VALORANT Requires Secure Boot and TPM 2.0: How to Fix the Error
VALORANT blocks your launch because Riot Vanguard found Secure Boot or TPM 2.0 switched off. Check both in two Windows windows, then enable the missing one in your BIOS. Launch the game again after one restart.
By Neeraj Singh ~8 min Updated Nov 2026 Checked against Riot Games Support and Microsoft Learn
Error message
VAN9003. This build of Vanguard requires secure boot to be enabled in order to play. / VAN9001. This build of Vanguard requires TPM 2.0 to be enabled in order to play.
Summary
VAN9003 means Vanguard found Secure Boot off. VAN9001 means Vanguard found TPM 2.0 off. Press Win+R, enter msinfo32 and compare BIOS Mode with Secure Boot State. Enter tpm.msc to check the TPM version. Switch your BIOS to UEFI mode and enable the missing setting. Convert an MBR disk to GPT first if msinfo32 shows Legacy.
What the VALORANT Secure Boot and TPM Message Means
Riot Vanguard checks your PC before VALORANT opens. If Secure Boot is off, the launch stops with the VAN9003 message. If TPM 2.0 is off, you see VAN9001 instead.
Riot says on Windows 11 it requires TPM 2.0 and UEFI Secure Boot. Microsoft lists the same two items for Windows 11, as UEFI with Secure Boot capable firmware and TPM version 2.0.
Riot adds that Vanguard needs TPM 2.0 on its own terms. TPM 1.2 meets neither requirement.
A third message, VAN 9090, appears when the TPM was recently cleared. Enable TPM 2.0 again and restart your PC to clear it.
Why Vanguard Reports Secure Boot or TPM as Off
Secure Boot is switched off in your BIOS or UEFI firmware.
Your PC starts in Legacy or CSM mode instead of UEFI.
Your system disk uses MBR, which Riot says Secure Boot cannot use.
Your TPM is disabled in the firmware or reports a version below 2.0.
Secure Boot is grayed out because factory keys are missing.
A BIOS update left a setting unchecked or the TPM not fully started.
✓ How to fix it
Method 1
Check Secure Boot, BIOS Mode and Disk Style
1Press Win+R, enter the command below and press Enter.
msinfo32
2Find BIOS Mode and Secure Boot State in System Summary. Riot lists three outcomes. UEFI with On means Secure Boot is active and you can launch the game.
3UEFI with Off means your drive is ready. Go to Method 2 and enable Secure Boot in the BIOS. Legacy with Off means you convert the drive from MBR to GPT first. Go to Method 3.
4Want a second check? Open PowerShell as administrator and enter the command below. The command prints True for Secure Boot on and False for Secure Boot off. A Legacy BIOS PC shows the message “Cmdlet not supported on this platform.”
1Restart your PC and open the firmware settings. Windows 11 users select Settings, System, Recovery, Advanced startup and Restart now. Then select Troubleshoot, Advanced options and UEFI Firmware Settings. Riot lists this path on its Riot TPM 2.0 guide.
2Set Boot Mode from Legacy or CSM to UEFI and disable CSM if your firmware has that option. Riot says to enable Secure Boot on the Boot tab.
3Save and exit. Riot names F10 as the usual key. Menus differ by maker. Follow your motherboard or PC guide for exact names. Our Secure Boot enable guide covers the firmware screens in full.
4Start Windows, enter msinfo32 again and confirm Secure Boot State shows On. Launch VALORANT. Riot has a step by step page for every setup in its Riot Secure Boot guide.
Method 3
Convert MBR to GPT When msinfo32 Shows Legacy
1Back up your files first. Microsoft warns that the change cannot be undone and the disk then boots in GPT mode only. Riot gives the same warning.
2Check the partition style. In Disk Management, open the disk properties, select Volumes and read Partition Style. Riot says Secure Boot needs GPT. Our selected disk partition style fix covers the setup errors.
3Start Command Prompt as administrator and check the disk first. Riot uses the command below for a conversion from inside Windows.
mbr2gpt /validate /allowFullOS
4Convert only after validation passes.
mbr2gpt /convert /allowFullOS
Microsoft explains the options and the disk prerequisites on its MBR2GPT page.
5Do not boot into Windows after the conversion. Riot says to go straight into the BIOS and switch to UEFI. Then follow Method 2 to enable Secure Boot.
Method 4
Check and Enable TPM 2.0 for VAN9001
1Press Win+R, enter the command below and press Enter.
tpm.msc
2Riot says the status “The TPM is ready for use” with Specification Version 2.0 means TPM 2.0 is active. Microsoft places that version under TPM Manufacturer Information and says a version below 2.0 fails Windows 11 requirements.
3If the console says “Compatible Trusted Platform Module (TPM) cannot be found” or will not open, check Windows Security, Device Security and Security processor details. Nothing there means the TPM is off in the BIOS.
4Open your BIOS. On Intel boards set Intel Platform Trust Technology (PTT) to Enabled. On AMD boards set the AMD fTPM switch or TPM Device Selection to the AMD CPU fTPM option. Save and exit.
5Back up BitLocker first. Riot says switching TPM versions clears TPM keys. Suspend BitLocker or keep your recovery key ready. Vendor menu paths sit in the Riot TPM 2.0 guide.
Method 5
Restore Factory Keys When Secure Boot Is Grayed Out
1Open the BIOS Boot or Security tab and look for Restore Factory Keys or Install Default Secure Boot Keys. Riot names both labels.
2Select the option, confirm, then enable Secure Boot. Suspend BitLocker or keep your recovery key ready before this change.
3Save and exit, then check Secure Boot State in msinfo32. Our Secure Boot State Unsupported fix covers a PC that reports Unsupported.
Method 6
Recheck Settings After a BIOS Update
1Riot says to install the latest BIOS for your exact motherboard model if tpm.msc shows TPM 2.0 ready but Vanguard still blocks you. Note the Manufacturer Version in tpm.msc before you update.
2Do not power off during the flash. Riot warns about this in its Secure Boot guide.
3Reopen the BIOS after the update. Confirm Boot Mode shows UEFI, Secure Boot is enabled and PTT or fTPM is still enabled.
4Do not disable fTPM on an AMD PC to stop stuttering. Riot says you lose access to Vanguard games. Update the BIOS instead.
Launch the Riot Client after every method and watch for the same code. VAN9003 points to Secure Boot and VAN9001 points to TPM 2.0. Fix the one your message names first.
Frequently asked questions
What does the VALORANT Secure Boot error say?
Riot lists the message as "VAN9003. This build of Vanguard requires secure boot to be enabled in order to play." It means Vanguard found Secure Boot off. Enable it in your BIOS and launch again.
Does VALORANT require Secure Boot and TPM 2.0?
Riot says on Windows 11 it requires TPM 2.0 and UEFI Secure Boot. Microsoft lists both for Windows 11 as well. Check them with msinfo32 and tpm.msc.
What is the difference between VAN9003 and VAN9001?
VAN9003 means Secure Boot is off. VAN9001 means TPM 2.0 is off. Fix the setting named in your message.
How do I check Secure Boot for VALORANT?
Press Win+R, enter msinfo32 and compare BIOS Mode with Secure Boot State. UEFI with On means you can launch the game. Riot lists the other two outcomes in its Secure Boot guide.
Do I need to convert MBR to GPT for VALORANT?
Only if msinfo32 shows BIOS Mode as Legacy. Riot says Secure Boot requires GPT. Microsoft documents the MBR2GPT tool and warns that the change cannot be undone.
Which Windows version does VALORANT need?
Riot lists Windows 10 build 19041 or later and Windows 11, both 64-bit. On Windows 11 it adds the TPM 2.0 and UEFI Secure Boot requirement.
Can I fix VAN9001 without opening the BIOS?
Only if tpm.msc already shows TPM 2.0 ready. A missing TPM needs the Intel PTT or AMD fTPM setting turned on in the firmware. Riot lists the steps in its TPM 2.0 guide.
What if TPM 2.0 shows ready and VALORANT still blocks me?
Riot says your BIOS firmware can have a bug that stops the TPM from starting fully. Note the Manufacturer Version in tpm.msc, install the latest BIOS for your model and confirm PTT or fTPM is still enabled.
