To satisfy an anti-cheat that asks for Secure Boot and TPM 2.0, first check what Windows already reports, then switch your motherboard firmware to UEFI mode, enable the firmware TPM (Intel PTT or AMD fTPM), and turn on Secure Boot with the standard key set. If your drive uses the older MBR layout, you must convert it to GPT before Secure Boot will work.
A growing number of competitive shooters and tournament platforms ask for these protections because they make kernel-level cheating harder, and the trend continued into 2026. The steps below are safe when done in order, but they involve firmware menus and, in some cases, disk conversion. Read the warnings first, back up important files, and always follow your motherboard manual and the game’s own support page, because menu names differ by vendor.
Why Anti-Cheat Asks for These Features
Understanding the reason makes the requirement less mysterious and helps you judge which steps you really need.
What Secure Boot Does
Secure Boot is a firmware feature that only lets signed boot software run at startup. That blocks a class of cheats that load before Windows and hide from the game. It does not scan your files or watch your behavior, and it does not stop every cheat. It simply raises the bar by guaranteeing a trusted starting point.
What the TPM Does
The Trusted Platform Module is a small security component, either a separate chip or a function built into the processor firmware. It stores cryptographic keys and can report measurements of the boot process. Anti-cheat systems can use it to confirm that the machine started in a known-good state, and to tie an account ban to hardware more reliably.
Privacy and Compatibility Notes
These features are part of Windows 11’s own security model, so enabling them is not unusual. Anti-cheat vendors publish their own descriptions of what data they collect, and you should read those if privacy matters to you. Most modern desktop boards from the last several years support both features, though older boards may need a BIOS update first.
Check What Your PC Already Has
Many gaming PCs built in the last several years already have both features enabled, so start by confirming rather than assuming. Checking takes two minutes and may save you a trip into the BIOS.
Check Secure Boot and BIOS Mode
Press the Windows key, type msinfo32 and open System Information. Look for BIOS Mode and Secure Boot State. If BIOS Mode says UEFI and Secure Boot State says On, you are done with that part. If Secure Boot says Off or Unsupported, or BIOS Mode says Legacy, you have work to do.
Check the TPM
Press Windows key plus R, type tpm.msc and press Enter. The window reports whether a TPM is ready to use and shows the specification version, which should read 2.0. You can also open Windows Security, choose Device security, and look under Security processor.
Check the Disk Style
Open Disk Management, right-click your system disk, choose Properties, then Volumes, and read the partition style. GPT works with Secure Boot. MBR does not, and it commonly goes with Legacy or CSM boot mode.
Before You Change Anything
Firmware changes can have side effects, so a few minutes of preparation prevents most problems.
- Back up files you care about, especially if you must convert the disk.
- If BitLocker or device encryption is on, save your recovery key. Changing firmware settings can trigger a recovery prompt.
- Note your current BIOS settings with phone photos in case you need to revert.
- Update your motherboard BIOS from the manufacturer if it is very old, since TPM and Secure Boot support improved over time.
Safety note: clearing the TPM erases keys it holds. Do not use a clear option unless you know what depends on it.
Step-by-Step: Enable TPM 2.0 and Secure Boot
- Restart the PC and enter firmware setup using the key shown on the startup screen, commonly Delete or F2. In Windows 11 you can also use Settings, System, Recovery, then Advanced startup.
- Switch to Advanced mode if the firmware shows a simplified screen.
- Find the TPM option. Intel boards often call it Intel Platform Trust Technology or PTT. AMD boards often call it fTPM or AMD CPU fTPM. Set it to Enabled.
- Find the boot options and disable CSM, the Compatibility Support Module, so the board boots in pure UEFI mode. If your disk is MBR, do the conversion described below before disabling CSM or Windows may not boot.
- Open the Secure Boot menu. Set the operating system type to Windows UEFI mode if offered, and load or install the default Secure Boot keys.
- Set Secure Boot to Enabled, then save and exit.
- When Windows loads, repeat the msinfo32 and tpm.msc checks to confirm the change.
Converting an MBR Disk to GPT
Windows includes a tool called MBR2GPT that converts a system disk without wiping it. It is designed for Windows 10 and later, and it works only if the disk layout meets its requirements. Run the validate option first, from an elevated Command Prompt, and read the result before converting. After conversion, change the firmware from Legacy to UEFI, or the machine will not boot.
When Conversion Is Not Safe
If the validation step fails, the disk has more than a few partitions, or you use a multi-boot setup, stop. Back up everything and consider a clean Windows installation in UEFI mode instead, which is simpler than fighting an unusual layout.
After Conversion
Restart into firmware setup, switch to UEFI boot, then continue with the Secure Boot steps above. Confirm Windows boots normally before reinstalling or updating any game.
What Anti-Cheat Systems Usually Need
Requirements vary by title and by version, so the table below is a general map rather than a promise. Check the game’s support page for the current rule.
| Item | Typical requirement | Where to verify |
|---|---|---|
| Secure Boot | Enabled, UEFI mode | msinfo32 |
| TPM | Version 2.0 enabled | tpm.msc |
| Disk layout | GPT | Disk Management |
| Windows version | Windows 10 or 11, fully updated | Settings, Windows Update |
| Driver integrity | No unsigned or blocklisted drivers | Game launcher messages |
Troubleshooting When It Still Fails
Sometimes the settings look right and the game still complains. Work through the likely causes before reinstalling Windows.
Secure Boot Shows On but the Game Disagrees
Restart the PC fully, not just the game, since some launchers read the state at boot. Check that Windows Update and the BIOS are current, and look at the game’s support article for the exact error code.
Secure Boot Option Is Greyed Out
This usually means CSM is still on, or the platform keys are missing. Disable CSM first, then look for an option to restore factory keys or install default keys.
Dual Boot or Custom Drivers
Some Linux distributions and older hardware drivers are not signed in a way Secure Boot accepts. Those setups may need a signed boot loader or a different configuration, so check the distribution’s own documentation before enabling it.
Anti-Cheat Service Not Running
If the firmware checks pass but the game still blocks you, the anti-cheat service itself may be stopped or damaged. Restart the PC, run the game’s repair or verify-files option, and reinstall the anti-cheat component from the launcher if the support page suggests it. Also confirm that no other security tool, overclocking utility or old driver is flagged in the error message, since the message often names the cause.
Quick Checklist
- msinfo32 shows UEFI and Secure Boot On.
- tpm.msc reports version 2.0.
- System disk uses GPT.
- BitLocker key saved before firmware changes.
- BIOS and Windows updated.
Common Mistakes
- Disabling CSM before converting an MBR disk, which leaves Windows unable to boot.
- Forgetting the BitLocker recovery key and getting locked out after a firmware change.
- Clearing the TPM without understanding what relies on it.
- Assuming TPM 1.2 is enough when the game asks for 2.0.
- Skipping a full restart and judging the result from a stale launcher message.
Related guides
- Aio Liquid Coolers For High Performance Gaming
- Wireless Gaming Headsets Under 100 For Pc
- Ssds For Large Video And Raw Photo Files
Frequently Asked Questions
Is it safe to enable Secure Boot?
For a standard Windows gaming PC, yes. It verifies the boot files at startup. The main risks are boot problems from skipping the disk conversion step and an unexpected BitLocker recovery prompt.
Does enabling TPM or Secure Boot reduce frame rate?
Neither is expected to change gaming performance in any meaningful way. Any anti-cheat overhead comes from the anti-cheat software itself, not from these firmware features.
My motherboard has no TPM option. What now?
Look for fTPM or PTT in different menus, update the BIOS, and check your processor generation. Some boards without firmware TPM offer a header for a separate TPM module, which should match the board’s connector type. Check the manual before buying anything.
Do I need Windows 11?
Not always. Some anti-cheat systems accept Windows 10 with the same firmware features. Requirements change, so confirm on the game’s support page.
