Most Windows 11 VALORANT security errors are fixed only when all three conditions are true: TPM 2.0 is ready for use, Windows is booting in UEFI mode, and Secure Boot State is On. Check those states in Windows before changing BIOS settings. If they are already correct, update the exact PC or motherboard firmware and follow any current VAN:Restriction instructions from Riot.
Do not enable Secure Boot blindly: a Windows installation using Legacy mode and an MBR system disk can stop booting after the change.
When resolving VALORANT Secure Boot or TPM errors, Outbyte PC Repair can check Windows settings and missing updates as an optional step.
As an Amazon Associate I earn from qualifying purchases.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →First, identify the Vanguard error
| Error | What it usually indicates | Start here |
|---|---|---|
VAN9001 |
Vanguard cannot detect usable TPM 2.0. | Check tpm.msc and firmware TPM settings. |
VAN9003 |
Vanguard cannot verify Secure Boot or its UEFI configuration. | Check msinfo32 for BIOS Mode and Secure Boot State. |
VAN9005 |
Often relates to virtualization-based security or configuration compatibility. | Follow the exact message rather than disabling security features at random. |
VAN:Restriction |
A security or firmware condition does not meet Vanguard’s current baseline. | Read the specific restriction and check for a motherboard-firmware requirement. |
A restriction is not automatically an accusation of cheating. Riot says its current checks can identify systems whose configuration resembles setups used to bypass security requirements. Riot’s December 18, 2025 Vanguard update also describes pre-boot DMA/IOMMU issues caused by some motherboard firmware.
Check TPM 2.0 in Windows
- Press Windows key + R.
- Enter
tpm.mscand press Enter. - Confirm that the window says The TPM is ready for use.
- Confirm Specification Version: 2.0.
If Windows says Compatible TPM cannot be found, TPM may be disabled in UEFI, unsupported, or affected by outdated firmware. If the TPM is detected but not ready, restart Windows and check Windows Security → Device security → Security processor details.
#1 Best Overall
- The next-generation optical HERO sensor delivers incredible performance and up to 10x the power efficiency over previous generations, with 400 IPS precision and up to 12,000 DPI sensitivity
- Ultra-fast LIGHTSPEED wireless technology gives you a lag-free gaming experience, delivering incredible responsiveness and reliability with 1 ms report rate for competition-level performance
- G305 wireless mouse boasts an incredible 250 hours of continuous gameplay on just 1 AA battery; switch to Endurance mode via Logitech G HUB software and extend battery life up to 9 months
- Wireless does not have to mean heavy, G305 lightweight mouse provides high maneuverability coming in at only 3.4 oz thanks to efficient lightweight mechanical design and ultra-efficient battery usage
- The durable, compact design with built-in nano receiver storage makes G305 not just a great portable desktop mouse, but also a great laptop travel companion, use with a gaming laptop and play anywhere
TPM may be a firmware feature rather than a separate physical chip. Do not confuse a TPM that is enabled in firmware with one that Windows reports as ready. Microsoft’s Device Security documentation explains TPM states and warns that clearing the TPM can affect BitLocker and other protected credentials. Clearing it is not a routine first fix.
Optional PowerShell checks
Confirm-SecureBootUEFI
Get-TpmConfirm-SecureBootUEFI should return True. In the Get-Tpm output, look for TpmPresent and TpmReady. See Microsoft’s documentation for Confirm-SecureBootUEFI and Get-Tpm.
Free tools Windows power users keep installed
One-click scans. No signup required.
Check UEFI mode and Secure Boot
- Press Windows key + R.
- Enter
msinfo32. - Under System Summary, check:
BIOS Mode: UEFI
Secure Boot State: On- UEFI + On: Windows sees the expected boot configuration; investigate TPM readiness, firmware, or the exact Vanguard restriction.
- UEFI + Off: Secure Boot is disabled, its keys may be missing, or firmware settings are preventing activation.
- Legacy + Off: Do not simply enable Secure Boot. First determine whether the system disk is MBR or GPT.
UEFI is the modern firmware boot mode. CSM and Legacy compatibility modes can prevent Secure Boot from becoming active. Microsoft documents the relationship between UEFI, CSM, and Secure Boot in its Windows 11 and Secure Boot guidance.
Rank #2
- HERO Gaming Sensor: Next generation HERO mouse sensor delivers precision tracking up to 25600 DPI with zero smoothing, filtering or acceleration
- 11 programmable buttons and dual mode hyper-fast scroll wheel: The Logitech wired gaming mouse gives you fully customizable control over your gameplay
- Adjustable weights: Match your playing style. Arrange up to five 3.6 g weights for a personalized weight and balance configuration
- LIGHTSYNC technology: Logitech G LIGHTSYNC technology provides fully customizable RGB lighting that can also synchronize with your gaming (requires Logitech Gaming Software)
- Mechanical Switch Button Tensioning: A metal spring tensioning system and metal pivot hinges are built into left and right computer gaming mouse buttons for a crisp, clean click feel with rapid click feedback
Enter UEFI firmware settings
From Windows 11, open Settings → System → Recovery → Advanced startup → Restart now. Select Troubleshoot → Advanced options → UEFI Firmware Settings → Restart. Labels can vary by Windows build and manufacturer.
Enable TPM 2.0 in UEFI
Enter firmware setup and look under Security, Advanced, Trusted Computing, or a similar menu. Common names include:
- Intel: Intel PTT, Platform Trust Technology, or Security Device Support.
- AMD: AMD fTPM, Firmware TPM, or AMD PSP fTPM.
- Other motherboard labels: TPM Device, TPM State, or Security Device Support.
Enable the appropriate option, save, reboot, and check tpm.msc again. BIOS menus differ by model, firmware version, and motherboard revision, so use the manufacturer’s documentation for the exact device. Do not install a third-party TPM utility.
Rank #3
- Next-gen 12,000 DPI HERO optical sensor delivers unrivaled gaming performance, accuracy and power efficiency
- Advanced LIGHTSPEED wireless gaming mouse for super-fast 1 ms response time and faster than wired performance
- Ultra-long battery life gives you up to 250 hours of continuous gaming on a single AA battery
- Lightweight mechanical design and classic shape for maximum maneuverability, durability and comfort
- Compact, portable design with convenient built-in storage for included USB wireless receiver
Switch from Legacy/CSM to UEFI safely
If msinfo32 reports Legacy, first check the Windows system disk and back up important files. A Legacy/MBR installation may fail to boot when switched directly to UEFI.
Microsoft’s built-in conversion tool can validate and convert eligible installations:
mbr2gpt /validate /allowFullOS
mbr2gpt /convert /allowFullOS- Run validation before conversion.
- If validation succeeds, perform the conversion.
- Reboot into UEFI firmware.
- Disable CSM or Legacy Boot.
- Set UEFI as the boot mode and select Windows Boot Manager.
- Enable Secure Boot and verify the result in
msinfo32.
With multiple disks, make sure you are working with the correct system disk. BitLocker or device encryption may require the recovery key or temporary protection suspension. Do not make random BIOS changes after a failed conversion. Consult Microsoft’s MBR2GPT documentation or qualified support if you are not comfortable with boot and partition changes.
Rank #4
- ICONIC ERGONOMIC DESIGN WITH THUMB REST — PC gaming mouse favored by millions worldwide with a form factor that perfectly supports the hand while its buttons are optimally positioned for quick and easy access
- 11 PROGRAMMABLE BUTTONS — Assign macros and secondary functions across 11 programmable buttons to execute essential actions like push-to-talk, ping, and more
- HYPERSCROLL TILT WHEEL — Speed through content with a scroll wheel that free-spins until its stopped or switch to tactile mode for more precision and satisfying feedback that’s ideal for cycling through weapons or skills
- 11 RAZER CHROMA RGB LIGHTING ZONES — Customize each zone from over 16.8 million colors and countless lighting effects, all while it reacts dynamically with over 150 Chroma integrated games
- OPTICAL MOUSE SWITCHES GEN 2 — With zero unintended misclicks these switches provide crisp, responsive execution at a blistering 0.2ms actuation speed for up to 70 million clicks
Enable Secure Boot
- In UEFI, disable CSM or Legacy Boot.
- Choose UEFI only, if available.
- Set Windows Boot Manager as the first boot option.
- Enable Secure Boot.
- If offered, choose Install default Secure Boot keys, Restore factory keys, or the equivalent standard-key option.
- Save and reboot.
- Confirm
BIOS Mode: UEFIandSecure Boot State: Oninmsinfo32.
If BIOS says Secure Boot is enabled but Windows says Off, check CSM, the selected boot entry, missing default keys, an MBR system disk, and firmware updates. Avoid manually deleting or recreating Secure Boot keys unless the device manufacturer explicitly instructs you to do so.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →If TPM and Secure Boot already appear correct
- Restart Windows completely; do not rely only on sleep or Fast Startup.
- Install available Windows updates.
- Install the latest official BIOS/UEFI update for the exact laptop, prebuilt PC, or motherboard model.
- After updating, recheck TPM readiness, UEFI mode, Secure Boot, and boot order because firmware updates can reset settings.
- Read the precise
VAN:Restrictionmessage for requirements involving IOMMU, VBS, DMA protection, or motherboard firmware. - Only then reinstall Riot Vanguard.
- Reinstall VALORANT only if Vanguard repair or reinstallation does not resolve the launch failure.
Riot’s current motherboard-security guidance means a visible TPM toggle and Secure Boot setting may not be sufficient on affected firmware. Do not routinely disable VBS, Secure Boot, or other security features; follow the exact Vanguard instruction and weigh the security trade-off.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Update BIOS or UEFI safely
- Identify the exact laptop, prebuilt model, or motherboard model and revision.
- Download firmware only from the manufacturer’s official support page.
- Read release notes for TPM, Secure Boot, UEFI, IOMMU, DMA, or security fixes.
- Connect a laptop to AC power.
- Record current boot and security settings.
- Do not use firmware for a similar-looking model.
- Do not interrupt the update.
- Afterward, restore and verify TPM, UEFI, Secure Boot, and Windows Boot Manager settings.
There is no universal BIOS-flashing procedure. Follow the instructions for the exact manufacturer and model.
Best Value
- Pentakill, 5 DPI Levels - Geared with 5 redefinable DPI levels (default as: 500/1000/2000/3000/4000), easy to switch between different game needs. Dedicated demand of DPI options between 500-8000 is also available to be processed by software.
- Any Button is Reassignable - 11 programmable buttons are all editable with customizable tactical keybinds in whatever game or work you are engaging. 1 rapid fire + 2 side macro buttons offer you a better gaming and working experience.
- Comfort Grip with Details - The skin-friendly frosted coating is the main comfort grip of the mouse surface, which offers you the most enjoyable fingerprint-free tactility. The left side equipped with rubber texture strengthened the friction and made the mouse easier to control.
- 5 Decent Backlit Modes - Turn the backlit on and make some kills in your gaming battlefield. The hyped dynamic RGB backlit vibe will never let you down when decorating your gaming space, it would be better with other Redragon accessories with lights on.
- Fatigue Killer with Ergonomic Design - Solid frame with a streamlined and general claw-grip design offers a satisfying and comfortable gaming experience with less fatigue even though after hours of use.
Fix a “no boot device” result
If enabling Secure Boot causes Windows not to start, the installation may still be Legacy/MBR or the firmware may be selecting the wrong entry.
- Return temporarily to the previous boot mode if necessary.
- Confirm whether the system disk is MBR or GPT.
- Make sure Windows Boot Manager is selected.
- If eligible, use Microsoft’s MBR2GPT process.
- After conversion, use UEFI mode and enable Secure Boot again.
If the system remains unbootable, stop changing settings and use the manufacturer’s recovery instructions or qualified technical support.
Reinstall Vanguard only after firmware checks
- Open Settings → Apps → Installed apps.
- Uninstall Riot Vanguard.
- Restart the computer.
- Launch the Riot Client or VALORANT to reinstall Vanguard.
- Restart again if prompted.
Reinstalling Vanguard cannot enable TPM, convert MBR to GPT, restore Secure Boot keys, or repair obsolete motherboard firmware. Use Riot’s support request flow if the verified security state is correct but the restriction remains.
When the PC is not compatible
Some older systems support neither TPM 2.0 nor UEFI Secure Boot. No Windows setting can create those capabilities. A supported motherboard or PC may be required. Riot’s published PC requirements also say VALORANT does not support cloud gaming or virtual machines; this article’s checks apply to a supported, directly installed Windows 11 system.
Final verification checklist
TPM: The TPM is ready for use
TPM specification: 2.0
BIOS Mode: UEFI
Secure Boot State: On
Exact model-specific BIOS/UEFI update installed, if required
Vanguard restriction: clearedOnce these values are correct, restart once more and launch VALORANT. If it still fails, submit the exact error, motherboard or laptop model, BIOS version, and screenshots of msinfo32 and tpm.msc to Riot Support.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errors
