TPM 2.0 and Secure Boot are different security features. TPM helps protect cryptographic keys and supports security checks. Secure Boot checks trusted signatures during startup. Enabling one does not automatically enable the other.
For PC gamers, the distinction matters when a game refuses to launch because of a security requirement. The useful first step is to check what Windows reports for each feature, then compare those results with the publisher’s instructions.
This guide explains the difference, shows how to check both settings, and helps you gather the right information before changing your PC’s firmware configuration.
Technical information checked: October 16, 2026. Game requirements and support instructions can change.
TPM 2.0 vs Secure Boot: Quick Comparison
| Feature | TPM 2.0 | Secure Boot |
|---|---|---|
| Main role | Supports hardware-backed protection of keys and security operations. | Checks startup software against the firmware’s trust policy. |
| Where to check | Run tpm.msc in Windows. | Run msinfo32 and check Secure Boot State. |
| What to record | TPM status and specification version. | BIOS Mode and Secure Boot State. |
| Does it replace the other? | No. | No. |
What Is TPM 2.0?
TPM stands for Trusted Platform Module. Windows uses it for security functions associated with features such as BitLocker and Windows Hello. Depending on the computer, TPM functionality may be implemented through firmware or a separate hardware component.
Firmware settings may call it AMD fTPM, Intel PTT, or another manufacturer-specific name. Those labels alone do not confirm its active status or version in Windows.
Microsoft’s TPM support guide explains how to check whether TPM 2.0 is available and enabled.
What Is Secure Boot?
Secure Boot is a UEFI security feature that checks signatures on startup components, including the operating-system bootloader. Its purpose is to help prevent untrusted code from entering the boot process.
It works alongside other protections. Microsoft distinguishes Secure Boot from Trusted Boot, which continues verification as Windows starts loading.
A PC using UEFI is not necessarily running with Secure Boot enabled. Check the setting’s reported state separately.
For more detail, see Microsoft’s explanation of Secure Boot and Trusted Boot.
Why Do These Features Matter for PC Gaming?
Some games check system security settings as part of their launch requirements. For example, Riot’s published VALORANT specifications require TPM 2.0 and UEFI Secure Boot on Windows 11.
That does not establish identical requirements for every game or operating-system configuration. Use the publisher’s current documentation and the exact error message shown on your PC.
For an overview of the games covered by our guides, visit the PC Gaming Anti-Cheat & Windows Compatibility Database.
To understand how game-security drivers relate to these requirements, read our guide to kernel-level anti-cheat. It explains why kernel access, startup behavior and Windows security requirements are separate questions.
For Riot-specific requirements, read our Vanguard Windows security and Pre-Check guide. It distinguishes VALORANT system requirements, restriction messages and eligibility for optional on-demand operation.
How to Check TPM 2.0 in Windows
- Press Windows + R.
- Enter
tpm.mscand press Enter. - Read the status information.
- Under TPM Manufacturer Information, find Specification Version.
A ready status and specification version 2.0 confirm that Windows currently recognizes a usable TPM 2.0.
If no compatible TPM is detected, that does not immediately prove the hardware is absent. It may be disabled or unavailable to Windows. Check your device manufacturer’s documentation before purchasing hardware.
How to Check Secure Boot in Windows
- Press Windows + R.
- Enter
msinfo32and press Enter. - Select System Summary.
- Record BIOS Mode and Secure Boot State.
- On: Windows reports Secure Boot as enabled.
- Off: Windows reports it as disabled.
- Unsupported: Investigate the hardware and boot configuration before concluding that the PC cannot support it.
Microsoft explains that firmware configuration can affect whether Secure Boot appears available. Follow its Windows 11 and Secure Boot guidance and your manufacturer’s instructions.
If System Information shows Legacy or you are unsure what BIOS Mode means, read our UEFI vs Legacy BIOS guide before changing your boot settings.
Windows Requirements and Game Requirements Are Different
Microsoft specifies TPM 2.0 for Windows 11 and describes the upgrade requirement for Secure Boot as being Secure Boot capable. A game can additionally require Secure Boot to be switched on.
Therefore, “Windows 11 is installed” is not enough information to diagnose a game’s security error. Record the actual settings and compare them with the game’s requirements.
For VALORANT-specific context, read our VALORANT Windows Compatibility Guide alongside Riot’s official PC specifications.
What Do VAN 9001 and VAN 9003 Mean?
- VAN 9001: Riot says Vanguard requires TPM 2.0 but does not detect it as enabled.
- VAN 9003: Riot identifies Secure Boot not being enabled as the issue.
Use the corresponding official instructions for VAN 9001 or VAN 9003. A similar-looking error number may require different troubleshooting.
Before Changing Firmware Settings
Checking status in Windows does not require clearing the TPM. Clearing it removes associated keys and can affect access to protected data or sign-in methods.
Before making firmware changes, back up important files, ensure you can access any BitLocker or device-encryption recovery key, and consult the instructions for your exact PC or motherboard.
Do not clear a work or school computer’s TPM without your IT administrator’s instructions. Microsoft documents the precautions in its TPM troubleshooting guide.
What to Send Support If the Game Still Will Not Launch
Collect the following information so support can investigate the actual configuration:
- The exact game error code and message.
- Your Windows version and build, available through
winver. - Your PC or motherboard model.
- The TPM status and specification version.
- The BIOS Mode and Secure Boot State.
- Any recent Windows or firmware changes.
Share relevant fields rather than an unrestricted system-information export, which may contain identifiers you do not need to publish.
Frequently Asked Questions
Is TPM 2.0 the same as Secure Boot?
No. They have different roles and must be checked separately.
Does enabling TPM automatically enable Secure Boot?
No. Confirm each feature’s status in Windows after following the appropriate manufacturer instructions.
Does every PC game require both?
Do not assume a requirement applies across all games. Check the publisher’s current requirements for your operating system and configuration.
Does TPM 2.0 mean my PC has one universal HWID?
No. TPM terminology should not be treated as a synonym for every hardware identifier. Read our Hardware ID Explained guide for that distinction.
Should I buy a utility before checking these settings?
Start with the built-in Windows checks and official support instructions. If you are separately evaluating third-party software, use our HWID Spoofer Compatibility Checklist to organize your system information and questions before purchasing.