His New Game Would Not Start Until TPM 2.0 and Secure Boot Were Turned On. A BIOS Update Came First.
A Woodstock gaming PC could not start a newly installed game because the game's anti-cheat requires TPM 2.0 and Secure Boot. The BIOS was out of date, so it was updated first. Then the TPM was confirmed on and Secure Boot was turned on, after checking that Windows starts in UEFI mode. The game launched, and the computer ran smoothly again.
“had a great experience with Woodstock Computer Repair! Justin did an excellent job getting my computer running smoothly again, fixing the issues, and updating the BIOS. His knowledge, professionalism, and attention to detail really stood out. My computer is working great, and I couldn’t be happier with the results. I highly recommend Woodstock Computer Repair to anyone looking for reliable, knowledgeable, and professional computer service. Great job, and thank you for getting my computer back in top shape!”
— Richard P. · Google review · Read the full storyThis was a house call in Woodstock for a gaming desktop. Richard had just installed a new game, and it would not start. Instead of the title screen he got a message saying the PC needed TPM 2.0 and Secure Boot turned on. The computer was plenty fast for the game. It was being turned away at the door.
Why a game cares about your BIOS settings
More and more online games ship with anti-cheat that checks the computer itself before it lets you play. Call of Duty, Battlefield 6 and Valorant all do this. They want proof that Windows started clean, and the two things that provide it are a security chip called TPM 2.0 and a startup check called Secure Boot. Most gaming PCs built in the last several years have both. On a lot of them, one or both are simply switched off, because nothing needed them until now.
The BIOS came first
Both settings live in the BIOS, the setup screen underneath Windows. Richard’s BIOS was out of date, and on older firmware these options can be missing or misbehave. So before changing anything I updated the BIOS to the current version from the board’s maker.
With the firmware current, I made sure the TPM was on (boards label it Intel PTT or AMD fTPM) and turned on Secure Boot. The order matters, and so does one check beforehand: Secure Boot only works when Windows starts in the modern UEFI mode. Switch it on for a PC that starts the old way and it will not boot at all. This is the step where do-it-yourself attempts go sideways.
Windows came back up, confirmed both were on, and the game launched. The update did more than open the door, too. The machine had been giving him other trouble, and with the newer BIOS it ran smoothly again, games included.
If a game tells you to turn on TPM 2.0 and Secure Boot
- Check what you have first. Press the Windows key, type tpm.msc and look for version 2.0. Then open System Information and look at Secure Boot State and BIOS Mode. That tells you which of the two is actually off.
- Do not flip Secure Boot blind. If BIOS Mode says Legacy, turning Secure Boot on will leave the PC unable to start until it is set back. The drive has to be converted first, and that is a job to do with a backup in hand.
- Have your BitLocker key ready. Changing these settings can make Windows ask for the 48-digit recovery key on the next start. It is saved in your Microsoft account. Here is where to find it.
- Never clear the TPM to fix it. That option erases the keys stored in the chip, and on an encrypted drive it can lock you out of your own files.
- Update the BIOS from the maker’s site only. And never cut power during the update. A half-written BIOS can leave the board unable to start.
If a game is locked behind these settings and you would rather not gamble with the BIOS, call or text. I do this at your home, on your own setup.
Questions people ask
Why does my game say TPM 2.0 and Secure Boot are required?
Its anti-cheat checks that Windows started clean before it lets you play online. Call of Duty, Battlefield 6 and Valorant all require both on PC.
How do I check if TPM 2.0 and Secure Boot are on?
Run tpm.msc and look for specification version 2.0, then open System Information and check Secure Boot State. Both should show as on.
Is it safe to turn on Secure Boot myself?
Only if System Information shows BIOS Mode as UEFI. On a PC that starts in Legacy mode, turning Secure Boot on stops it from booting until the setting is put back.
Do I need to update the BIOS to turn on TPM or Secure Boot?
Not always, but on old firmware these settings can be missing or misbehave. Updating the BIOS first is the safer order.