How to Enable Secure Boot and TPM 2.0 for Battlefield 6

Battlefield 6 won't start on PC unless Secure Boot is on, and since August 31, 2026 EA also strictly enforces TPM 2.0. Both are settings in your PC's firmware (UEFI, often still called the BIOS). Most PCs made in the last several years support them, but many ship with them switched off, especially self-built desktops.

This guide shows how to check both settings, switch them on, and fix the problems people hit most often. The steps come from Microsoft's support pages and EA's official Battlefield 6 posts.

Last checked: November 9, 2026.

Before you start

Back up anything important. Turning on Secure Boot doesn't erase files, but if your disk needs converting (see step 3), a backup is your safety net.
Find your BitLocker recovery key if your drive is encrypted. Microsoft lists firmware updates, TPM changes and boot changes among the things that can trigger a BitLocker recovery prompt at startup. You can also suspend BitLocker before you change anything.
Keep your motherboard or laptop manual handy. Every manufacturer names and places these settings a little differently.

Step 1: Check if Secure Boot is already on

Press Windows + R, type msinfo32 and press Enter. EA's own launch post points players to this screen.
Stay on System Summary and find these two lines:

BIOS Mode	Secure Boot State	What it means
UEFI	On	You're done. Move on to the TPM check.
UEFI	Off	Easy fix: turn Secure Boot on in the firmware (step 4).
Legacy	Unsupported	Your PC boots in old Legacy/CSM mode. Convert the disk first (step 3).

Step 2: Check your TPM

Press Windows + R, type tpm.msc and press Enter.
If it says the TPM is ready to use, look under TPM Manufacturer Information. Specification Version must be 2.0.
If you see "Compatible TPM cannot be found", the TPM is most likely turned off in the firmware.

You can also open Windows Security > Device security. If there's no Security processor section, the TPM is off or missing.

Step 3: Convert the disk if BIOS Mode says Legacy

Secure Boot only works when the PC boots in UEFI mode, and UEFI mode needs a GPT disk. If your system disk still uses the older MBR layout, switching the firmware to UEFI without converting first leaves the PC unable to start Windows.

To check, right-click the Start button, open Disk Management, right-click your Windows disk (usually Disk 0), choose Properties and open the Volumes tab. Look at Partition style.

If it says MBR, Windows includes Microsoft's MBR2GPT tool, which converts the system disk without deleting data:

Open Command Prompt as administrator.
Run mbr2gpt /validate /allowFullOS to test whether the disk can be converted.
If validation passes, run mbr2gpt /convert /allowFullOS.
Restart straight into the firmware and switch the boot mode to UEFI (step 4).

MBR2GPT refuses to run if the disk layout isn't suitable, for example with more than three primary partitions or extended partitions. If your drive is encrypted, suspend BitLocker first.

Step 4: Open the UEFI firmware settings from Windows

You don't have to hit a key at the exact right moment during startup. Windows can restart you straight into the firmware:

Windows 11: open Settings > System > Recovery and select Restart now next to Advanced startup. Windows 10: go to Settings > Update & Security > Recovery.
On the blue screen, choose Troubleshoot > Advanced options > UEFI Firmware Settings.
Select Restart. The PC opens the firmware setup.

Step 5: Turn on UEFI mode and Secure Boot

Inside the firmware:

Find the boot mode setting, often on a Boot tab. Switch it from Legacy or CSM to UEFI. If both are allowed at the same time, make UEFI the only or first option, as Microsoft advises.
Find the Secure Boot option, usually on the Boot or Security tab, and set it to Enabled.
If the Secure Boot option is greyed out or missing, check that Legacy/CSM is fully off. Microsoft notes the PC has to boot in UEFI mode before these settings can be changed. If it still won't change, look up your board's instructions.

Step 6: Turn on the TPM

The TPM option often sits in an Advanced, Security or Trusted Computing menu. Microsoft lists these common names:

CPU or board	What the TPM setting may be called
Intel	Intel PTT, Intel Platform Trust Technology
AMD	AMD fTPM switch, AMD PSP fTPM
Any	Security Device, Security Device Support, TPM State

Set it to Enabled, then choose Save and exit. The PC restarts into Windows.

Step 7: Confirm and launch the game

Run msinfo32 again. BIOS Mode should show UEFI and Secure Boot State should show On. Then check tpm.msc for version 2.0 and launch Battlefield 6.

If you're unsure your PC can handle the game itself, compare it with the full Battlefield 6 PC system requirements.

Common problems and fixes

Windows won't boot after switching to UEFI

The disk is still MBR. Go back into the firmware, turn CSM/Legacy back on, start Windows, and do step 3 before switching again.

The game still complains about TPM

EA said in 2026 that some real players needed a motherboard BIOS update from their manufacturer before their TPM passed its stricter check. Install the latest BIOS from your board or laptop maker's support page, then check tpm.msc again. Updating the BIOS can reset firmware settings, so check that Secure Boot and TPM are still on afterwards.

BitLocker asks for a recovery key

That's expected after some firmware changes. Enter the key you saved, and Windows starts normally.

What about HVCI and VBS?

The specs list "HVCI capable" and "VBS capable". HVCI is Windows' Memory integrity switch, found under Windows Security > Device security > Core isolation. EA said in August 2026 that it hasn't enforced either one yet and will announce before it does. Memory integrity needs hardware virtualization turned on in the firmware. If Windows blocks it because of an incompatible driver, update or remove that driver.

Frequently asked questions

Why does Battlefield 6 need Secure Boot?

Secure Boot stops untrusted software from loading while the PC starts, and EA says it helps its Javelin anti-cheat detect, remove and deter cheaters. The game won't run on PC without it. By late November 2025, EA reported that only about 1.5% of PC players still couldn't turn it on.

How do I know if Secure Boot is enabled?

Press Windows + R, type msinfo32 and press Enter. In System Summary, Secure Boot State should say On and BIOS Mode should say UEFI. If it says Unsupported, your PC is booting in Legacy mode.

Will enabling Secure Boot delete my files?

No. Turning Secure Boot on doesn't touch your data. Converting a disk from MBR to GPT with Microsoft's MBR2GPT tool is also designed to keep your data, but back up important files first in case something goes wrong.

Can I turn Secure Boot off after I finish playing?

You can, but Battlefield 6 won't run again until you turn it back on. Most people simply leave it on, and Microsoft recommends turning it on for better security anyway.

What is Intel PTT or AMD fTPM?

They're firmware-based TPMs built into most modern Intel and AMD platforms, so you usually don't need a separate TPM module. Turning on Intel PTT or AMD fTPM in the firmware, then checking that tpm.msc shows version 2.0, is usually all it takes.

Does Battlefield 6 require Windows 11?

No. Windows 10 64-bit is the minimum, and Windows 11 is recommended. You need Secure Boot and TPM 2.0 on either version.