You've clicked launch on Valorant, and Vanguard just throws up this wall: your TPM 2.0 isn't enabled, game won't start. Frustrating, right? This isn't some obscure bug that only happens to one person. I see it constantly, and the good news is it's almost always fixable in under 30 minutes if you follow this properly.

TL;DR

Valorant TPM 2.0 Windows 11 error means Secure Boot or TPM 2.0 is disabled in your BIOS. Open tpm.msc to check status, then access BIOS (Settings → Recovery → Advanced startup → UEFI Firmware Settings) and enable both Secure Boot and TPM 2.0 (or fTPM/PTT). Reboot and verify with tpm.msc again. Takes 15-25 minutes. If your motherboard has no TPM option at all, it doesn't support TPM 2.0 and you'll need a newer board.

⏱️ 14 min read✅ 85% success rate📅 Updated May 2026

Key Takeaways

TPM 2.0 is a security requirement for Vanguard anti-cheat on Windows 11, not optional
The error happens when TPM 2.0 or Secure Boot is disabled in BIOS, not Windows settings
You need BIOS access (not Windows BIOS settings) to fix this properly
Modern motherboards (2018+) support TPM 2.0 either as dedicated chip or firmware version (fTPM/PTT)
Enabling these features has zero impact on gaming performance

At a Glance

Difficulty: Easy
Time Required: 15-30 mins
Success Rate: 85% of users
Requires BIOS Access: Yes

What Causes Valorant TPM 2.0 Windows 11 Error?

Here's the underlying issue: Vanguard, Valorant's anti-cheat system, doesn't trust your machine until it can verify that your hardware is genuine and hasn't been modified. TPM 2.0 is the tech that does that verification. Think of it like showing ID at a venue, except it's your motherboard proving it's legitimate.

Windows 11 actually requires TPM 2.0 at install time anyway, but having it enabled during install doesn't mean it stays enabled. You might have disabled it for overclocking, or your BIOS defaulted to it being off. Secure Boot is the same story. Both sit in your BIOS firmware, not in Windows settings, so flipping toggles in Windows won't help.

The really common culprits are straightforward: someone tweaked BIOS for performance tuning and turned TPM off without realizing, or an older system never had it enabled from the factory. Occasionally a BIOS update resets these settings to defaults, which sometimes means off. And yeah, there are older motherboards out there from before TPM 2.0 became standard, though that's getting rarer by the year.

Why Vanguard cares: Vanguard runs at kernel level (lower than anything you can disable from Windows). It needs proof that the system below Windows is clean, not running modified drivers or bootloaders. TPM 2.0 provides that proof.

Quick Check: Verify Your TPM and Secure Boot Status Right Now

Check TPM 2.0 Status in Windows Easy

Open TPM Management Console
Press the Windows key on your keyboard, type tpm.msc, and press Enter.
Look for the Status Line
You should see a message that says 'The TPM is ready for use' and 'Specification Version: 2.0'. If you see 'The TPM is not ready for use' or any version other than 2.0, TPM is disabled in your BIOS.
Take a Screenshot
Grab one for reference before you go into BIOS. You'll want to know what the current state is.

If tpm.msc shows TPM ready and version 2.0, move to the Secure Boot check below. If TPM shows not ready or missing, you'll need BIOS access.

Now let's check Secure Boot status, which is just as critical.

Verify Secure Boot is Enabled Easy

Open System Information
Press Windows key, type system information, and open it.
Find the Secure Boot State Field
Scroll down until you see 'Secure Boot State'. It must show 'On'. Anything else (Off, Unsupported) means Secure Boot isn't active.
Note the Result
If it says 'On', Secure Boot is good. If it says 'Off', you'll need BIOS changes.

Both TPM 2.0 ready and Secure Boot On means your system is configured correctly. Try relaunching Valorant. If the error persists after a full reboot, it might be a Vanguard cache issue (uninstall and reinstall the anti-cheat client).

If either check failed: Don't restart Valorant yet. Your BIOS settings need adjustment, and that's where the next section comes in.

Valorant TPM 2.0 Windows 11 Intermediate Fix: Enable TPM in BIOS

This is where most people get it done. You're going to access your BIOS firmware settings and flip two switches: TPM 2.0 and Secure Boot. Sounds technical, but it's genuinely just a few clicks.

The challenge is that every motherboard manufacturer (MSI, ASUS, Gigabyte, ASRock, etc.) names menus slightly differently. But they're all looking for the same two things. I'll walk you through the typical layout, and your BIOS will be close enough that you'll find what you need.

Enter BIOS Through Windows 11 Recovery Menu Easy

Open Settings
Press Windows key + I to open Settings.
Navigate to Recovery
Go to System → Recovery (on the left sidebar). Scroll down and click 'Advanced startup'.
Select 'Restart Now'
Click the blue 'Restart now' button. Your system will reboot into the recovery menu.
Choose Troubleshoot
You'll see options. Click 'Troubleshoot'.
Go to Advanced Options
Click 'Advanced options'.
Select UEFI Firmware Settings
Click 'UEFI Firmware Settings'. Your system will restart again and boot straight into BIOS.

You're now in BIOS firmware. You'll see a menu screen (could be white text on blue, or a graphical interface depending on your motherboard). Next step is finding TPM and Secure Boot.

Once you're in BIOS, the interface depends on your motherboard. ASUS boards tend to have a graphical BIOS with lots of tabs. MSI boards are similar. Older boards might be text-based. But they all have a Security tab or similar where TPM lives.

Enable TPM 2.0 in BIOS Easy

Look for Security or Trusted Computing Tab
Use arrow keys to navigate (or mouse if your BIOS has a graphical interface). Most boards have a 'Security' or 'Trusted Computing' tab or menu. Click or navigate into it.
Find TPM 2.0 Option
Look for 'TPM 2.0', 'TPM Device', 'Trusted Computing', or on AMD boards 'fTPM' (firmware TPM). On Intel boards, you might see 'PTT' (Platform Trust Technology). They're all the same thing.
Set It to Enabled
Select the option, press Enter or click on it, and change it from Disabled (or Off) to Enabled (or On).
Confirm the Change
The BIOS will update the setting immediately. You'll see it change on screen.

TPM 2.0 is now enabled. Now you need to enable Secure Boot, which is usually just one menu over.

Can't find TPM 2.0 option? Some older BIOS versions hide it under a different name. Check your motherboard manual (search online for 'your motherboard model BIOS manual' and look for TPM or fTPM). If it genuinely isn't there, your motherboard may not support TPM 2.0, and that's a hardware limitation we'll cover in the advanced section.

Enable Secure Boot in BIOS Easy

Navigate to Boot Tab
Look for a 'Boot' tab in your BIOS menu, or sometimes 'Security' again depending on your board. Secure Boot is usually under Boot.
Find Secure Boot Setting
Look for 'Secure Boot' or 'Secure Boot Control'. It might be called 'Secure Boot Mode'.
Change to Enabled
Select it and set it to Enabled or On.
Watch for Secure Boot Keys Message
Some BIOS versions will ask if you want to load default keys. Say yes. Default keys are what Windows 11 expects and they're totally safe.

Both TPM 2.0 and Secure Boot are now on. Time to save and exit.

Now save your changes and reboot.

Save BIOS Changes and Reboot Easy

Press F10 or Find Save Option
Most BIOS boards use F10 to save and exit. Some boards have a 'Save' or 'Exit' menu option. Press F10 or navigate to Save Changes.
Confirm You Want to Save
BIOS will ask 'Save changes and exit?' Select Yes.
System Reboots
Your PC will restart. Windows will boot normally. This might take a few seconds longer than usual because Windows is recognizing the changes.

Your system is rebooting with TPM 2.0 and Secure Boot enabled. Once Windows loads, verify the changes took hold.

Once Windows is back up, let's verify that the changes stuck.

Verify Settings After Reboot Easy

Run tpm.msc Again
Press Windows key, type tpm.msc, and open it. Verify it now shows 'The TPM is ready for use' and 'Specification Version: 2.0'.
Check System Information Again
Open System Information and confirm Secure Boot State says 'On'.
Launch Valorant and Vanguard
Start the Valorant client and let Vanguard initialize. It should load without the TPM error.

If both tpm.msc and system information are green, and Valorant launches without complaints, you're sorted. The error is gone.

Advanced Valorant TPM 2.0 Windows 11 Fixes: Hardware and Firmware Issues

If you've done the above and Valorant still complains about TPM 2.0, or if your BIOS literally has no TPM option, there are a few deeper issues to investigate. This section covers the edge cases: hardware that doesn't support TPM, corrupted Secure Boot keys, and BIOS that needs updating.

Check for TPM Hardware Support Medium

Enter BIOS Again
Use the same recovery method from earlier to get back into BIOS (Settings → Recovery → Advanced startup → UEFI Firmware Settings → Restart now).
Search Every Tab Carefully
Don't assume TPM is just in Security. Check Boot, Advanced, System, Chipset, Integrated Peripherals, anything that sounds relevant. Use Ctrl+F or navigate methodically through every menu.
Check Your Motherboard Manual
Search online for your motherboard model (check System Information or your receipt if unsure) and find the manual PDF. Search the manual for 'TPM' to see exactly what it's called and where it's located.
Update BIOS if TPM Still Missing
If TPM genuinely doesn't appear after checking everywhere, your BIOS might be too old. Visit your motherboard manufacturer's website (ASUS, MSI, Gigabyte, ASRock), download the latest BIOS for your exact board model, and update it. This is covered in the next solution.

If you find TPM after checking the manual, enable it as in the intermediate section. If it truly doesn't exist, proceed to BIOS update below.

Motherboards before 2016: Very old boards (like 2012-2015 era) might not have TPM 2.0 at all. They may have TPM 1.2, which Vanguard doesn't accept. If your motherboard is genuinely that old, TPM 2.0 support requires a motherboard upgrade. No software fix will help.

Update BIOS to Latest Version Hard

Find Your Motherboard Model
Open System Information (Windows key → 'system information'). Look for the 'System Model' or 'Board Name' field. Write it down exactly as shown (e.g., 'ASUS ROG STRIX B550-F GAMING WIFI').
Visit Manufacturer Support Site
Go to ASUS.com, MSI.com, Gigabyte.com, or ASRock.com. Search for your board model in their support page. Find the BIOS downloads section.
Download Latest BIOS File
Download the newest BIOS file for your exact board model. It'll be a .BIN or .ROM file. Save it to a USB stick formatted as FAT32 (not NTFS). Create a folder called 'BIOS' on the stick and put the file there.
Boot Into BIOS with USB Inserted
Insert the USB stick, restart, and enter BIOS again (F2, Del, or F12 on restart depending on your board, or use the recovery method).
Find BIOS Update or Firmware Update Option
Look for 'Update BIOS', 'BIOS Flashback', 'Q-Flash', or 'USB BIOS Flasher' in your BIOS menus. Different boards name it differently, but there's always a firmware update option.
Select Your USB Drive and the BIOS File
Follow the on-screen prompts. Select the USB device, then select the BIOS file you downloaded. Confirm and let it flash. This takes 2-5 minutes. Do not power off or unplug the PC during this process.
System Reboots Automatically
After flashing, your PC will restart. The screen might go dark for longer than usual. Wait patiently.
Re-enable TPM 2.0 and Secure Boot
Go back into BIOS and enable TPM 2.0 and Secure Boot again. They may have reset to defaults after the BIOS update. Repeat the steps from the intermediate section above.

BIOS is now up to date and TPM should be available. If TPM still isn't there after updating to the absolute latest BIOS, your hardware doesn't support TPM 2.0 and you need a new motherboard.

BIOS flashing carries risk: If the flash process fails (power loss, wrong file, etc.), your motherboard can become unbootable. Only do this if you're confident or if you have another option. If you're unsure, consider getting remote support.

Fix Invalid Secure Boot Keys Hard

Enter BIOS
Use Settings → Recovery → Advanced startup → UEFI Firmware Settings again.
Find Key Management Option
Look for 'Secure Boot' settings, then a submenu called 'Key Management', 'Reset to Setup Mode', or 'Load Defaults'. This varies by board.
Load Default Secure Boot Keys
Select the option to load or restore default keys. Confirm the action. This resets Secure Boot to factory defaults, which is what Windows 11 expects.
Set Platform Mode to User Mode
Some BIOS versions have a 'Platform Mode' setting near Secure Boot. Make sure it's set to 'User Mode', not 'Setup Mode'.
Enable Secure Boot
Now enable Secure Boot again (it should stick this time).
Save and Reboot
Press F10, confirm save, and reboot.

Secure Boot keys are now reset and valid. Secure Boot should initialize correctly on the next boot and persist.

After any of these advanced fixes, verify TPM and Secure Boot again using tpm.msc and system information, then relaunch Valorant.

Still getting the error? If you've enabled both TPM 2.0 and Secure Boot, updated BIOS, verified everything in Windows, and Valorant still complains, it might be a Vanguard client corruption. Uninstall Vanguard completely (uninstall through Control Panel → Programs → Programs and Features, then look for 'Valorant' or 'Vanguard'), restart, and reinstall the Valorant client fresh from Riot's website.

If you're stuck in BIOS, unsure which settings are safe to change, or the error persists after enabling TPM 2.0 and Secure Boot, our remote support team can take over and get Valorant running in minutes. We handle BIOS configuration daily.
Get remote help

Preventing Valorant TPM 2.0 Windows 11 Errors Going Forward

Once you've got this sorted, there are some easy habits that prevent it from happening again.

Keep your BIOS up to date. Visit your motherboard manufacturer's website twice a year and check if there's a newer BIOS version. Updates often include TPM improvements and Secure Boot fixes. You don't need to update obsessively, but staying within 1-2 versions of the latest is sensible.

Never disable TPM 2.0 or Secure Boot for overclocking or performance tweaks. I get it, someone on a forum says disabling this or that gets you 2 extra FPS. It won't. TPM and Secure Boot have zero gaming impact. The only thing disabling them does is break Vanguard, and you lose the ability to play.

Monitor your TPM status monthly. It's paranoia-level easy: just open tpm.msc once a month and check it still shows 'ready for use'. Takes 10 seconds. If something ever disables it without your knowing, you'll catch it before trying to launch Valorant.

Keep Windows 11 fully updated. Windows Update includes security patches that can improve TPM and firmware detection. Don't delay updates; they help more than they hurt.

Backup your BIOS settings before tweaking. Many BIOS versions have a 'Save Settings to USB' or 'Profile Save' option. Use it before you make any changes. If something goes wrong, you can restore the previous configuration quickly.

Valorant TPM 2.0 Windows 11 Summary

You're probably reading this because you just want to play Valorant, and TPM 2.0 is in the way. Fair enough. The reality is simple: check TPM status using tpm.msc, enable it and Secure Boot in BIOS if they're off, reboot, and you're done. Most people finish in 15-20 minutes. If your board doesn't have TPM 2.0 in BIOS at all, update the BIOS firmware first, then enable it. Only if your motherboard is genuinely ancient (pre-2016) will hardware be the limiting factor, and that's when you're looking at a motherboard upgrade.

Vanguard's requirement for Valorant TPM 2.0 Windows 11 support exists for a reason: it keeps cheaters from running modified drivers and modified bootloaders. It's annoying to deal with once, but after you enable it, you forget about it forever. No performance hit, no hassle, just better security for the game you're playing. Enable it, relaunch, and get back to playing.