Battlefield 6 feature-2

Battlefield 6 will NOT run unless Secure Boot is enabled in your BIOS

The pre-load for the first Open Beta of Battlefield 6 has started. Since I have access, I downloaded it early to be ready. Even though the beta isn’t live yet, I tried to start the game, but I got an error message about Secure Boot. Basically, if you don’t have Secure Boot turned on in your BIOS, the game won’t run at all.

Now, I want to make it crystal clear that I’m not talking about EA’s Javelin anti-cheat system. BF 2042, BF V, and BF 1 also used Javelin. However, I had no problem at all launching and running them. This is the first time a game requires Secure Boot to be enabled; otherwise, it won’t work.

The funny thing is that I thought I had enabled it. However, after getting this error message, I checked my System Information. To do this, you’ll have to type “msinfo32” in your Search Bar. So, although I was using UEFI, Secure Boot was disabled. That felt odd. I could swear I had turned it on in the BIOS.

So, I restarted my PC, went to the BIOS, and Secure Boot was active. OK, so what’s the catch? Well, CSM also appeared to be enabled. This shouldn’t be happening. I disabled CSM and then rebooted my PC. Once Win10 loaded, I went to System Information, and Secure Boot was still off. What the hell?

Thankfully, YouTuber ‘Rollwith Punch’ has shared a video that shows how you can fix this. I’ve included it below, so be sure to watch it. For whatever reason, Secure Boot may only be active for Setup and not for the User. This is a bug. To fix it, you’ll just have to choose “Custom”, switch back to “Standard”, save, and then exit. And that’s it.

After doing this, Secure Boot was finally enabled on my end. And yes, I was able to launch Battlefield 6. Here is its Main Menu.

BF6 main menu

Another thing to note is that MSI Afterburner is not working. Thankfully, BF6 comes with its own Performance Metrics. NVIDIA Overlay also appeared to be working. So, I’ll use both these for when I’ll be testing the Open Beta.

BF6 will support AMD FSR 3, Intel XeSS 2.0, and NVIDIA DLSS 4. Now I’m not certain whether there will be support for FSR 3.1 or not. Thus, I don’t know whether AMD will have a toggle to enable AMD FSR 4.0 via its drivers when the Open Beta launches. On the NVIDIA side, we know that there will be support for DLSS 4 Multi-Frame Gen. So, those with an RTX-50 series will be able to use it.

All in all, Secure Boot is a requirement for launching Battlefield 6. If your motherboard does not support it, you won’t be able to play it at all. This is something every PC gamer should be aware of, and it has nothing to do with EA’s Javelin anti-cheat system!

Secure Boot Enabled but NOT Active in BIOS - Easy Fix!

129 thoughts on “Battlefield 6 will NOT run unless Secure Boot is enabled in your BIOS”

  1. I don't know what Secure Boot is but it sounds like some corporate spyware meant to curb piracy or something. I'm not going to look it up. I'm not going to fall in line. If your game requires me to jump through hoops to play I will simply not play it and that's that. Bye, Battlefield 6.

    1. smh

      Secure Boot has been around for at least a decade or more, so not knowing what it is shows you must be very new to PCs. It's usually on by default too. What's the harm in looking something up if you're not familiar with it? Why the desire to stay ignorant?

      The lengths some will go to to "stay mad" is insane.

      1. Windows 8 was the first Windows OS that supported it so that means since 2012 but it was also part of the UEFI specs since UEFI 2.0 in 2006

    2. OMG. Such a facepalm moment. This guy is just: 1. technically wrong, 2. philosophically incoherent, 3. self-sabotaging. But it is funny in a sad way, the internet never fails to deliver.
      Secure Boot is a UEFI firmware feature that ensures only trusted, signed operating system bootloaders and drivers can run during system startup. It's not spyware. It's not DRM. It doesn’t phone home, doesn't harvest data, and doesn't affect your privacy in any way.
      Secure Boot has already been quietly enabled by default on nearly all PCs since 2015, especially prebuilt desktops and laptops. Windows 11 even requires it. Most gamers have it enabled without even knowing.

        1. Do you need your motherboard to inform you about every single thing being enabled? Enjoy staring at boot screen for several minutes like it's the 90s.

        1. HVCI (Hypervisor-Enforced Code Integrity). Requiring Secure Boot isn’t about punishing players – it’s about raising the bar for cheaters, especially those using custom unsigned drivers and hypervisor-based exploits.

      1. "Secure Boot has already been quietly enabled by default on nearly all PCs since 2015, especially prebuilt desktops and laptops."

        This is a lie and the only true part of that statement is the "prebuilt desktops and laptops". I'm sure that has nothing to do with Windows giving them HUGE discounts on OEM licenses and threatening to screw them on price if they don't give in.

        You are right. The internet never does fail to deliver. Especially dudes with female anime avatars.

        Also This game requires more than secureboot. It requires TPM and core isolation memory integrity. TPM was called out as a security threat and a loss of control with Windows 8 by people in charge of national security in countries around the world, including Germany and it's a huge reason why it failed. Windows 8 never recovered from their initial requirement. 10 didn't require it and then they tried to get it again with Win 11 which has also failed with adoption.

        "Windows 11 even requires it. Most gamers have it enabled without even knowing."

        Windows 10 still has massive market share with over 1/3rd of PC Gamers on the newest Steam survey. Keep in mind that a lot of "normies" are on Steam with prebuilts. I would guess most power users are still on Win 10 because there was no reason to upgrade. Up until 2024H2 Windows 10 was simply faster. Win 11 is now faster with a debloat install like Microwin or the ISO via Rufus, but again the power users have all this crap off unless they are playing Valorant atm. Every big gaming influencer on youtube recommends turning core isolation memory integrity off and this game looks like it is required like Valorant. That = performance loss in ALL Games to play one stupid game as well as 5-10C higher temps. I saw 10c higher temps on both x3D CPU's with it on.

        It wouldn't be as bad if it didn't require a reboot when you change the setting.

        NO ONE should have HVCI on in a gaming machine atm UNLESS you are playing valorant or this game. You are raising temps by up to 10C on the newest CPU's out there for no reason and costing performance on all other games for no reason.

    3. Actually it is meant mainly for computers in a corporate environment to make it harder to impossible for employees to run unauthorized/unsigned programs and DLLs on their corporate computers. When you have 100+ PCs tied together via servers it only takes one compromised computer to infect the entire group. Secure Boot helps to keep that from happening. That is why pre-builts tend to have it on by default.

      However it's not really necessary in a home environment but it doesn't really harm anything for most users. However I'm not most users and sometimes I had to use unsigned drivers for new devices that were still in development and hadn't reached the point in development where they needed to have their drivers signed by Microsoft. Granted if you aren't a hardware or software engineer you likely will never have to worry about using unsigned development drivers.

    1. cool, shame 80% of online games use it now.
      Its also overblown issue, only nProtect was breached, and genshin and valorant had some issues with their anticheats but nothing serious happened.
      EA despite being one of the worst companies has clear track record and it seems their anticheat is well made and has no known exploits. Data it collects is ofc unknown but its probably just usual crap even steam collects.

      While i get why people have issues with it, I also think its overblown. Im willing to let EA know what PC i have (because thats what they will collect in 99% cases) then have absolutely unplayable game full of cheating scum. Then again BF6 is unavailable in russia so that eliminates 99% cheaters.

      1. This anti cheat arm race have gone too far in the recent years, it’s just a game at the end of the day, and not to mention kernel level anti cheat cannot and will never be able to detect external cheating like hooking a mouse to a rasberry-pi and forwarding screen video feed to an ai model like Yolo to make an Aim-bot

          1. He's literally not wrong, the method he's describing would be completely undetectable by literally all modern anti-cheat solutions because there's nothing to even detect.

          2. Anyone who looks at security issues as so simple a thing – black and white – as you are… Is someone that I am not interested in speaking to.

            He is wrong. As are you.

          3. You're babbling about this as some security issue when that's completely unrelated to what we're discussing.
            Him and I are both right, and cheat makers have already demonstrated examples of what we mentioned.

          4. "…when that's completely unrelated to what we're discussing."

            That you said that ^ makes it BLATANTLY clear that you don't understand these processes.

            "Secure Boot" is INHERENTLY a security element. Circumventing a security measure is INHERENTLY a "security issue".

            These are incontrovertible FACTS.

            BOTH of you ARE wrong. And we are done here.

          5. Neither of us mentioned secure boot you clown. He mentioned kernel level anti-cheats being a potential security issue, which is a fact. And both of us mentioned newer AI based cheats that work without even being connected to the host PC by just watching a video stream making them impossible to detect.

      2. Is easy to exploit EAAC to sideload malicious libraries at kernel level. Live Editor for FC 25 is a fine example of how easy it is.

        The fact we can fool EAAC into thinking it is working, by running a dummy library, even allows to connect to online services, says everything we need to know about it.

        So I don't know where you got the idea that is perfectly coded, when even EAC does a better job.

        There also nothing unknown about data collected, everything that happens on your system is easy to track, that includes every network call.

    2. And most of the times it wouldn't stop the cheats anyway. There are countless ways to bypass anti cheats unfortunately.

  2. I'm surprised at the number of people who don't have secure boot on their system. It's been out for over a decade. If your computer is older than that…then Battlefield 6 will officially cost more than the value of your entire PC.

    1. well you don't know anything about PC's then do you? Would you like an education as to why we don't have it enabled. because I'm in no mood to waste my time explaining things to you that you don't care to know about.

        1. Well, if you look at the most recent Steam numbers, Linux is approaching 3%, and even above 6% in the English-speaking region.

          Still a long way to go, but the days of being the 1% OS are definitely over! 😉

          1. Yeah but the big boost in Linux adoption is from Linux based handhelds. There’s some pickup from people talking about bazzite and etc etc but dual boot and desktop Linux use hasn’t increased much.

            That being said….im not hating on Linux. I’m sick of windows bloat and if games on linux had the same/better performance than a bloated windows, I’d 100% do a dual boot into a gaming specific Linux OS like SteamOS as well. Or just single boot. Keep my laptop and workstation for windows stuff.

          2. I'd say the biggest hurdle for wider adoption is the poor performance of DX12 games on NVIDIA GPUs right now.

            However, the good news is that an NV employee within their Linux division just yesterday publicly stated that a fix for that is coming.

            Beyond that there is actually a completely new kernel driver for NVGPUs on Linux in the making, but that will still take quite some time until it becomes useful for end-users.

            Note that many of NVIDIA's proprietary tech like DLSS (including framegen) already work on Linux, including Windows games running via Proton.

            2026 will most likely turn out to be quite an interesting year for gaming on Linux…

            Stay tuned!

          3. A streamlined Linux is faster in any game that uses DX 9-11 and Vulkan as a choice against DX 12.

            DX 12 only games is the only reason we still need Windows and it's why the company bought a TON of game developers. It's not about really making good games or competing with Sony. They don't care about Sony. They care about DX 12 remaining the standard that should no longer exist and the only reason you even got DX 12 was Mantle that led to Vulkan. Without that MS would have let you suffer on performance not caring at all.

            Windows is even faster using Vulkan over native DX 9-11. You can test this yourself. Go to the DXVK github, download the newest one and drop the right DX DLL's into a game. DXVK runs a game like Jedi Fallen Order with less stutters on DX 11 than Windows DX 11 does. It runs a DX 9 game like GTA 4 or SWTOR STUPIDLY better than DX 9 does.

            So why do devs still use DX 12? Because of the stupid console, because MS has sold game publishers that TPM will end piracy forever years ago and tried to do all this on Win 8. Why do the hardware manufacturers give in? Because what happens if security performance can be leveraged to force upgrades artificially instead of actual improvements requiring insane amounts of time and research that are getting harder and harder to do as we run into limits?

            If all this crap is on by default and Chip B runs games way better than Chip A then people buy chip B.

            The answer is always money. None of these companies are our friends and people that fanboy for corporations are the dumbest people on Earth. Every single one of these companies has and will f@^# us over every way they can, when they can, especially when they have no competition. The only time they are remotely "good" is when they are desperate like AMD was years back and when they get the lead they do the same BS as the competition did lol.

          4. Are you claiming all those 3% are dual booting? That quite a wild claim, not to mention more than half those numbers are Steam Decks.

      1. It has been on laptops and desktops since 2018-2019. Secure boot came around the same time as TMP 2.0. Indeed, only Ryzen 2000 and Intel 7th gen and before don't have TMP 2.0 support.

          1. Just means your board is outdated, since most motherboards were updated a decade ago to have Secure Boot enabled by default.

          2. WRONG. Both my AM5 boards came set to "other os". The 2nd one was bought 2 weeks ago. The z690 he listed is also newer tech. He probably bough it in 2024. Why are people just posting complete BS on this article. Are you all EA astroturfing or something?

          3. I suggest you go back the hole you came from, cause is clear you don't understand how outdated motherboards are out of the box.

            So you neither work with hardware nor understand it, the fact you consider 2024 hardware new and updated seals the deal that you don't know what you talking about.

          4. I suggest you go back the hole you came from, cause is clear you don't understand how outdated motherboards are out of the box.

            So you neither work with hardware nor understand it, the fact you consider 2024 hardware new and updated seals the deal that you don't know what you talking about.

          5. "you don't understand how outdated motherboards are out of the box"

            One of the dumbest things I have ever read. BIOS revision MB's, the newest MB;s from this year have it off by default.

            People buying 9800x3D bundles this week from Microcenter don't go home and immediately update the BIOS unless they have problems and the tech savvy who know how to do it easily always research the newest BIOS revisions first and check for things like peformance threads, possible memory issues.

            Go back to the Apple Genius bar or Best Buy staff clown. No motherboard manual tells people to install a new BIOS as the first step lol. It's a point of failure that the user has no reason to risk until years down the line when they are considering an upgrade to a new CPU that works on existing MB technology. Example the next Zen on AM5.

            Get it? You are calling chips that haven't even come out yet outdated you imbecile.

          6. I really recommend you go back to school, cause you trying to be something you're not and just embarassing yourself.

            For starters motherboards out of the box, don't support a huge chunk of memory sticks and CPUs.

            Is also clear you never worked with hardware a single day of your life, since as already stated Secure Boot has been enabled by default for a decade now.

            Even TPM is enabled by default to support Windows 11. Same way CSM has always been disabled by default for two decades (contrary to your claims).

            But feel free to keep embarassing yourself, I have nothing else to say to you, cause is clear you don't know what you talking about, and you just a troll with 12y.

          7. I really recommend you go back to school, cause you trying to be something you're not and just embarassing yourself.

            For starters motherboards out of the box, don't support a huge chunk of memory sticks and CPUs.

            Is also clear you never worked with hardware a single day of your life, since as already stated Secure Boot has been enabled by default for a decade now.

            Even TPM is enabled by default to support Windows 11. Same way CSM has always been disabled by default for two decades (contrary to your claims).

            But feel free to keep embarassing yourself, I have nothing else to say to you, cause is clear you don't know what you talking about, and you just a troll with 12y.

        1. Secure Boot isn't enabled by default on DIY motherboards. It may be on prebuilt PC's from OEM's like Dell, Alienware, HP, etc. but it isn't on any ASUS motherboard I've ever seen.

          1. Even the old ASUS B450M-A Prime has Secure Boot and TPM both enabled by default with latest firmware.

            My ASUS TUF GAMING B650-PLUS also came with both enabled, I had to disable them myself to prevent Windows 11 upgrades.

            I work with ASUS on daily basis, and your statement is wrong unless you packing extremely outdated or ancient boards.

            OEMs support Windows 11 out of the box, they even have a sticker saying so on the Motherboard box, but according to you they have Secure Boot and TPM disabled by default.

    2. because Secure boot is garbage, it exists solely to prevent the owner of the machine from booting unsigned images, i.e. liveCDs, certain Linux distros and so on. It's off by default on non-prebuilt systems and there is really no reason to ever enable it. The same can be said about signing into Windows with a MS account, zero upside.

  3. Backlash from gamers incoming. I cannot see BF6 having any kind of successful launch with these kinds of shenanigans.

    1. These are FPS fans we're talking about lol. Battlefield, CoD, Valorant, Apex, Rainbow Six Siege, PUBG, all have intrusive anti-cheat solutions and it hasn't stopped them raking in billions. CS is about the only exception I can think of and much of their fan base actively goes out of their way to instead play on alternative launchers with their own custom kernel level anti-cheats.
      Mind you it doesn't actually stop the cheating but they use them anyway just to add some basic protection against script kiddies that aren't willing to shell out for more premium cheats.

    2. This is non issue, you are meant to have it turned on anyway, some people have it turned off because they have badly set bios. This is literary non issue. Its also same anticheat EA uses for years so nothing is new here. Its just annoying.

      1. Anyone who builds their PC has it off by default you imbecile. That is how motherboards come. We ain't gaming on Dell's.

        Also it is not the same anticheat. This is more like Valorant's and it requires more than Secure Boot. It also requires TPM, Core Isolation Memory Integrity which raises temps on a CPU 5-10c and also harms performance beyond that.

        Every post you make is wrong. Every single one LOL.

    3. Doubt it. Gamers will do what the streamers tell them and the streamers are the new compromised go between after game journalism that is now operating under the Ziff Davis umbrella failed. IGN and Digital Foundry are under the same company. Example of how controlled streamers are? Hasan Piker and Asmongold both work under the same guy. Ezra Cooperstein at Night Media who was former Maker Studios (Disney) which controlled all the content creators in the past from Angry Joe to Pewdiepie who they fired for a joke. Their entire streamer drama arc was theater and Asmon was pushed to the top as a political streamer during the Depp Heard trial. A trial that cohencidentally happened the exact same time that the Epstein madam trial was going on in the background that media ignored. The same media who never even told you that she was Robert Maxwell's daughter.

      Gamers are as controlled as any demographic. You probably think this is all BS though and yeah…enjoy those twitch streams. Never notice that Asmon is an anagram of Mason or that he watches IGN reviews on stream. IF he was actually on the other side of them they would shut that down.

      "It's a big club and you aren't in it". TPM is a layer of control and you already lost control with the PRISM program and MS gave into that in 2007. Windows was NEVER secure after that and you have been on CIA/Mossad spyware for almost 2 decades now.

  4. " BF 2042, BF V, and BF 1 also used Javelin. However, I had no problem at all launching and running them"

    Javelin is now at Kernel level, it loads at the same time as your OS as it means to detect sophisticated cheat programs. As an anti-cheat system, those are great from my experience with FaceIt and CS2, while official servers with basic anti-cheat are infested with cheaters, FaceIt servers have far less cheaters.

    BUT, if Javelin has a security breach in the future, people could in theory make your PC their b*tch, i strongly recommend to turn off secure boot after playing.

    1. Nah mutliplayer games and devs can fck right off with the anti cheat garbage. I feel lucky I have no interest in that entire genre so I don't have to go along with these shenanigans.

      1. Funny thing is, Anti-cheats don't even work. There are thousands of cheaters running around in every game. That's what pisses me off the most.

        1. Agreed. No matter what anti-cheat software comes along someone finds a way around it and it goes around the net to be used by who knows how many people.

          Sure some get caught and banned but how long were they cheating before they got caught? Weeks, months? Do they just go back and make a new account and do it all over again?

          1. Yeah, people don't understand the mind of a cheater that's the problem. The worse part is these cheaters believe their own lies. They actually think they are good and no one can tell them otherwise. It's quite pathetic actually and they do not care one bit. We pay the price on both ends. The worse part is, believing we can stop it. We are more delusional than the people that do the cheating.

    2. secure boot is literary preventing malicious software from running, just uninstall EA javelin after your done with game. All kernel level anticheats now uninstall with game but for paranoid people there are dedicated uninstallers.

      1. a lot of the time this type of kernal level crap cant be fully removed – Crowdstrike is the poster child for this. Its a full wipe and reinstall of the OS…

  5. They also did that to BF 2042, I wanted to test it out after few years with my friend once BF6 was announced and it did the same

    1. Yep, I tried testing it last week and I couldn't launch it without enabling that crap, so I just uninstalled it.

      1. it's really annoying, video games should just be plug and play, why do they have to do these random things as if we are modding a software just to make it run

    1. 10 does that too, you just need to disable a scheduled task and it stops. (Task Scheduler > Microsoft > Windows > PI > Task Secure-Boot-Update)

    2. Windows 11 can't even fix Firewall Error (Event ID 2042) atm. They declared a fix, it fixed nothing and now they are back to the drawing board lol. Their QA just sucks these days.

  6. I'd rather not play BF6 at all than enabling secure boot on my machine. Enabling secure boot means letting Microsoft decide what OS you're allowed to boot on your machine.

    If Microsoft decides to revoke the keys that they gave out to all the Linux boot loaders, no Linux distro will boot on your machine anymore.
    With secure boot you basically lock your device down the same way like the bootloader of your phone is being locked down.

    I'm pretty sure we'll see Windows only devices in the near future.
    Prepare for needing a jailbreak for your laptop for being enable to install something else than Windows on it.

  7. I'd rather not play BF6 at all than enabling secure boot on my machine. Enabling secure boot means letting Microsoft decide what OS you're allowed to boot on your machine.

    If Microsoft decides to revoke the keys that they gave out to all the Linux boot loaders, no Linux distro will boot on your machine anymore.
    With secure boot you basically lock your device down the same way like the bootloader of your phone is being locked down.

    I'm pretty sure we'll see Windows only devices in the near future.
    Prepare for needing a jailbreak for your laptop for being enable to install something else than Windows on it.

    1. I'm not sure if I'm getting this wrong, but as far as I know you can just disable Secure Boot whenever you want to so even if for some reason your system gets blocked, you would just disable it and everything would be fine again?

      1. yes, but people here especially linux users are paranoid. There is literary 0 examples of anything they say happening. Not only that secure boot setting is not up to MS its from motherboard producents, they decide what will be supported.

    2. then disable it after you stop playing. Are you people that dense?
      99% of people around world dont give flying f*k about other OS systems and secure boot is there so windows doesnt boot malicious software, MS will not take anything from you. Hate MS all you want, they deserv it but they have clean record in that regard. Also its bios setting, its up to your mobo company to allow other OS or not.

    3. Secure boot signatures are handled by your OEM, not Microsoft.

      It just happens Microsoft is kind enough to share their signature, they have no obligation to do so.

      There is no restriction in place to make Secure Boot only work on Windows, complaint to the Linux maintainers to get their own signature.

    4. Secure boot isnt a Microsoft exclusive thing…its motherboards that put these in. It doesn't matter the OS

  8. If they actually gave a sh*t about anticheat they would have community hosted and administrated servers that would ban cheaters in real time, but their goal is to funnel all players into a 'balanced sbmm' mindless battlepass grind and microtransactions and they don't want any actual community to get in the way of that.

  9. There's no way I'm enabling Secure Boot. Granted I also don't care about the modern Battlefield franchise, so they can ruin their game however they want, I probably wouldn't have played it anyway.

    1. May I ask why? I mean, I get that every feature has enemies just because it exists and it is new and back then we did not have it etc.
      But real question, what exactly are the issues with Secure Boot?

      1. there are no issues, he is just another misinformed computer illiterate idiot fighting with corporations by doing angry posts and then preordering games anyway.

      2. there are no issues, he is just another misinformed computer illiterate idiot fighting with corporations by doing angry posts and then preordering games anyway.

        1. But it is optional. So as long as you are running Windows and Battlefield, no problem. If you want to run a non-signed system, you just turn it off.

          Only thing I could imagine to be annoying is if you dual boot between those two, then this sucks but this is a rare case I guess

          1. It's also a problem if you want to use bootable media of any kind that Microsoft hasn't already whitelisted. Yes you can turn it off, but there's no good reason to have it on in the first place. Requiring it isn't acceptable.

    2. stupidest statement ever, its additional protection, nothing more. Dont worry you can run anything including your pirated games anyway. I dont think you even know what it is, secure boot simply prevents malicious softwere from booting on startup, thats it.
      You people know nothing about computers, you just panic because its EA.

      1. Secure Boot is a Microsoft controlled technology that allows them to restrict what is allowed to run at boot time on your computer. That includes what Operating Systems are allowed to boot. As a security "feature" I consider it useless, and the whole point of having Microsoft decide what is and is not allowed to run at boot time is to act as a form of control over what users get to run on their computers.

        BTW: You don't know who I am or what I know. Don't make assumptions.

        1. Secure Boot is not controlled by Microsoft in any shape or form, is an industry standard for UEFI, and the OEMs that control the signatures on their hardware.

          It just happens Linux uses Microsoft signature cause they can't be bothered to license their own.

          Any claims otherwise are not grounded on reality on what Secure Boot actually is.

          We don't need to make assumptions on what you are, when you wrong.

          1. Microsoft is the one that gets to sign binaries recognized by Secure Boot, which was a significant point of contention when the feature was first introduced.

          2. Linux uses Microsoft signatures, but Microsoft doesn’t sign anything. Signatures are handled by OEMs, not Microsoft.

            Microsoft only manages the KEK and DB for Windows signatures, which is exactly how it should be.

            It’s not Microsoft’s fault that Linux lacks widespread OEM support to distribute their own signatures. In fact, Microsoft did the industry a favor by creating third-party certificates.

            ChromeOS devices also ship with their own signatures, and Google also manages their own KEK and DB.

            But according to you, Microsoft is the villain controlling Secure Boot, ridiculous.

          3. I'm sorry, but you seem to be reading between the lines here. Microsoft signs the binaries (as directly states in the links I posted), the OEM's include Microsoft keys in their BIOS, this means that only binaries signed by Microsoft can load when Secure Boot is enabled. This obviously means that Microsoft is in control of whose code can run at boot time when Secure Boot is enabled, and Microsoft requires manufacturers of new computers to have Secure Boot enabled by default, meaning Microsoft can pick and choose whose Operating Systems get to run on modern computers.

            I do not see Secure Boot as a security feature, I see it as a restriction of user choice.

            BTW: I'm going to say the same thing to you that I said to someone else earlier. You do not know who I am, and you do not know what I know. Do not make assumptions.

          4. The only person reading between lines here is you, but feel free to keep providing evidence for my claims and that you are wrong.

          5. If you know so much about Secure Boot, then why don't you point out the parts of the spec and vendor implementations that show how I am misunderstanding it?

            I don't think you actually know what you think you know, and are just parroting what you've read from some news source that didn't understand things either.

          6. You the only person here parroting and poorly since you read between the lines, I don’t need to say nor provide anything, since all sources you quoted reinforce what I stated and prove you wrong.

          7. So you're just going to ignore the part about Microsoft controlling the signing of binaries, which is what gives them control over what can and can't load at boot time when Secure Boot is enabled? Only see what you want, and pretend the rest doesn't exist? How convenient.

            If it was an independent third party that was doing the signing, then your claims may hold water, but it's Microsoft that's signing the binaries. Linux distros literally have to pay Microsoft $99 to sign their binaries so that their "shim" can load on computers that have Secure Boot enabled. That's what the links I posted said (if you had actually read them), but I see you'd rather just ignore that since it doesn't fit the narrative you're pushing.

          8. I already replied without links since I have to wait for links to be approved. Hardware vendors pre-load Microsoft keys into their BIOS so that Microsoft signed binaries are recognized, which is how Microsoft is able to control what your BIOS will allow or not allow to run when Secure Boot is enabled. Here are sources of information you should check, instead of just reading the propaganda:

            https://en.opensuse.org/openSUSE:UEFI#Secure_Boot
            https://wiki.ubuntu.com/UEFI/SecureBoot
            https://fedoraproject.org/wiki/Secureboot

            As for the news articles from 10+ years ago that I am remembering talking about these issues, I am unable to find them at the moment. Maybe the implementation of Secure Boot has changed since I read those articles, however it sounds like it hasn't and hardware vendors are allowing Microsoft to decide what software will be allowed to load under Secure Boot.

            It looks like the Free Software Foundation's articles about Secure Boot are still online at least:
            https://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/about
            https://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/whitepaper-web
            https://www.fsf.org/campaigns/secure-boot-vs-restricted-boot/statement

            As for articles from other sources, many seem to be offline at this point:
            https://web.archive.org/web/20111108021840/https://www.pcworld.com/businesscenter/article/242088/worried_about_win_8_secure_boot_so_is_the_free_software_foundation.html

          9. All the sources confirm everything I said, and also state in clear text you wrong.

            So thanks for that, not that I need any of it cause I actually know how Secure Boot works.

  10. Don't forget these conditions as outline by EA as well.

    Any system should meet the following four requirements for BF6.

    Not clear what does EA mean by saying "capable" though, and whether the last two features are also mandatory or not (should be imo):

    TPM 2.0 must be Enabled
    Secure Boot must be Enabled
    It must be HVCI Capable (Hypervisor-protected Code Integrity, is a Windows security feature)
    VBS Capable (Virtualization-based security).

    1. The last two items have been part of Windows since at least Windows 8 so they shouldn't be a problem

      However there is no chance this game will work on Linux because of the last two items

      1. Apparently can do it with a Windows VM with GPU passthrough but yeah at that point you are getting to ridiculous levels of hoops to jump through and that may be leveraging Win 10 that has been supported on Valorant up until now with more lax security requirements (if that is still true, since I never played it).

        Anyways yeah online gaming on Linux may be dead very soon. Riot's MMO which could possibly take over WoW will surely require this. MS owns WoW and could change requirements at any time and the shooters are all going to do this on PC to protect the insane investment and money they spend on marketing and game development on a game like BF 6.

    2. Which means for anyone that wants to avoid problems on launch day or post launch when they can require things they should check the "Vanguard Restrictions" post on the Vanguard site.

      So yeah TPM on, EUFI on, Core Isolation Memory Integrity checked on and if they go as far as Valorant is now going, you now need IOMMU on in the BIOS which when set on may also lead to further things set to on like DMA Protection and DMAr Support set to enable.

      How much performance is this losing? Good question. In the past with Win 11 it was A LOT for many games, then 24H2 launched which they claimed fixed it, seemed to give similar performance with it on as it had before, which is to say Win 10 like performance, which will probably suck now with all this stuff set to on (Ancient Gameplays showed Win 11 is faster than 10 in a recent video).

      MS is gonna get that OS upgrade one way or another and online gaming on Linux is taking a major blow.

    3. TPM and VBS are not required for either Battlefield 6 nor EACC.

      I would know cause I have both disabled to avoid the Windows 11 upgrade.

    1. Because TPM can also do things remotely to verify a current running game has no extra stuff. If it sounds like you are handing the keys to someone else and are no longer in control of the OS? Yeah. Is there anything you can do about it if you want to play online games? Nope, Valorant already does this, I imagine their League of Legends MMO will, MS owns World of Warcraft as the current big MMO and I expect games to try to use this as a prevention for piracy as well in the future. Will that work to end piracy? Doubt it.

      If you are on Windows though any security or privacy you felt you had has been an illusion for years and many Linux distros aren't much better. MS was the first company to join the PRISM program, Apple joined after Jobs died and everyone else that matters gave in as well.
      https://uploads.disquscdn.com/images/e32bceb401619fd13a99e0fe4659a523a883447d6a4c0ba58a8e0ab89f659418.jpg
      TLDR if you want to online game this is the future. If you want to just play single player games you might get a few more years out of it on Linux but DX 12 non Vulkan choice games will prob run like garbage. DX 9-11 games run better in Linux. You can test this with DXVK on a Windows PC. Drop the correct dll in the game directory and you now have a "linux pc" gaming. Usually better on memory, overhead and fps lows that are all that matter. Very useful in mmo's that aren't DX 12, old games like GTA 4.

      Why don't companies like Sony use Vulkan for their games instead of DX 12? Cus they are dumb or profit from their being an Xbox or have games on MS's service and on and on. They also probably bought that TPM would end piracy which MS has sold for years.

  11. Its such cancer, i mean secure boot is perfectly fine (had it turned off for no reason too) but man you cant even have daemon tools installed, you have to have newest drivers its such chore and mess

  12. Not even about that, it's about TPM. It's always been about TPM. If you play online games you are just going to have to have this in the future and MS now owns the biggest MMO so expect that to use this to leverage a push to Win 11 as well.

    If you want to play online games and want anywhere near a sane Win 11 install that gives you the option to turn off TPM, secureboot at any time, take your current system and use Microwin, use the Chris Titus guide he posted a month or two back and use current drivers with the official Win 11 iso. Then use that iso with Rufus which as he said needs none of the tweaks cus it's on Microwin.

    After install run the microwin command in terminal that you used before in terminal that you can copy and paste off his github and under tweaks run standard, set Classic Right Click menu (allows you to do more things with right click) and I also like to uncheck Bing Search in Start Menu so that you can actually find things on the PC. On Task manager just turn edge from starting with the computer as I think that is the only thing by default MS has on there.

    You can also use Microwin to do all the post install stuff with winget. I put firefox on there (chrome based browsers are doomed with adblockers worth a darn like Ublock Origin), Steam, Epic Games,7zip, VLC whatever and you can remove everything from there at any time with no bloat.

    If and when you ever have a failed update on the streamlined Windows just run the following commands in Command Prompt as Administrator:
    1. "DISM /Online /Cleanup-Image /RestoreHealth" This can take a few minutes
    2. Restart your PC
    3. Then run: "sfc /scannow"
    4. Now you can update.

    Have this on my kids 7600x3D and 4070 "console" and their Windows has all the annoying crap gone and gets all the security updates. I think the only APP I even had to bother to remove was co pilot and I left gamebar on cus they can use game help assist thing and have a website open on their game screen to find a hint for games. You can remove that post install in Microwin as well.

    This method should also be used on new builds because companies like Asus want you on their stupid malware Armory Crate to even get MOST drivers not buggy in Device Manager. By using Microwin and using current drivers all I had to do was install the Nvidia driver from the current system and it was all done. ZERO bloat, removed co pilot or whatever that idiocy is and the system is as fast and clean as can be with 80 processes running instead of 140.

    All other slim downed Windows installs are 1) Shady 2) Already on ancient Win 11 builds and could possibly not get updates that will lock you out of possible games 3) Mess with the timer to give fake performance gains. Microwin is just Windows if they sold a "gamer" edition without all the garbage.

    Hope it helps. Without all the bloat Win 11 is faster than Win 10. Not much faster but faster. In an ideal world no game would use DX 12. They do and MS buying up game companies left and right protected that API Monopoly. Don't expect governments to stop it because MS has government contracts and Bill Gates was on Epstein Island and was the first to sell out to the PRISM program. Want a real secure OS for non gaming stuff? Build a little Linux Machine.

    1. Oh and if you want to play online games and are on an older platform like AM4 and have no plans to upgrade, I have seen some people have stutter issues with the older CPU TPM firmware. The solution is cheap. You buy a dedicated TPM and stick it in the old motherboard.

      You should no longer have stuttering under TPM. Any other stuttering or performance loss could possible be related to "core isolation". Just click off memory integrity if it is on in Windows for max performance gaming. This is something channels like Ancient Gameplays told you to do years ago.

    2. games use DX12 because its good and there are no alternatives other then older DX like 11 that is used by all dx12 titles as alternative anyway. This has nothing to do with monopoly, its just DX works and everyone knows how to work with it. Maybe accept that sh*ty company can make good thinks too.

      Also people are expected to upgrade their hardware from time to time, i will never understand pleb on some 20 years old hardware complaining new things dont work.

      1. 1) Vulkan exists. 2) In games that have DX 12 and Vulkan, Vulkan is faster. WTF API do you think Doom 2016 was using? 3) LOL at insults when you have no clue what you are talking about. What API do you think Nintendo uses, Sony uses, Apple phones and mobile devices that aren't Apple? Think they are on Direct X? Sony has a proprietary OpenGL/Vulkan and are on the board at Kronos who controls it. Nintendo does the same thing. Mobile devices use Vulkan and Apple products use Metal which again is based heavily on OpenGL/Vulkan.

        Vulkan itself is based heavily on Mantle which AMD pioneered and Direct X 12 wasn't even planned until MS realized a low level OpenGL (Vulkan) could legitimately destroy them and AMD was jump starting Vulkan by handing them all their Mantle stuff. Sony is not MS's competition. FREE and better is their competition and that is exactly what Vulkan is. This is why MS just spent BILLIONS on Game company acquisitions, so that they could continue to be an unneeded middleman.

        Don't bother replying to me. You are legitimately too ignorant to have this conversation and it's pointless for me to continue it. It's like talking to someone on the IGN forums or something.

    3. You just full of sh*t.

      I've had TPM disabled this entire time to avoid the Windows 11 Upgrade, and there is not a single game that doesn't work on my computer.

      I suggest you research the difference between TPM and Secure Boot.

  13. Also, in order avoid the "always online" requirement, they had it sorted out.
    Should you want to it play offline, they'd be sending the CIA guy to your house, so he can report watch!
    Ah, the future! We're so living it!

  14. Witcher 3 Next Gen had a problem with MSI Afterburner too. What happened there was the developers put d3d11on12.dll in the game's directory when it is already in System32. When you do that the game will use that version and lock out the one in System32. The MSI Afterburner overlay is written in DX11 and needs to call up d3d11on12.dll from System32 when used with DX12 games. The fix was simple, just delete d3d11on12.dll from the game's directory.

    You may want to look and see if d3d11on12.dll in in the game's directory folder and if it is delete it.

  15. What kind of idiot allows any company let alone EA to access your PC in a kernel level and fully take your PC certificate and screw you over whenever they feel like it

    i'm shocked there isn't enough outrage for this , people should be against this at all cost don't listen to the idiots that think SecureBoot enabled is harmless because they can have full access to every data in your PC and they will screw you over in the future

    1. You're a moron. You dont even know what secure boot is. It is harmless. You want to be mad at something be mad at the anti cheat.

  16. For people that have never had core isolation memory integrity on, which Valorant and it looks like this game is going to require it's going to raise the temperatures of your CPU 5-10C depending on the CPU. Just a heads up if your cooling is already borderline. It's one reason people see so much performance degradation with it on. They throttle or can't reach the same clocks while channels that test under water or with good cooling and airflow on a test bench have seen much smaller performance gaps and don't really notice the temp difference.

  17. I think it is not a main issue, whenever or whatever We need to enable secure boot in our bios because windows only comes with secure boot. It is nothing to be considered.

  18. As I read the comments here… All I can think to say is…

    Do ANY of you ACTUALLY know what Secure Boot is?

    Because, if you DID, this would be a NON-ISSUE for you. 🙄

    (Just record your e-keys if you know how to view them… just in case.)

  19. Most MP games are mostly doa for me, unless they have a SP campaign. But even then, any Util, game or program that has a Ring-0 level access requirement, is an instant hard-pass. But the trifecta for me, is its an EA game, to triple hard pass.

  20. So whats are the odds this game will ever run on the steam deck… that has no SB, TMP or I think UEFI…

Leave a Reply

Your email address will not be published. Required fields are marked *