Enabling IOMMU / DMA Protection

IOMMU is a powerful hardware security feature, which is used to protect your machine from malicious software as well as helping guarantee the integrity of matches protected by FACEIT Anti-cheat.

We are rolling out IOMMU as a requirement progressively, and recommend turning this feature on in BIOS if you haven’t already done so. If you are now required to activate IOMMU and haven’t done so, an error message will pop up when launching the FACEIT Anti-cheat. To remove it and get back on the server, make sure to read the sections of this article that are relevant to you!

We've published the final rollout schedule with more details about why we are requiring this in order to improve protection against cheats across matchmaking and official matches on FACEIT.

⚠️Any changes to your BIOS are made at your own risk, we are not responsible for any issues with your PC. If you are not familiar with making changes in your BIOS we recommend contacting a professional.

🖥️ Identify Your CPU and Motherboard Brand

No matter your build, the first step is inevitably to understand which hardware you are using, in order to perform the right changes. You can find this information using the System Information tool (msinfo32):

  1. Press the Windows key.
  2. Type msinfo32 and press Enter.
  3. Look for Processor and BaseBoard Manufacturer/Model.

🔧 BIOS Settings Overview

To enable IOMMU, you will need to perform a specific set of steps tailored to your build, as your BIOS settings vary by motherboard and CPU model - make sure these have all been updated to the latest versions! To find how to enable IOMMU, we recommend searching online for:

“How to enable IOMMU on [your motherboard model]”

or visit your motherboard manufacturer’s website for specific instructions.

We’ve also included a set of instructions for the most common setups below - make sure you’ve identified which section applies to you, and follow the instructions!

ASRock Motherboards

  • Press the DEL key while starting your PC to enter BIOS
  • Once inside the BIOS, look at the top or bottom of the screen. If you are in "Easy Mode", press F6 to switch to "Advanced Mode".
  • Go to Advanced
  • If you have an AMD CPU:
    • Go to AMD CBS, then NBIO Common Options
    • Set IOMMU from Auto/Disabled to Enabled
    • If DMA Protection and DMAr Support are visible, set them from Auto/Disabled to Enabled
    • If Pre-boot DMA Protection and Kernel DMA Protection indicator are visible, set them from Auto/Disabled to Enabled
  • Otherwise, if you have an Intel CPU:
    • Go to Chipset Configuration
    • Set VT-d to Enabled
    • If Control IOMMU Pre-boot behavior is visible, set it to Enable IOMMU during boot
      • If Enable IOMMU during boot is unavailable, set it to Enable IOMMU
    • If Pre-boot DMA Protection is visible, set it to Enabled

ASUS Motherboards

  • Press the DEL key while starting your PC to enter BIOS
  • Go to Advanced
  • If you have an AMD CPU:
    • Go to AMD CBS
    • Set IOMMU from Auto/Disabled to Enabled
    • If DMA Protection and DMAr Support are visible, set them from Auto/Disabled to Enabled
    • If Pre-boot DMA Protection and Kernel DMA Protection indicator are visible, set them from Auto/Disabled to Enabled
      • You may need to open NBIO Common Options to find these settings
  • Otherwise, if you have an Intel CPU:
    • Go to System Agent (SA) Configuration
    • Set VT-d to Enabled
    • If Control IOMMU Pre-boot behavior is visible, set it to Enable IOMMU during boot
      • If Enable IOMMU during boot is unavailable, set it to Enable IOMMU
    • If Pre-boot DMA Protection is visible, set it to Enabled

MSI Motherboards

  • Press the DEL key while starting your PC to enter BIOS
  • Go to OC (Overclocking) section
  • If you have an AMD CPU:
    • Go to Advanced CPU Configuration -> AMD CBS
    • Set IOMMU from Auto/Disabled to Enabled
    • If DMA Protection and DMAr Support are visible, set them from Auto/Disabled to Enabled
    • If Pre-boot DMA Protection and Kernel DMA Protection indicator are visible, set them from Auto/Disabled to Enabled
  • If you have an Intel CPU:
    • Go to CPU Features
    • Set VT-d to Enabled
    • If Control IOMMU Pre-boot behavior is visible, set it to Enable IOMMU during boot
      • If Enable IOMMU during boot is unavailable, set it to Enable IOMMU
    • If Pre-boot DMA Protection is visible, set it to Enabled
    • If DMA Control Guarantee is visible, set it to Enabled
Was this article helpful?