TPM & Secure Boot
A step-by-step guide to enabling TPM 2.0 and Secure Boot on your PC to meet Easy Anti-Cheat's new security requirements for Rust.
What's Going On?
To keep Rust fair and help reduce cheating, we are teaming up with Easy Anti-Cheat (EAC) / Epic Online Services (EOS) to start requiring TPM and Secure Boot on your computer. It checks that your computer is safe and trusted before letting you in to play.
Our first phase of this rollout will not be a global requirement just yet. As of March 2026, it will be enabled on select servers. These servers will show special "secure" tags in the browser. Our second phase rollout will require it globally. We will communicate this timeline on our monthly Devblog.
Many popular games such as Valorant already require this. Don't worry — if your computer was built in the last few years, you probably already have everything you need. You might just need to turn it on. This guide will walk you through how to do that, step by step.
What Are TPM and Secure Boot?
TPM (Trusted Platform Module)
TPM is a tiny security chip either built into your computer's motherboard, or added as a small chip on it. It works like a safe that holds secret keys to prove your computer is trustworthy. Modern computers have this built in. It's called fTPM (firmware TPM) and just needs to be switched on in your settings.
Secure Boot
Secure Boot is a feature that checks everything loading up when your computer starts. It makes sure nothing sneaky, like cheat software, has snuck in before the game even launches. It's already a built-in feature on most computers — it just might be turned off.
Step 1: Check if you already have it
Before diving into intimidating BIOS menus, let's check if your PC already has TPM and Secure Boot enabled. It might already be ready!
Press Windows + R on your keyboard at the same time. A small box will appear. Type this and press Enter:
tpm.mscA window will open. If it says "The TPM is ready for use", great news — your TPM is already enabled! If it says it can't find a TPM, you'll need to enable it using the steps below.
To check Secure Boot, press Windows + R again and type:
msinfo32Look for "Secure Boot State" in the list. If it says "On", you're set! If it says "Off", keep reading.
Step 2: Enter your BIOS / UEFI
The BIOS (also called UEFI on newer computers) is like your computer's settings brain. It controls everything before Windows starts loading. This is where you enable TPM and Secure Boot.
⚠️ Warning before you start
The BIOS looks different on every computer. The steps below are a general guide. Your screen might look a little different depending on your motherboard brand and model.
IMPORTANT: Always refer to your specific motherboard manual or manufacturer's website for exact instructions.
You can find your motherboard model by pressing Windows + R and typing: msinfo32
How to enter the BIOS
To enter the BIOS, you need to press a special key right when your computer starts booting (before Windows loads). The key varies by computer manufacturer:
| Computer / Motherboard Brand | Key to press |
|---|---|
| ASUS | DEL / F2 |
| MSI | DEL |
| Gigabyte | DEL / F2 |
| ASRock | F2 / DEL |
| Intel NUC | F2 |
| HP | F10 / ESC |
| Dell | F2 / F12 |
| Lenovo | F1 / F2 / DEL |
| Acer | F2 / DEL |
Restart your computer and keep pressing that key repeatedly as soon as you press the power button. If you miss it and Windows starts loading, just restart and try again.
Step 3: Enable TPM
Once inside the BIOS, here's what to do. Remember: the exact menu names may look a little different on your computer. Refer to your motherboard manual if you get lost.
For AMD processors (Ryzen):
- Look for a menu called "Advanced", "AMD CBS", or "AMD fTPM Configuration".
- Find an option called "AMD fTPM switch" or "TPM Device Selection".
- Change it to "Firmware TPM" or "AMD CPU fTPM".
- Save and exit (usually by pressing F10).
For Intel processors (Core i3/i5/i7/i9):
- Look for a menu called "Advanced", "PCH-FW Configuration", or "Security".
- Find an option called "Intel PTT" or "TPM Device".
- Enable it or set it to "Enable".
- Save and exit (usually by pressing F10).
📋 Not sure which processor you have?
On Windows, press Windows + R and type: msinfo32
Look at the "Processor" line — it will say Intel or AMD.
Step 4: Enable Secure Boot
Still inside the BIOS? Great. Now let's find Secure Boot. Again, menus may look different; refer to your motherboard documentation if needed.
- Look for a menu called "Boot", "Security", or "Authentication".
- Find an option called "Secure Boot".
- Change it to "Enabled".
- Some computers ask you to set the "Secure Boot Mode" to "Standard" — choose that if prompted.
- Save and exit (usually F10, then confirm by pressing Y or Enter).
🔒 If Secure Boot is greyed out (you can't click on it):
This sometimes happens because your hard drive is set to an older mode called "Legacy" or "CSM".
You may need to change your BIOS boot mode from "Legacy" to "UEFI" first.
WARNING: This can sometimes cause the computer not to boot correctly. Look up specific instructions for your motherboard model before making this change, or ask someone with experience for help.
Step 5: Save, restart, and verify
After making changes, save and exit the BIOS (look for "Save & Exit" or simply press F10). The computer will restart.
Once Windows loads, let's verify everything worked:
- Press Windows + R and type
tpm.msc: it should say "The TPM is ready for use". - Press Windows + R and type
msinfo32: "Secure Boot State" should now say "On".
If both show as ready, you're all set to play Rust when these requirements go into effect.
What if my PC is too old?
Unfortunately, not all computers support TPM 2.0 and Secure Boot. Older hardware — generally computers built before 2016 — may simply not have these features, even if you check every BIOS menu.
If you've followed all the steps and can't find TPM or Secure Boot anywhere, your hardware may not support it. Some signs:
- Your BIOS looks very old and basic (no mouse support, very simple menus).
- There's no mention of TPM, fTPM, PTT, or Secure Boot anywhere in the BIOS.
- The
tpm.mscwindow says "compatible TPM cannot be found" and you've checked all BIOS menus.
🛠️ Time to think about an upgrade
If your computer doesn't support TPM 2.0 and Secure Boot, you'll need newer hardware to keep playing Rust when these requirements become mandatory.
You don't necessarily need a completely new PC — upgrading the motherboard and processor, or buying a pre-built system that meets the requirements, may be enough.
When looking, check for: TPM 2.0 support, UEFI with Secure Boot, and a 64-bit processor built after 2016.
A knowledgeable friend, a local computer shop, or an online community like r/buildapc can help you find the most affordable solution.
Frequently Asked Questions
"Will this break anything on my computer?"
Enabling TPM and Secure Boot shouldn't break anything on a reasonably modern computer. It's a safe change that many people make every day. If your copy of Windows is legitimate and was installed normally, you have nothing to worry about.
"I can't find the options in my BIOS. Help!"
Every motherboard is different. The best thing you can do is search for your exact motherboard model name + "enable TPM" or "enable Secure Boot" on Google or YouTube. Your motherboard manufacturer's website will also have a manual you can download for free.
"I changed something and now my PC won't boot!"
Don't panic. Get back into the BIOS (the same way as before) and look for an option called "Restore Defaults", "Load Optimised Defaults", or "Reset to Default". This will undo your changes. If you can't get into the BIOS, most motherboards have a physical "CMOS reset" button or jumper — check your motherboard manual.
"Where can I get more help?"
Our community is full of experienced PC enthusiasts who are happy to help. You can ask in our RustSpain official Discord or in the Rust subreddit.
This guide is based on the official Facepunch Studios documentation to help Rust players prepare for upcoming security requirements. Exact BIOS menu names and locations vary by manufacturer and model; always consult your motherboard's official documentation for the most accurate instructions.