Enabling Secure Boot for Battlefield 6 on PC

Battlefield 6 requires specific security features to be enabled on your Windows PC before you can launch and play the game. The most critical of these requirements is Secure Boot, a firmware-level security feature that prevents unauthorized software from running during the boot process. If you’ve encountered error messages preventing you from starting Battlefield 6, adjusting your system’s security settings through the BIOS is likely the solution. This guide walks you through each necessary configuration step in clear, manageable stages.

Understanding Secure Boot and Why Battlefield 6 Requires It

Secure Boot is a security standard developed to ensure that your PC boots using only software that the PC manufacturer trusts. When enabled, it verifies the digital signatures of all boot components before allowing them to execute. For Battlefield 6, Secure Boot is mandatory because EA’s anti-cheat system, known as EA Javelin Anticheat, operates at the kernel level—the deepest layer of the operating system. This kernel-level access allows the anti-cheat system to monitor system behavior comprehensively and detect cheating attempts more effectively. Without Secure Boot enabled, the anti-cheat system cannot function properly, and the game will refuse to launch.

The requirement extends beyond simple security theater; it represents an industry-wide shift toward stronger system integrity protections. Many modern games and applications increasingly demand these features as part of their security infrastructure. Understanding this context helps explain why the process, while somewhat technical, is necessary and beneficial for your system’s overall security posture.

Prerequisites: Checking Your Current System Configuration

Before making any changes, you need to verify your system’s current state. This prevents unnecessary adjustments and helps identify any existing incompatibilities with your hardware.

Accessing System Information

To check your current Secure Boot status, open the System Information utility on your Windows PC. You can access this by typing msinfo32 into the Windows search bar and pressing Enter. Once the System Information window opens, look for the line labeled “Secure Boot State.” If it displays “On,” Secure Boot is already enabled, and you may skip ahead to verifying other requirements. If it shows “Off,” you’ll need to enable it through your BIOS settings.

Verifying BIOS Mode

Your system’s BIOS mode is equally critical for Secure Boot functionality. In the System Information window, locate the “BIOS Mode” entry. It must display “UEFI” for Secure Boot to work properly. If your BIOS mode is set to “Legacy” or “CSM (Compatibility Support Module),” you cannot enable Secure Boot without first converting your disk and switching the firmware mode. Some older motherboards may have limitations preventing UEFI mode, in which case you would need to contact your motherboard manufacturer or system builder for hardware upgrades or alternatives.

Checking Disk Partition Style

Your disk’s partition style determines compatibility with UEFI mode. Open Disk Management by typing disk management into the Windows search bar. Right-click your main system drive (typically C:) and select “Properties.” Check the partition style listed in the window. GPT (GUID Partition Table) is required for UEFI and Secure Boot. If your disk shows MBR (Master Boot Record) format, you’ll need to convert it before proceeding.

Converting Your Disk from MBR to GPT Format

If your system disk uses MBR partition style, conversion to GPT is necessary. This process involves using Windows’ built-in conversion tool and requires administrator privileges.

Using Command Prompt for Disk Conversion

Open Command Prompt with administrator rights by searching for “cmd” in the Windows menu, right-clicking it, and selecting “Run as administrator.” In the command prompt window, type the following command exactly:

mbr2gpt /convert /disk:0 /allowfullOS

Press Enter and allow the conversion to complete. The disk:0 parameter refers to your first disk; if you have multiple drives, verify you’re converting the correct one. The /allowfullOS flag allows the conversion to proceed even if Windows is currently running. After the conversion completes, your disk will be formatted as GPT, making it compatible with UEFI and Secure Boot.

Switching Your BIOS to UEFI Mode

With your disk properly formatted as GPT, you can now configure your BIOS firmware to use UEFI mode instead of Legacy mode. This is an essential step for enabling Secure Boot.

Entering Your BIOS Settings

Restart your computer. During the initial boot sequence, before Windows begins loading, you’ll see the manufacturer’s splash screen. At this point, repeatedly press Delete, F2, F10, or F12 (depending on your motherboard manufacturer) to enter BIOS setup. Common key assignments by manufacturer include:

• Dell: F2
• Lenovo: F2 or F10
• ASUS: Delete or F2
• Gigabyte: Delete
• MSI: Delete
• HP: F2 or Escape

If you’re unsure which key your system requires, consult your motherboard manual or the manufacturer’s website.

Locating and Disabling CSM

Once in BIOS, navigate to the Boot settings section. Look for an option called “CSM (Compatibility Support Module)” or “Legacy Mode.” This feature must be disabled to allow UEFI boot. The exact menu structure varies by motherboard, but it’s typically found under Boot, Advanced, or System Configuration sections. Select the CSM option and change it to “Disabled” or “Off.”

Enabling UEFI Boot

In the same Boot section, ensure that “UEFI Boot” or “UEFI Mode” is enabled. Some systems require this to be explicitly activated, while others enable it automatically once CSM is disabled. Save your changes and exit BIOS. Your system will restart, and Windows should boot normally with UEFI firmware enabled.

Enabling Secure Boot in BIOS

Now that your system is configured for UEFI, you can enable Secure Boot itself.

Accessing Secure Boot Settings

Restart your computer again and re-enter BIOS using the same key as before. Navigate to the Security or Boot section where you’ll find the Secure Boot option. It should currently be set to “Off” or “Disabled.”

Activating Secure Boot

Select the Secure Boot option and change it to “Enabled” or “On.” Some systems may prompt you to select between Standard and Custom boot modes; Standard mode is recommended for most users.

Handling Secure Boot Key Issues

If you cannot change Secure Boot to Enabled status, your motherboard may require the Secure Boot keys to be reset to factory defaults or may have an administrator password set. Look for an option like “Reset Secure Boot to Factory Defaults,” “Restore Factory Keys,” or “Clear Secure Boot Keys.” Select this option, allow the reset to complete, and then attempt to enable Secure Boot again. If you have a BIOS password set, you may need to clear it first through the Security settings.

Saving and Exiting

After enabling Secure Boot, navigate to the Save and Exit menu. Choose “Save Changes and Exit” or similar option. Your system will restart with Secure Boot now active.

Verifying Secure Boot Activation

To confirm Secure Boot is properly enabled, return to the System Information utility (msinfo32). The Secure Boot State should now display “On.” If it still shows “Off,” recheck your BIOS settings to ensure all changes were properly saved.

Installing and Verifying TPM 2.0

Alongside Secure Boot, Battlefield 6 requires TPM 2.0 (Trusted Platform Module version 2.0), a hardware chip that stores security credentials. Most modern motherboards include TPM 2.0, but it may need to be enabled.

Checking TPM 2.0 Status

Open the Windows search bar and type tpm.msc, then press Enter. This opens the TPM Management Console. If TPM 2.0 is functioning properly, you’ll see “The TPM is ready for use” displayed. If you see an error or no TPM information, you need to enable it in BIOS.

Enabling TPM 2.0 in BIOS

Re-enter BIOS and navigate to the Security section. Look for options labeled “TPM,” “Trusted Platform Module,” or “PTT (Platform Trust Technology).” Enable this option and save your changes. Different manufacturers use varying terminology, so consult your motherboard manual if you cannot locate it easily. Some systems automatically enable TPM 2.0 once Secure Boot is activated.

Optional: Enabling VBS and Memory Integrity

While not always mandatory, VBS (Virtualization-Based Security) and Memory Integrity (HVCI) provide additional anti-cheat protections and may be required if you continue experiencing launch issues.

Enabling VBS Through BIOS

Enter BIOS and locate the virtualization settings, typically found under Security or Advanced sections. Look for options labeled “VBS,” “SVM Mode” (AMD systems), “VMX” (Intel systems), or “Virtualization Technology.” Enable this setting, save, and restart.

Activating Memory Integrity in Windows

Once VBS is enabled in BIOS, you can activate Memory Integrity through Windows. Open Settings and navigate to System > Security > Core Isolation. Toggle “Memory Integrity” to “On.” Windows may require a restart to apply this setting fully.

Troubleshooting Common Issues

If your system fails to boot properly after making these changes, access BIOS and navigate to the Exit section. Select “Load UEFI Defaults” or “Reset to Defaults” to restore factory settings, then carefully reapply the changes. If you cannot boot at all, you may need to remove the CMOS battery from your motherboard for 30 seconds to completely reset BIOS to factory state. If Windows still won’t start after GPT conversion, you may need to reinstall Windows on the converted GPT disk.

Frequently Asked Questions

Can I enable Secure Boot on Windows 10?

Yes, Secure Boot is available on Windows 10 and later versions. The process is identical regardless of whether you’re running Windows 10 or Windows 11.

Will enabling Secure Boot affect my other games or applications?

Enabling Secure Boot should not negatively impact other games or applications. In fact, many modern games and security-conscious applications now require these same features.

What if my motherboard doesn’t support UEFI?

Older motherboards using only Legacy BIOS cannot support UEFI or Secure Boot. Unfortunately, this is a hardware limitation that cannot be overcome without upgrading your motherboard.

Is it safe to modify BIOS settings?

Modifying BIOS settings is generally safe if you follow instructions carefully. However, incorrect changes can prevent your system from booting. Always save changes before exiting, and don’t modify settings you don’t understand.