windows. It is not enabled through an ordinary Windows Settings toggle. See Microsoft’s Secure Boot guidance.
#1 Best Overall
- KEYBOARD: The keyboard works for Windows with hot keys that enable easy access to Media, My Computer, Mute, Volume up/down, and Calculator
- EASY SETUP: Experience simple installation with the USB wired connection
- VERSATILE COMPATIBILITY: This keyboard is designed to work with multiple Windows versions, including Vista, 7, 8, 10 offering broad compatibility across devices.
- SLEEK DESIGN: The elegant black color of the wired keyboard complements your tech and decor, adding a stylish and cohesive look to any setup without sacrificing function.
- FULL-SIZED CONVENIENCE: The standard QWERTY layout of this keyboard set offers a familiar typing experience, ideal for both professional tasks and personal use.
Check TPM 2.0
- Press Windows + R.
- Enter
tpm.mscand press Enter. - Confirm that the TPM is ready for use and that Specification Version is 2.0.
You can also open Windows Security > Device security > Security processor. If Windows cannot find a security processor, TPM may be unsupported, disabled in UEFI, or dependent on a firmware update. Microsoft explains these possibilities in its Device security documentation.
Prepare safely before entering UEFI
- Save your work and close applications.
- Back up important files.
- Have your BitLocker or device-encryption recovery key available. A firmware or boot-mode change can trigger BitLocker recovery.
- Identify the exact PC, laptop, motherboard model, and—where applicable—motherboard revision.
- Photograph or record relevant existing firmware settings.
- Change only boot security and TPM-related options. Do not alter CPU voltage, memory timings, RAID mode, SATA mode, or boot-device priority unless the manufacturer’s instructions specifically require it.
- Do not clear the TPM casually. Clearing it is not the normal way to enable TPM 2.0 and can create recovery or credential problems.
Firmware menus differ significantly between ASUS, MSI, Gigabyte, ASRock, Dell, HP, Lenovo, and individual laptop models. Use the manufacturer’s support page for model-specific labels and recovery instructions.
Enter UEFI firmware from Windows 11
The safest general route is Windows Advanced startup:
- Open Settings.
- Select System > Recovery.
- Beside Advanced startup, select Restart now.
- Choose Troubleshoot.
- Select Advanced options.
- Choose UEFI Firmware Settings.
- Select Restart.
If that option is unavailable, restart the computer and use the manufacturer’s firmware key. Common keys include F2, F12, Delete, Esc, and F1, but the correct key depends on the device.
Enable UEFI mode, Secure Boot, and TPM 2.0
There is no universal BIOS menu path. Search the Boot, Security, Advanced, Authentication, or Trusted Computing sections for equivalent settings.
Rank #2
- All-day Comfort: The design of this standard keyboard creates a comfortable typing experience thanks to the deep-profile keys and full-size standard layout with F-keys and number pad
- Easy to Set-up and Use: Set-up couldn't be easier, you simply plug in this corded keyboard via USB on your desktop or laptop and start using right away without any software installation
- Compatibility: This full-size keyboard is compatible with Windows 7, 8, 10 or later, plus it's a reliable and durable partner for your desk at home, or at work
- Spill-proof: This durable keyboard features a spill-resistant design (1), anti-fade keys and sturdy tilt legs with adjustable height, meaning this keyboard is built to last
- Plastic parts in K120 include 51% certified post-consumer recycled plastic*
| Function | Possible firmware names | Typical setting |
|---|---|---|
| UEFI boot | UEFI/Legacy Boot, Boot Mode, Windows UEFI Mode | UEFI, UEFI Only, or Windows UEFI Mode |
| Legacy compatibility | CSM, Compatibility Support Module, Legacy Boot | Disabled, but only when Windows is prepared for UEFI |
| Secure Boot | Secure Boot, Secure Boot Control, OS Type | Enabled, On, or Windows UEFI Mode |
| Intel firmware TPM | Intel Platform Trust Technology, Intel PTT | Enabled |
| AMD firmware TPM | AMD fTPM, AMD CPU TPM, Firmware TPM | Enabled |
| General TPM support | Security Device Support, TPM Device Selection, Trusted Computing | Enabled; select firmware TPM where offered |
1. Set UEFI boot mode
If msinfo32 reported BIOS Mode: UEFI, disable Legacy or CSM support if it is still enabled. Select UEFI, UEFI Only, or Windows UEFI Mode where available.
If Windows currently reports BIOS Mode: Legacy, stop here. Switching modes without preparing the Windows disk can make the installation unbootable. Back up your data and review Microsoft’s MBR2GPT documentation or your manufacturer’s conversion procedure. After a successful conversion, change the firmware to UEFI and continue.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errors2. Enable Secure Boot
Set Secure Boot or Secure Boot Control to Enabled. Some firmware uses an OS Type setting; choose the Windows or UEFI profile rather than an “Other OS” profile.
If Secure Boot is in Setup Mode, reports that keys are missing, or refuses to activate, look for Install Default Secure Boot Keys, Restore Factory Keys, or Load Default Keys. Use this only when the firmware indicates that the keys are absent. Do not delete or clear existing keys without a specific manufacturer instruction.
3. Enable TPM 2.0
On Intel systems this is commonly Intel PTT. On AMD systems it is commonly AMD fTPM or Firmware TPM. Other firmware may call it Security Device Support, TPM Device Selection, or Trusted Computing.
Rank #3
- A plug-and-play USB connection with Low-profile keys give you a quiet, comfortable typing experience
- Simple Wired USB Connection,You will enjoy a comfortable and quiet typing experience
- The keyboard for business and office working is the budget-friendly keyboard that is built for longer use
- Low profile keys for a more comfortable and quiet keystroke, desktop-centric design, splash resistant
Modern Intel and AMD systems often provide TPM functionality through the processor firmware, so a separate physical TPM module is frequently unnecessary. That is model-dependent, however; consult the manufacturer if no compatible TPM option exists.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Save the changes and verify them in Windows
- Choose Save Changes and Exit.
- Let Windows start normally.
- Run
msinfo32again. - Confirm BIOS Mode: UEFI and Secure Boot State: On.
- Run
tpm.msc. - Confirm the TPM is ready and reports Specification Version: 2.0.
- Restart Windows once more before launching VALORANT.
A BIOS checkbox is not proof that the feature is active. The state reported after Windows boots is the important result.
What VAN9001 and VAN9003 commonly indicate
- VAN9001 is commonly associated with TPM 2.0 being unavailable or disabled.
- VAN9003 is commonly associated with UEFI Secure Boot being disabled.
These associations are not a permanent substitute for reading the complete notification. Vanguard requirements and error handling can change. Check Riot’s current support page and follow the exact restriction shown by the client.
If Windows says Secure Boot is still off
- Re-enter UEFI and confirm that CSM or Legacy support is disabled.
- Confirm that the system is using UEFI-only boot mode.
- Select the Windows UEFI operating-system profile if your firmware offers one.
- If the firmware says keys are missing, install or restore the default Secure Boot keys.
- Save the settings and boot into Windows again.
- Recheck
msinfo32.
Other possibilities include an unsaved setting, an outdated firmware version, or changing a setting on the wrong firmware page.
If Windows will not boot after the change
Return to UEFI and temporarily restore the previous boot mode as a recovery step. Do not repeatedly change unrelated firmware options and do not clear the TPM as a first response.
Recommended Free Tools
Rank #4
- Reliable Plug and Play: The USB receiver provides a reliable wireless connection up to 33 ft (1), so you can forget about drop-outs and delays and you can take it wherever you use your computer
- Type in Comfort: The design of this keyboard creates a comfortable typing experience thanks to the low-profile, quiet keys and standard layout with full-size F-keys, number pad, and arrow keys
- Durable and Resilient: This full-size wireless keyboard features a spill-resistant design (2), durable keys and sturdy tilt legs with adjustable height
- Long Battery Life: MK270 combo features a 36-month keyboard and 12-month mouse battery life (3), along with on/off switches allowing you to go months without the hassle of changing batteries
- Easy to Use: This wireless keyboard and mouse combo features 8 multimedia hotkeys for instant access to the Internet, email, play/pause, and volume so you can easily check out your favorite sites
If BitLocker or device encryption displays a recovery screen, enter the recovery key. Retrieve it from your Microsoft account when it is linked there, or contact your organization’s administrator on a managed PC. Microsoft’s BitLocker documentation provides recovery guidance.
Secure Boot and TPM are correct, but VALORANT still refuses to launch
First restart Windows and verify both tools again. Then check:
- Windows, chipset drivers, and PC or motherboard firmware are current.
- Riot Vanguard is installed and running normally.
- The complete Vanguard notification, rather than only its error number, has been identified.
- Riot’s current instructions do not require additional protections such as VBS, HVCI/Memory Integrity, IOMMU, or Pre-Boot DMA Protection.
- Your motherboard or laptop does not have a firmware issue covered by a newer BIOS update.
Riot’s December 18, 2025 Vanguard motherboard-security update describes cases where firmware fails to initialize or report pre-boot DMA protection correctly. In those cases, a BIOS update may be required even when Secure Boot and TPM appear enabled in Windows.
Updating the BIOS
Only download firmware from the PC or motherboard manufacturer. Match the exact model and revision, connect the system to reliable power, and do not interrupt the update. A BIOS update can resolve compatibility problems but carries more risk than changing a single setting. Follow the manufacturer’s recovery procedure if the update fails.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11When Secure Boot cannot be enabled
Legacy BIOS or MBR storage
A Legacy installation may require conversion from MBR to GPT before it can boot through UEFI Secure Boot. Back up important data, keep the BitLocker recovery key available, and use Microsoft’s MBR2GPT instructions or the manufacturer’s supported process. Do not treat “switch Legacy to UEFI” as a complete conversion procedure.
Best Value
- Durable and Reliable: This USB keyboard features a curved space bar, spill-resistant design (2), durable keys that can withstand 10 million keystrokes, and sturdy, adjustable tilt legs
- Comfortable, Familiar Typing: You’ll enjoy a comfortable and familiar typing experience thanks to the deep-profile keys and standard layout with full-size F-keys and number pad
- Full-size Sculpted Mouse: The high-definition optical USB mouse puts comfort and control in your hands with smooth, accurate tracking and an ambidextrous shape that feels good hour after hour
- Simple Set-Up: Simply plug the keyboard and mouse into the USB ports on your desktop, laptop, or netbook and you're ready to work; compatible with Windows 7, 8, 10 or later
- Clear and Convenient: The bold, bright white and long-lasting characters make the keys on this PC or laptop keyboard easy to read and extra durable
Older or unsupported hardware
Some systems lack UEFI Secure Boot, TPM 2.0, a compatible firmware TPM, or a BIOS update that supports them. A random plug-in TPM is not a guaranteed solution: modules are motherboard-specific and may not make the system compatible with Windows 11 or Vanguard.
Dual-boot systems and specialized hardware
Secure Boot can affect Linux distributions, older operating systems, unsigned bootloaders, some expansion cards, and custom boot configurations. If you use one of these setups, consult the operating-system or hardware vendor before changing Secure Boot. Microsoft notes that some configurations may require it to be disabled; see its firmware guidance.
Is this related to Microsoft’s 2026 Secure Boot certificate changes?
Microsoft says certificates issued in 2011 begin expiring in June 2026 and that supported systems are being updated. That is a separate Windows firmware-signing issue and is not automatically the same as a VALORANT Vanguard error. Follow Microsoft’s update guidance for certificate-related messages, and Riot’s guidance for Vanguard restrictions.
Frequently Asked Questions
Can I play VALORANT without Secure Boot on Windows 11?
Sometimes, depending on the Vanguard check affecting your PC. If the client specifically requires Secure Boot, you must meet that requirement or follow Riot’s current support instructions; there is no reliable bypass.
Do I need TPM 2.0 as well as Secure Boot?
Vanguard may require both. Check msinfo32, tpm.msc, and the complete Vanguard notification rather than assuming one setting will resolve every error.
Is Secure Boot the same as UEFI?
No. UEFI is the modern firmware and boot mode; Secure Boot is a security feature within UEFI. Secure Boot normally requires Windows to boot through UEFI rather than Legacy/CSM.
Will enabling Secure Boot delete my files?
Enabling the setting normally does not delete files, but an incompatible Legacy/MBR boot configuration can prevent Windows from starting. Back up your data first and keep your BitLocker recovery key available.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Does Secure Boot affect FPS?
Secure Boot is a boot-security feature, not a graphics-performance setting. Its practical effect is usually on startup and security compatibility rather than game performance, although individual hardware and firmware configurations can differ.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
