Secure Boot TPM 2.0 Fix Generator: Free BIOS Steps for 7 Best PC Brands
The Secure Boot TPM 2.0 fix generator gives you the exact BIOS menus to open for your motherboard or laptop brand, the order to change them in, and the Windows commands that prove Secure Boot and TPM 2.0 are on.
Anti-cheat in Call of Duty: Modern Warfare 4, Valorant, EA Sports FC 27 and Battlefield 6 now refuses to start unless Windows boots in UEFI mode with Secure Boot, and some also need TPM 2.0. The settings exist on almost every PC built since 2018, but every brand hides them in a different place. Pick yours below.
Table of Contents
How the Secure Boot TPM 2.0 Fix Generator Works
Turning on Secure Boot is the same four jobs on every PC: confirm Windows boots in UEFI mode, turn off the legacy compatibility module, turn Secure Boot on with its default keys, and turn on the firmware TPM. The Secure Boot TPM 2.0 fix generator fills in the menu names for your brand and processor, and adds the disk conversion step only if you need it.
- Pick the game that is blocked.
- Pick your motherboard or laptop brand.
- Pick Intel or AMD.
- Run msinfo32 and pick the BIOS Mode it shows.
- Follow the steps in order, then run the check commands.
Which Games Need Secure Boot and TPM 2.0?
| Game | What it needs | What happens without it |
|---|---|---|
| Call of Duty: Modern Warfare 4 | TPM 2.0 and Secure Boot | Ricochet anti-cheat blocks online modes without both. |
| Valorant | TPM 2.0 and Secure Boot on Windows 11 | Vanguard shows VAN9001 or VAN9003 until both are on. |
| EA Sports FC 27 | Secure Boot | EA Javelin anti-cheat will not start the game without it. |
| Fortnite tournaments | Secure Boot and TPM 2.0 | Needed for tournaments, not for normal matches. |
| Battlefield 6 | Secure Boot | EA Javelin anti-cheat will not start the game without it. |
Pick any of these in the Secure Boot TPM 2.0 fix generator to see what it needs. Secure Boot stops unsigned code from loading before Windows, and the TPM lets the anti-cheat confirm that. Neither one slows the game down.
BIOS Key and Menu Path by Brand
| Brand | BIOS key | Turn off CSM | Turn on Secure Boot |
|---|---|---|---|
| ASUS | Del or F2 | Press F7 for Advanced Mode. Boot, CSM (Compatibility Support Module), Launch CSM: Disabled. | Boot, Secure Boot, OS Type: Windows UEFI mode. Then Key Management, Install Default Secure Boot Keys. |
| MSI | Del | Settings, Advanced, Windows OS Configuration, BIOS UEFI/CSM Mode: UEFI. | Settings, Advanced, Windows OS Configuration, Secure Boot: Enabled, Secure Boot Mode: Standard. If it will not turn on, set Custom, choose Enroll all Factory Default Keys, then set Standard. |
| Gigabyte and AORUS | Del | Boot, CSM Support: Disabled. | Boot, Secure Boot, Secure Boot Enable: Enabled, Secure Boot Mode: Standard. If it stays off, choose Restore Factory Keys first. |
| ASRock | F2 or Del | Boot, CSM (Compatibility Support Module), CSM: Disabled. | Security, Secure Boot, Secure Boot: Enabled. Then Install default Secure Boot keys. |
| Dell and Alienware | F2 | Boot Configuration: make sure the boot mode is UEFI, not Legacy. | Boot Configuration, Secure Boot, Enable Secure Boot: On. |
| HP and OMEN | F10 (or Esc, then F10) | Advanced, Boot Options: turn Legacy Support off. | Security, Secure Boot Configuration: Legacy Support Disable and Secure Boot Enable. |
| Lenovo and Legion | F2 or F1 | Boot, Boot Mode: UEFI. Turn CSM off if it is listed. | Security, Secure Boot: Enabled. If it stays off, choose Restore Factory Keys. |
| Brand | TPM on Intel (PTT) | TPM on AMD (fTPM) |
|---|---|---|
| ASUS | Advanced, PCH-FW Configuration, PTT: Enable. | Advanced, AMD fTPM configuration, Firmware TPM: Enable. |
| MSI | Settings, Security, Trusted Computing, Security Device Support: Enable, TPM Device Selection: PTT. | Settings, Security, Trusted Computing, Security Device Support: Enable, AMD fTPM switch: AMD CPU fTPM. |
| Gigabyte and AORUS | Settings, Miscellaneous, Intel Platform Trust Technology (PTT): Enabled. | Settings, Miscellaneous, AMD CPU fTPM: Enabled. |
| ASRock | Security, Intel Platform Trust Technology: Enabled. | Advanced, CPU Configuration, AMD fTPM switch: AMD CPU fTPM. |
| Dell and Alienware | Security, TPM 2.0 Security: On. | Security, TPM 2.0 Security: On. |
| HP and OMEN | Security, TPM Embedded Security, TPM State: Enabled. | Security, TPM Embedded Security, TPM State: Enabled. |
| Lenovo and Legion | Security, Security Chip (or Intel PTT): Enabled. | Security, Security Chip (or AMD fTPM): Enabled. |
BIOS Mode Is Legacy: Convert MBR to GPT First
The Secure Boot TPM 2.0 fix generator adds this step when you choose Legacy. Secure Boot only works when Windows boots in UEFI mode, and UEFI needs a GPT disk. If msinfo32 shows BIOS Mode as Legacy, turning CSM off will leave the PC unable to find Windows. Convert the disk first with the tool built into Windows.
| Command | What it does |
|---|---|
| mbr2gpt /validate /allowFullOS | Checks that the disk can be converted. Nothing is changed |
| mbr2gpt /convert /allowFullOS | Converts the Windows disk from MBR to GPT without deleting files |
Back up anything important before you convert. If validation fails, the disk usually has too many partitions. After converting, go straight into the BIOS and turn CSM off before Windows boots again.
Windows Commands to Check Secure Boot and TPM
| Command | What you should see |
|---|---|
| msinfo32 | BIOS Mode: UEFI and Secure Boot State: On |
| tpm.msc | The TPM is ready for use, Specification Version 2.0 |
| Confirm-SecureBootUEFI (PowerShell) | True |
| Get-Tpm (PowerShell) | TpmPresent: True and TpmReady: True |
The Secure Boot TPM 2.0 fix generator prints these commands under the steps. If Secure Boot State says Unsupported, the PC is still in Legacy mode. If it says Off after you enabled it, the Secure Boot keys are missing: install the default or factory keys in the same BIOS menu.
Secure Boot TPM 2.0 Fix Generator Worked Example
Modern Warfare 4 will not start on an ASUS board with an Intel CPU, and msinfo32 shows UEFI. The Secure Boot TPM 2.0 fix generator lists seven steps: press Del or F2, disable Launch CSM, set OS Type to Windows UEFI mode and install the default keys, enable PTT, save, and confirm with the commands. If BIOS Mode were Legacy it would add the mbr2gpt step first.
About PC anti-cheat
Secure Boot is a UEFI feature that only lets signed boot software load, and TPM 2.0 is a security chip, usually built into the processor as Intel PTT or AMD fTPM. Windows 11 requires both, and kernel-level anti-cheat systems such as Ricochet, Vanguard and EA Javelin now check for them.
Motherboards from ASUS, MSI, Gigabyte and ASRock, and laptops from Dell, HP and Lenovo, all support both features on hardware from about 2018 onward. They are often simply switched off.
The Secure Boot TPM 2.0 fix generator on this page is free to use, and we update it when the game changes its numbers.
Official page: Microsoft Support: enable TPM 2.0 on your PC.
Related Calculators
If this Secure Boot TPM 2.0 fix generator helped, these free tools work the same way.
- MW4 TPM 2.0 and Secure Boot error fix
- New CPU installed, fTPM NV corrupted fix
- Vanguard 216 error fix
- Windows 11 repair command generator
- All free gaming and tech calculators
New this month: GTA 6 preload troubleshooter, Roblox error code fixer, MW4 settings generator, Minecraft exit code analyzer.
Frequently Asked Questions
Quick answers about PC anti-cheat and the Secure Boot TPM 2.0 fix generator.
How do I enable Secure Boot for Modern Warfare 4?
Check that BIOS Mode is UEFI in msinfo32, then in the BIOS disable CSM, enable Secure Boot with the default keys and enable Intel PTT or AMD fTPM.
How do I fix "This build of Vanguard requires TPM version 2.0 and Secure Boot"?
Enable Intel PTT or AMD fTPM and Secure Boot in the BIOS. Valorant shows VAN9001 or VAN9003 until both are on.
Why is Secure Boot greyed out?
CSM is still on, or the Secure Boot keys are missing. Disable CSM first, then install the default or factory keys.
Do I need to convert MBR to GPT for Secure Boot?
Only if msinfo32 shows BIOS Mode as Legacy. Use mbr2gpt, which converts without deleting files.
Does Secure Boot lower FPS?
No. It only checks software when the PC starts.
Is the Secure Boot TPM 2.0 fix generator free?
Yes. It runs in your browser and needs no sign-up.
Axee Davies is the founder of AxeeTech, publishing gaming guides, codes, and Windows how-tos since March 2013. A tech enthusiast for 13+ years — starting with smartphones and Android rooting — he now runs a site that puts out a new guide every day for Roblox players, traders, and Windows users. More about AxeeTech
More Games You May Like
Bloons TD Unblocked: How to Play at School (2026)
Get 100% Working AO Net Mod. [Download for Free]
Cricket 26 NRR Calculator: Free Net Run Rate and Best Next-Match Planner (T20, ODI)
PUBG Mobile Flash Compatibility Checker: Free RAM, Storage and Best FPS Check (2GB Phones)
Once Human Starchrom Calculator: Free Cap and Best Crate Planner (66,000 a Month)
Night Rider Calculator: Free Bike Cost, Cash and Best Upgrade Planner (10 Bikes)
Creature Kitchen Recipe Finder: Free Locations for All 43 Best Recipes (2026)
+1 Anime Eyes Calculator: Free Shinobi Egg Odds and Best Chakra Multiplier Tool (2026)