How to fix the FACEIT Anti-Cheat Secure Boot required error
This means FACEIT Anti-Cheat requires Secure Boot and yours is off or not strict enough, so you cannot connect to a match. Enabling it clears the error. Jump to your situation below or work through the methods in order.
By Neeraj Singh ~6 min Updated Jun 2026 86% found this helpful
Error message
Please enable Secure Boot to continue. / Please set Secure Boot preset to Maximum Security in your BIOS.
Summary
FACEIT Anti-Cheat requires Secure Boot, and if it is disabled, or set below the strictest preset, you are blocked from connecting to a match. Some systems also see Please set Secure Boot preset to Maximum Security in your BIOS. Secure Boot enforces a trusted chain at start-up so FACEIT can verify your PC booted without unauthorized or modified drivers, which is how it blocks many cheats. The fix is to enable Secure Boot in your UEFI firmware (and choose the Maximum Security or standard preset if your board offers presets), which usually means switching Windows from Legacy or CSM to UEFI and, if your system drive is MBR, converting it to GPT with mbr2gpt first. Confirm the result in Windows with msinfo32, where Secure Boot State should read On and BIOS Mode should read UEFI. FACEIT also requires TPM 2.0, which pairs with Secure Boot, so enable that at the same time. Once Secure Boot is on, FACEIT Anti-Cheat lets you connect.
What this error means
Secure Boot only allows trusted, signed code at start-up. FACEIT Anti-Cheat requires it so it can verify, through the boot chain, that no unauthorized or modified drivers loaded. With Secure Boot off, or below the required preset, FACEIT blocks you from connecting.
Enabling Secure Boot in BIOS fixes it. Because Secure Boot needs UEFI boot on a GPT disk, the usual blockers are a Legacy or CSM configuration and an MBR system drive, which you convert with mbr2gpt before turning Secure Boot on. TPM 2.0 should be enabled alongside it.
Common causes
Secure Boot is disabled in BIOS.
Secure Boot is not set to the required preset (Maximum Security).
Windows is booting in Legacy or CSM mode.
The system drive uses an MBR partition instead of GPT.
Expert insight
“FACEIT tightening up to require Secure Boot caught a lot of CS players out. The fix is to turn Secure Boot on in the BIOS, and if your board asks, pick the Maximum Security preset. The catch is the same as always, Secure Boot only works in UEFI on a GPT disk, so if msinfo32 says Legacy or your drive is MBR, convert it with mbr2gpt and disable CSM first. Turn on TPM 2.0 while you are in there, because FACEIT wants both. Verify in msinfo32 and you are in.”
Manager, Tech Support & Operations · 19+ years fixing Windows and system errors
✓ How to fix it
Method 1
Enable Secure Boot in BIOS
1Restart into BIOS and set Secure Boot to Enabled (under Boot or Security).
2If your board offers presets, choose Maximum Security or the standard preset, and enable TPM 2.0 too.
3Save and reboot.
Method 2
Confirm Secure Boot is on
1Run
msinfo32
and check Secure Boot State reads On and BIOS Mode reads UEFI.
2If Secure Boot State is Off or Unsupported, continue below.
3Relaunch once it reads On.
Method 3
Switch from Legacy to UEFI boot
1If BIOS Mode reads Legacy, disable CSM in BIOS so Windows boots UEFI.
2Secure Boot is unavailable in Legacy mode, this unlocks it.
3Reboot.
Method 4
Convert an MBR disk to GPT
1UEFI and Secure Boot need a GPT system drive. Back up first, then validate and convert from an admin prompt:
mbr2gpt /validate
mbr2gpt /convert /allowfullOS
2Then enable UEFI and Secure Boot in BIOS.
3Restart and test.
FACEIT Anti-Cheat requires Secure Boot. Enable it in BIOS, choosing the Maximum Security preset if offered, and if it is greyed out switch Windows to UEFI by disabling CSM and convert an MBR disk to GPT with mbr2gpt. Confirm in msinfo32 that Secure Boot State is On and BIOS Mode is UEFI, and enable TPM 2.0 alongside it.
Frequently asked questions
Why does FACEIT require Secure Boot?
FACEIT Anti-Cheat verifies the integrity of your boot chain. Secure Boot enforces a trusted, signed start-up, letting FACEIT confirm no unauthorized or modified drivers loaded, which blocks many kernel-level and driver-based cheats.
How do I enable Secure Boot for FACEIT?
Restart into BIOS and set Secure Boot to Enabled, choosing the Maximum Security preset if your board offers presets. Confirm in Windows with msinfo32 that Secure Boot State reads On. You may need UEFI boot and a GPT disk first.
What is the Maximum Security preset?
Some motherboards let you choose a Secure Boot preset. FACEIT may require the strictest one, Maximum Security, which enforces the full signed chain of trust. Select it in your BIOS Secure Boot settings, then verify in msinfo32.
Secure Boot is greyed out, what do I do?
Secure Boot only works in UEFI mode. Check BIOS Mode in msinfo32, and if it reads Legacy, disable CSM in BIOS. If your drive is MBR, convert it to GPT with mbr2gpt first, then Secure Boot becomes available.
Do I need TPM 2.0 as well?
Yes. FACEIT requires both Secure Boot and TPM 2.0, which work together for boot attestation. Enable TPM 2.0 in BIOS (Intel PTT or AMD fTPM) alongside Secure Boot, and confirm it is ready before relaunching.
Is it safe to convert MBR to GPT?
The mbr2gpt tool is designed to convert without data loss, but back up first, since changing the partition style and boot mode is a significant change. Run mbr2gpt /validate then mbr2gpt /convert /allowfullOS, then enable UEFI and Secure Boot.
Still not working?
If Secure Boot State stays Unsupported after enabling it, your BIOS may need updating, or the Secure Boot keys may need restoring to factory defaults in the BIOS security menu. You can also submit your error to us for a tailored fix.
