How to Check Secure Boot, TPM and Core Isolation on Windows

Several products on our site list the same four requirements: HVCI on, Core Isolation on, TPM on and Secure Boot on. That covers the HWID spoofer, Skin Changer and UGC. Some anti-cheats look at them too. Valorant’s Vanguard, for example, requires TPM 2.0 and Secure Boot on Windows 11.

If you are not sure where your PC stands, this takes about five minutes.

Check Secure Boot

• Press the Windows key and R, type msinfo32 and press Enter.
• In System Summary, find Secure Boot State.
• It should say On.
• Also look at BIOS Mode. It should say UEFI.

If BIOS Mode says Legacy, Secure Boot will not be available until the system disk is converted and the firmware is switched to UEFI. That is a bigger change than flipping a switch, so back up your files first.

If Secure Boot State says Off but BIOS Mode is UEFI, you can usually turn it on in your motherboard firmware settings. The location varies by manufacturer, and it is often under a Boot or Security tab.

Check TPM

• Press the Windows key and R, type tpm.msc and press Enter.
• The window should say The TPM is ready for use.
• Under TPM Manufacturer Information, check that Specification Version is 2.0.

If you see “Compatible TPM cannot be found,” the TPM is probably switched off in firmware. Most Intel boards call it Intel PTT. Most AMD boards call it fTPM or AMD CPU fTPM. Turn it on in the firmware settings, then check again.

Check Core Isolation and Memory Integrity

HVCI is the technical name for the feature Windows labels Memory integrity. It sits under Core isolation.

• Open Windows Security.
• Choose Device security.
• Under Core isolation, select Core isolation details.
• Turn Memory integrity on and restart if Windows asks.

If it will not turn on, Windows usually lists the incompatible drivers blocking it. You will need to update or remove those drivers before it can be enabled.

A few cautions

• Change firmware settings carefully. Write down what you changed so you can undo it.
• Do not download drivers from random sites to get Memory integrity working. Use the hardware maker’s own site.
• If your motherboard is older and lacks TPM 2.0 or UEFI support, you may be limited in what software you can run.

Why it matters for our tools

The requirements are listed on each product page. For the spoofer, they sit alongside Windows 10 or 11 (64-bit), administrator rights and a stable internet connection. Our HWID spoofer for BattlEye games guide covers how those fit into setup.

If you have checked everything and something still will not turn on, check the documentation or open a ticket with support (link 3) before you buy.