In this guide we will help you with issues that you may face when enabling four key hardware features that are currently, or soon to be, required to continue using the FACEIT Anti-Cheat as mentioned in our Anti-Cheat blog here.
This article will include guides and troubleshooting for enabling TPM 2.0, Secure Boot, IOMMU and Virtualization.
⚠️Any changes to your BIOS are made at your own risk, we are not responsible for any issues with your PC. If you are not familiar with making changes in your BIOS we recommend contacting a professional.
BIOS settings vary widely depending on the manufacturer, we recommend checking out your motherboard manufacturer's support resources before making any changes
By changing your BIOS/UEFI settings, you may have to troubleshoot drivers or boot issues, and in the worst-case it may require some players may need to replace outdated components or move to a newer PC. This is a significant ask that we did not take lightly but the universal implementation of these security settings is an important step for the greater good of the whole competitive ecosystem by helping us better protect against cheaters.
Contents
Before you start
If your BIOS Mode is set to "Legacy" then you need to switch to UEFI to enable these settings. You might also need to convert your hard drive's partition style from MBR to GPT. This is a critical step that, if done incorrectly, could prevent your computer from booting. If you aren't confident doing this yourself, it's best to consult a professional.
- You can find out how to check your drive's partition style in this video.
- This video explains how to convert your drive to GPT.
To check if your BIOS is UEFI:
- Press the Windows key, type msinfo32, and press Enter.
- In the System Information window, find BIOS Mode. It should say UEFI.
What can I do if my hardware does not support these features?
These features are required to enhance the effectiveness of the Anti-Cheat and uphold the highest level of integrity. When you are required to enable these features there is no way around it. If your hardware does not support it you will need to update to supported hardware to continue using the Anti-Cheat.
The majority of CPUs/Motherboards released after 2015 have compatibility for these features. A quick way to check is to ensure that your hardware is compatible with Windows 11.
TPM 2.0
TPM (Trusted Platform Module) 2.0 is a security chip on your computer's motherboard that provides hardware-based security for your system. Many modern applications, including anti-cheat software and Windows 11, require it to be enabled. From November 25th 2025, TPM 2.0 being enabled will be mandatory for all players wanting to play on FACEIT.
Together, Secure Boot and TPM 2.0 can create a verifiable report that guarantees your PC started up without loading any unauthorized or modified software. Our FACEIT Anti-Cheat can check this report before it allows a player to connect to a FACEIT match. This helps block or detect cheaters because many advanced cheats attach to unauthorized or modified legitimate software to access the PC’s kernel.
⚠️Important note: If your BIOS Mode is set to "Legacy" and you need to switch to UEFI, you might also need to convert your hard drive's partition style from MBR to GPT. Check the ‘Before you start’ section for more information.
How to check for and enable TPM 2.0
Please visit our full guide on how to enable TPM 2.0 here.
Common Errors
TPM attestation is not ready.
If the Status under Security processor details in Windows Security does not show Attestation as "Ready", you may be experiencing an issue with your Trusted Platform Module (TPM).
-
If your Manufacturer Name is AMD and your Manufacturer Version is 3.*.0.* (for example 3.92.0.5), your motherboard likely needs a BIOS update to resolve a known issue with TPM. For more information, please refer to this article.
Please refer to the list below for the latest information from your motherboard vendor:- Acer: How to download the latest BIOS version.
- ASRock: A BIOS update was released to fix this issue and can be downloaded from ASRock support.
- BIOSTAR: A BIOS update was released to fix this issue and can be downloaded from BIOSTAR support.
- Colorful: The latest BIOS version can be downloaded from Colorful support.
- Dell: How to update the BIOS.
- Gigabyte: A BIOS update was released to fix this issue and can be downloaded from Gigabyte support.
- HP: Updating the BIOS.
-
MSI: A BIOS update was released to fix this issue and can be downloaded from MSI support. Please see how to update the BIOS.
Note: The standard (non-beta) version may not yet fix this issue. You may have to install the latest beta version to resolve the error.
- General Troubleshooting: If the issue persists, or if you have a different manufacturer, please read this article on Microsoft's website to troubleshoot TPM issues.
TPM attestation failed
This error indicates that TPM 2.0 is enabled but experiencing functional issues. We've identified several common scenarios that can trigger this error:
Case 1: Playing from an Internet Cafe Using CCU Cloud Update
A known issue with CCU Cloud Update can interfere with proper TPM functionality. Please contact CCU Cloud Update support directly for assistance and a resolution.
Case 2: Faulty Discrete TPM (dTPM) Module
If you have a discrete TPM (dTPM) module installed on your motherboard, it might be the source of the problem. We recommend switching to firmware-based TPM (fTPM) instead. This often resolves issues related to dTPM modules.
General Troubleshooting
If the above scenarios do not apply to your situation, the issue may be resolved by updating your motherboard's BIOS. To do this:
-
Identify Your Motherboard Model:
- Press the Windows key.
- Type msinfo32 and press Enter.
- In the System Information window, locate "BaseBoard Manufacturer" and "BaseBoard Product" Note these details.
-
Find BIOS Updates:
- Open your web browser and search for: bios update [your motherboard model] (e.g., "bios update ASUS ROG Strix Z490-E Gaming").
- This search should lead you to the support page of your motherboard's manufacturer website, where you can find the latest BIOS updates and instructions.
Secure Boot
Secure Boot is a UEFI (Unified Extensible Firmware Interface) security standard that prevents malicious software from loading during your PC's startup. This will be required to be enabled for all players from 25th of November 2025 onwards.
⚠️Important note: If your BIOS Mode is set to "Legacy" and you need to switch to UEFI, you might also need to convert your hard drive's partition style from MBR to GPT. Check the ‘Before you start’ section for more information.
How to check for and enable Secure Boot
Please visit our full guide on how to enable Secure Boot here.
Common Errors
Secure Boot is not working properly
Some MSI motherboards have a known issue where Secure Boot doesn't function properly with its default settings, even when it appears as "Enabled" in both the BIOS and Windows. For a deeper technical explanation, you can refer to this blog post.
To fix this, you'll need to adjust your BIOS settings. The exact steps vary depending on your specific BIOS version, so please refer to the instructions below for both cases. Please proceed with caution, as these changes are made at your own risk.
Updating your settings with a recent BIOS
- Restart your computer and press the DEL key during boot-up to enter the BIOS.
- Navigate to Settings > Security > Secure Boot.
- Set Secure Boot Mode to Custom, then set Secure Boot Preset to Maximum Security.
- Press F10 to save the changes and exit. Confirm by clicking Yes.
For additional troubleshooting, please refer to this video from MSI.
Updating your settings with an older BIOS
- Restart your computer and press the DEL key during boot-up to enter the BIOS.
- Navigate to Settings > Security > Secure Boot.
- Set Secure Boot Mode to Custom.
- Click on Image Execution Policy.
- Set Removable Media and Fixed Media to Deny Execute.
- Press F10 to save the changes and exit. Confirm by clicking Yes.
What if I can’t find these settings?
If your BIOS does not have the "Secure Boot Preset" or "Image Execution Policy" options, it means you'll need to update your BIOS first.
-
Identify Your Motherboard Model:
- Press the Windows key.
- Type msinfo32 and press Enter.
- In the System Information window, note the value for BaseBoard Product.
-
Find and Download a BIOS Update
- Go to the official MSI support website.
- Use the motherboard model you just found to search for the correct product page.
- On the product page, you can find the latest BIOS updates and detailed installation instructions
General Troubleshooting
PC won’t boot after enabling Secure Boot
This usually means that you have missed a step when enabling Secure Boot. Please consult your motherboard manufacturers support resources and make sure to follow each step.
IOMMU
IOMMU provides memory protection by preventing Direct Memory Access (DMA)-capable I/O devices from accessing memory outside their designated regions, and it enables secure hardware assignments to virtual machines. This is already required for many players.
IOMMU is like a hardware-level firewall for RAM, restricting what plug-in devices can access. This prevents DMA-card cheats from reading protected game memory, and we can combine IOMMU with VBS to ensure reliable enforcement. Both IOMMU and VBS have been rolled out partially on FACEIT since April 2025. Already 60% of FACEIT players are required to have it, and have been enforced in full to certain player groups, such as all players who are above 3,000 Elo since August 2025.
Identify Your CPU and Motherboard Brand
You can find this information using the System Information tool (msinfo32):
- Press the Windows key.
- Type msinfo32 and press Enter.
- Look for Processor and BaseBoard Manufacturer/Model.
Enable IOMMU
BIOS settings vary by motherboard model. It is recommended to search online for:
“How to enable IOMMU on [your motherboard model]”
or visit your motherboard manufacturer’s website for specific instructions.
For specific steps for a few of the biggest motherboard manufacturers check out our main article on enabling IOMMU.
Virtualization
Virtualization (Intel VT-x/AMD SVM) is a technology that enhances PC security by enabling the processor to create isolated virtual environments that protect the operating system from malicious software and rootkits. This allows additional Windows security mechanisms to run critical security processes in a secure and protected environment. This feature is already required for the majority of players with compatible hardware.
Identify Your CPU and Motherboard Brand
You can find this information using the System Information tool (msinfo32):
- Press the Windows key.
- Type msinfo32 and press Enter.
- Look for Processor and BaseBoard Manufacturer/Model.
Enable Virtualization
BIOS settings vary by motherboard model. It is recommended to search online for:
“How to enable virtualization on [your motherboard model]”
or visit your motherboard manufacturer’s website for specific instructions.
For specific steps for a few of the biggest motherboard manufacturers check out our main article on enabling Virtualization.
Common Errors
Please enable Memory Integrity to continue
In order to reduce the possibility of cheating, some players may be required to enable Memory Integrity. To do so, please read this article from Microsoft.
If the Memory Integrity option is not available in Windows Security, please make sure that Virtualization is turned on in your BIOS.
If you are experiencing blue screens after enabling this option, please try the following solutions:
- Run Windows Update and make sure your system is fully up to date
- Uninstall any old/incompatible Anti-cheat software
- Upgrade your motherboard's BIOS to the latest version