Sign In

WHAT ARE THEY?

Secure Boot is a built-in protection mechanism included in modern BIOS/UEFI systems. Its role is to ensure your PC only loads software that has been verified and digitally signed during startup. By doing so, it prevents unauthorized programs, malware, or tampered operating systems from running when your computer powers on.

The TPM (Trusted Platform Module) is a hardware-based security chip installed on the motherboard or integrated into the system’s firmware. It safeguards sensitive data such as encryption keys, user credentials, and other confidential information.
Windows 11 already mandates TPM for installation, and several current and upcoming games also require it to function properly. These measures are in place to enhance security, reduce cheating, and prevent system-level manipulation.

You’ll need Secure Boot and TPM enabled to play certain titles such as:

– Battlefield 6
– Call of Duty: Warzone / Black Ops 6 Season 5 (it will roll out gradually—so you might not need it immediately upon launch, but it’s confirmed for future COD releases).

Developers have adopted Secure Boot as a requirement to strengthen anti-cheat systems. Without it activated, these games simply won’t start.

Because BIOS and UEFI interfaces can be confusing for newcomers, this guide provides a clear, step-by-step walkthrough—complete with visuals and brand-specific instructions—to make the process simple, safe, and accessible to everyone.

HOW TO CHECK IF SECURE BOOT IS ENABLED

• Open the Windows search bar and type “msinfo32”, then launch System Information.

• Find the line labeled “Secure Boot State.”

If it says “Enabled,” you’re all set. If it’s disabled—or if a game reports it as off—you’ll need to enable it through your BIOS. Occasionally, Windows may show it as active even when some programs still detect it as disabled.

Most systems ship with Secure Boot already enabled, but users who have overclocked their controller to reduce input lag (for instance, setting it to 1000 Hz / 8000 Hz) may have disabled it unintentionally.

HOW TO ACTIVATE SECURE BOOT
Note: Back up your important files before making BIOS changes. While issues are uncommon, it’s always safer to prepare.
We also recommend using the latest BIOS version to avoid compatibility problems.

1) ENTER THE BIOS:
Restart your PC and repeatedly press the DEL key during startup (on some keyboards or systems, try F2, F12, or F10 instead).
Keep pressing until the BIOS/UEFI setup screen appears.

2) FIND THE SECURE BOOT OPTION AND ENABLE IT

The exact location varies by manufacturer, but you’ll usually find it under the Boot or Security tab.
If your BIOS has a search bar (often shown as a magnifying glass icon), type “Secure Boot” to jump straight to the setting.

For pre-built systems like HP Omen, Lenovo, or Acer, the layout may differ. A quick search for your model online can help.

Below you’ll find detailed guides (with images and video links) for the most common BIOS brands.

GIGABYTE/AORUS BIOS( LINK TO QUICK VIDEO GUIDE)

Note: Switch to Advanced Mode (click it or press F2).

Go to the Boot tab and confirm CSM Support is Disabled.

Select Secure Boot and set it to Enabled.

Save changes and restart (choose Save & Exit Setup, then Yes, or simply press F10).

Important: Some Gigabyte boards may falsely report Secure Boot as off even when enabled.
If that happens:
– Re-enter BIOS → Boot > Secure Boot
– Turn Secure Boot off
– Change Secure Boot Mode from Standard to Custom and then back to Standard
– Accept Factory Defaults
– Re-enable Secure Boot and save again.

 

OLD GIGABYTE BIOS VERSIONS ( LINK TO QUICK VIDEO GUIDE )
If you’re using an older model, you’ll find Secure Boot under the BIOS page. The steps are otherwise identical.

 

ASUS BIOS( LINK TO QUICK VIDEO GUIDE)

Press F7 or click Advanced Mode.

Open the Boot section → select CSM (Compatibility Support Module).

Make sure Launch CSM is Disabled.

Go back, choose Secure Boot, and set OS Type to Windows UEFI Mode.

• Under Key Management, if the option is greyed out, temporarily switch Secure Boot Mode to Custom.

• Choose Install Default Secure Boot Keys → confirm with Yes.

Exit and save (Save Changes and Reset or press F10 + Yes).

BIOS MSI( LINK TO QUICK VIDEO GUIDE)

Press F7 for Advanced Mode.

Open Settings > Advanced.

Verify CSM/UEFI Mode is set to UEFI.

Go back → Security > Secure Boot → enable it.

Save and reboot (Save Changes and Reboot or F10 + Yes).

New MSI BIOS versions (X870, B850, Z890):

Select Advanced > Security > Secure Boot

– Enable it, set Mode = Custom, and choose Maximum Security

Press F10 + Yes to save and restart.

OLD MSI BIOS VERSIONS 

Navigate to Settings > Advanced > Windows OS Configuration, ensure CSM/UEFI Mode is UEFI, then enable Secure Boot as above.

BIOS ASROCK( LINK TO QUICK VIDEO GUIDE )

Enter BIOS → open Boot > CSM.

Disable CSM.

Go to Security > Secure Boot and set it to Enabled.

Exit and save changes (Save Changes and Exit or F10 + Yes).

3)CHECK IF SECURE BOOT IS ENABLED
Once finished, boot into Windows, run msinfo32, and confirm that Secure Boot State is now Enabled.
If it shows active, you should have no further issues launching software that depends on it.



IN CASE OF POST-ACTIVATION PROBLEMS

Here are some common issues and their fixes:

• Boot drive not detected / BIOS loops:
  If your system was installed in Legacy mode (MBR), disabling CSM may hide your disk. Convert the drive from MBR → GPT or reinstall Windows properly using UEFI mode. Re-enable CSM if needed to restore boot access.

• Black screen or no video signal:
  This usually means your GPU doesn’t support UEFI boot, or the monitor is plugged into the wrong port. Reconnect via the motherboard’s video output, re-enter BIOS, and re-enable CSM / disable Secure Boot if necessary. If there’s still no signal, reset CMOS (jumper or battery removal).

• Windows doesn’t detect Secure Boot:
  Outdated, modified, or pirated Windows builds may fail to recognize it. Update or perform a clean installation using a legitimate copy.
  For other issues, open a support ticket on our Discord via the #crea-ticket channel.

 

CONTROLLER OVERCLOCK

Many players use controller overclocking (increasing polling rate to reduce input delay) for games like Warzone. This process normally requires Secure Boot to be off.

However, since newer titles such as Battlefield and Call of Duty now demand Secure Boot enabled, there’s a workaround that lets you keep Secure Boot on while still enjoying overclocking benefits.

Our Technical Support team provides this solution, and a file/tool will soon be available on Discord to activate pad overclocking even with Secure Boot enabled.
After re-enabling Secure Boot in BIOS, use DS4/HIDUSBF to confirm whether the overclock remains active or needs reapplying.

HOW TO ENABLE THE TPM
Note: Always back up important data first and ensure your BIOS is up to date before making any configuration changes.

Windows 11 systems typically already include and enable TPM, but verifying it is simple:

1. Open Windows search and type tpm.msc, then press Enter.

2. The window will show whether TPM is active.

IF IT IS ENABLED:

IF NOT ENABLED:

If it’s disabled, enter the BIOS and locate one of the following options depending on your CPU type:

• Intel CPUs: Enable PTT (Platform Trust Technology)

• AMD CPUs: Enable fTPM (Firmware TPM)

We’ve also attached video guides for each motherboard and CPU brand to demonstrate the process step-by-step.: VIDEO LINK