TPM 2.0/安全启动指南

Many players are facing technical hurdles due to security requirements. I’ve put this guide together to help you ensure your PC is 100% ready and to solve that specific BIOS reporting bug that prevents the game from launching. Step 1: The Essential Requirement (GPT Partition) Secure Boot will not function if your drive is using an older partition style (MBR). Right-click the Start Button and select Disk Management. Right-click on Disk 0 (where Windows is installed) and select Properties. In the Volumes tab, look for Partition Style. It MUST say GUID Partition Table (GPT). If it says MBR, Secure Boot cannot be enabled without converting the drive first! Step 2: Enabling TPM 2.0 (PTT/fTPM) Before fixing Secure Boot, make sure your security module is active. Most modern anti-cheats require this hardware handshake to verify your PC. Enter BIOS and look for Settings or Advanced. Find Intel Platform Trust Technology (PTT) or AMD fTPM and set it to Enabled. If you don't see these, look for a "Security Device Support" option. Step 3: Solving the BIOS Reporting Bug (Secure Boot) Many users face an issue where the BIOS says "Enabled" but Windows reports it as "Disabled". This usually means the BIOS is stuck in "Setup Mode". Here is how to force it to "Active": Restart your PC and enter the BIOS (tap the Delete key). Under the Boot tab, ensure CSM Support is set to Disabled. Open the Secure Boot menu. Change "Secure Boot Mode" from Standard to Custom, then immediately change it back to Standard. When the prompt "Install Factory Default Keys" appears, select YES. Press F10 to Save and Exit. [/list] Step 4: Final Verification in Windows Don't wait for a crash to find out if it worked. Check your status now: Press Win + R, type msinfo32, and hit Enter. Look for Secure Boot State. It should say On. Also, verify that BIOS Mode says UEFI. Frequently Asked Questions (FAQ) Q: What exactly is UEFI mode? A: Think of it as the modern "brain" of your motherboard. It replaced the old-school BIOS. It’s faster, supports larger drives, and is required for the security features (Secure Boot) that this game needs to run. Q: Will switching to UEFI break my other games or apps? A: No. Most modern apps and games don't even know it's there once Windows starts. In fact, many newer games (like Valorant) already require it. It can even give you a slight FPS boost in some cases! Q: Does EVERY drive need to be GPT? A: No, but it's safer. Some motherboards allow storage drives to be MBR as long as the boot drive is GPT, but others are pickier. However, if you are stuck with a "Disabled" Secure Boot status despite turning it "On," those MBR drives are the likely culprits. On many Gigabyte/Aorus boards, the BIOS may force CSM Support to stay active if it detects any MBR drive, which blocks Secure Boot from working. If you're stuck, use the diskpart command to check all your disks and convert the ones without an asterisk! Q: My BIOS says Secure Boot is "Enabled," but the game still won't launch. Why? A: This is usually because your BIOS is in "Setup Mode" instead of "User Mode." Follow Step 2 of this guide to refresh your Factory Keys. Q: Can I turn Secure Boot off after the game starts? A: No. The game’s anti-cheat checks for this constantly. If you turn it off, the game will either refuse to launch or kick you back to the menu. Q: What if my PC won't boot after I switch to UEFI? A: This only happens if your Windows was installed on an old "MBR" partition. If that happens, just go back into BIOS and turn CSM Support back to Enabled. Then, follow Step 1 of this guide to convert your disk to GPT first. Q: I use a Linux dual-boot setup and the UEFI thing would mess with my distro. Any other way? A: If you don't want to mess with your main UEFI settings every time you switch between OSs, here are possible workarounds: Separate Drive: Install Windows on its own separate SSD while keeping your Linux drive untouched. When you want to play Highguard, you just enable Secure Boot in your UEFI and boot into that specific SSD drive. It keeps your Linux partition safe from Windows updates! Dual BIOS (check if your MB support this): Many modern motherboards support multiple UEFI profiles. You can set Profile 1 to Legacy/CSM for your Linux setup and Profile 2 to UEFI Mode with Secure Boot enabled for Highguard. Just swap the profile in your UEFI dashboard and you're good to go! Q: Does UEFI mode affect how Linux runs on my PC? A: Most modern Linux distros (Ubuntu, Fedora, etc.) run perfectly fine in UEFI mode. The issue is usually only with Secure Boot. By using the methods above, you can keep your UEFI environment stable for work while still meeting the requirements for the game. Q: Why do I need to do all this? Is the game bugged? A: The developers intentionally required Secure Boot and TPM 2.0 to prevent "bootkit" cheats. This is a design choice to ensure a fair experience, with less cheaters, not a bug. The only bug this guide fixes is a common reporting issue where your BIOS says a setting is "Enabled," but Windows still sees it as "Disabled" or "Setup Mode". Q: Is this anti-cheat too invasive? A: Like Valorant, Highguard uses kernel-level protection. If you aren't comfortable with these deep-level requirements, that’s totally fair.