How to Fix Valorant Error Code VAN 9003 on Windows 11 (TPM & Secure Boot)
Valorant Error Code VAN 9003 indicates that Riot Vanguard cannot confirm that Secure Boot and TPM 2.0 (Trusted Platform Module) are actively running in UEFI mode on Windows 11. To resolve this, boot into your motherboard BIOS, convert your boot partition from CSM/Legacy to UEFI, enable Secure Boot (Standard Mode), and activate Intel PTT or AMD fTPM.
Why Does Riot Vanguard Require VAN 9003 Enforcement?
On Windows 11, Riot Games enforces hardware-level security policies to prevent rootkit-level cheats from loading before the operating system kernel. When Vanguard checks your system at startup, it flags the following issues:
- Secure Boot Disabled in Firmware: Even if your motherboard supports Secure Boot, running in “Custom” or “Disabled” mode causes Vanguard’s validation check to fail.
- Legacy BIOS Mode (CSM Enabled): Systems running on an older MBR partition layout require Compatibility Support Module (CSM), which actively blocks Secure Boot.
- Disabled Firmware TPM (fTPM/PTT): Vanguard requires an operational Trusted Platform Module to store cryptographic machine verification keys securely.
- Corrupted Vanguard Service (vgc): If the underlying Windows background service fails to initialize automatically, it can trigger a false-positive VAN 9003 alert.
What Are the Differences Between Motherboard Settings for VAN 9003?
Depending on your CPU and motherboard manufacturer, the names for these security settings vary:
| Motherboard Brand | TPM 2.0 Setting Name | Secure Boot Location | Key Action Needed |
|---|---|---|---|
| ASUS | Intel PTT / AMD fTPM configuration | Boot > Secure Boot | Set OS Type to “Windows UEFI mode” |
| MSI | Security Device Support (PTT) | Settings > Security > Secure Boot | Change Secure Boot Mode to “Standard” |
| Gigabyte | Intel Platform Trust / AMD CPU fTPM | BIOS Features > Secure Boot | Disable CSM Support first, then enable |
| ASRock | Security > Intel PTT / AMD fTPM switch | Security > Secure Boot | Install factory default keys if prompted |
How Do You Enable TPM 2.0 and Secure Boot Correctly?
Follow these steps to configure your system to pass Vanguard’s requirements:
Step 1: Check Current System Status
- Press Windows Key + R, type
msinfo32, and hit Enter. - Under System Summary, verify that BIOS Mode is set to UEFI (if it says “Legacy”, your drive needs an MBR2GPT conversion).
- Look for Secure Boot State. If it displays “Off”, it must be enabled in your firmware.
- Press Windows Key + R, type
tpm.msc, and verify that the status reads: “The TPM is ready for use” (Specification Version 2.0).
Step 2: Enable Settings in BIOS/UEFI
- Restart your PC and tap Del or F2 repeatedly while booting to access your BIOS setup.
- Find the Boot or Security menu and disable CSM (Compatibility Support Module).
- Locate Secure Boot, change the state to Enabled, and set the mode to Standard.
- Navigate to Trusted Computing or Peripherals and enable AMD fTPM or Intel PTT.
- Press F10 to save changes and restart your PC.
If you also encounter persistent in-game handshake issues across other online titles, read our guide on resolving connection and DNS errors. Check for reported Vanguard service disruptions on the Riot Games Status Portal.
TL;DR: Summary Checklist for Fixing VAN 9003
- Core Cause: Windows 11 Vanguard requires active UEFI, Secure Boot, and TPM 2.0.
- Quick Check: Run
tpm.mscandmsinfo32to identify which requirement is disabled. - BIOS Fix: Turn off CSM Support, toggle Secure Boot to Enabled, and activate fTPM/PTT.
- Drive Prerequisite: Windows boot drive must use a GPT partition layout to boot in UEFI mode.
One thought on “How to Fix Valorant Error Code VAN 9003 on Windows 11 (TPM & Secure Boot)”