Fix Vanguard Error 1067: Enable TPM & Secure Boot

Quick answer

Enable Secure Boot and TPM 2.0 in your BIOS/UEFI. On most systems, that means restarting, pressing Del/F2/F10 to enter setup, finding the Security or Boot tab, turning on "Secure Boot" and "Intel Platform Trust Technology" (or "AMD fTPM"), then saving and restarting.

Why this happens

Vanguard error 1067 pops up when Riot's anti-cheat decides your PC doesn't meet Windows 11's security requirements. The game checks for TPM 2.0 and Secure Boot at launch. If either is off, Vanguard refuses to start. I see this constantly on older gaming rigs that were upgraded to Windows 11, or on prebuilt machines where the motherboard shipped with these features disabled. It's not a hardware failure. Your PC probably has the chips. They're just sitting there, turned off. Let me show you how to flip them on.

Step-by-step fix

Check current status. Press Windows+R, type msinfo32, hit Enter. Look for "Secure Boot State" and "TPM Version" under System Summary. If you see "Unsupported" or "Off", you know why you're getting error 1067.
Restart and enter BIOS. Restart your PC. As soon as the screen goes black, tap the correct key — Del on most MSI and Asus boards, F2 on Dell and Lenovo, F10 on HP. If you're not sure, watch the first screen for the prompt.
Enable TPM. On Intel boards, look for "Intel Platform Trust Technology" or "PTT". On AMD boards, it's "AMD fTPM" or "CPU TPM". It's often under Advanced, Security, or Trusted Computing. Set it to Enabled.
Enable Secure Boot. Find the Boot tab. Set "Secure Boot" to Enabled. If it's greyed out, switch boot mode from Legacy to UEFI first — that's a separate setting, usually right above Secure Boot.
Save and exit. Press F10 to save changes and restart. Your PC will boot normally. After Windows loads, run msinfo32 again — you should now see Secure Boot State: On and TPM Version: 2.0.
Launch Valorant. Open Riot Client and try the game. Vanguard should start its install without the error.

If it still fails

Sometimes BIOS settings get tricky. Try these in order:

Clear CMOS. Unplug the PC, pop the round battery off the motherboard for 30 seconds, put it back, boot, and redo the BIOS steps. Some motherboards hide TPM settings until after a reset.
Check for BIOS updates. Go to your motherboard vendor's site, find your exact model, and download the latest BIOS. Flashing it can expose missing settings. I've seen old Z370 boards gain TPM options after a 2022 update.
Run the Windows PC Health Check. Microsoft's free tool tells you exactly which security feature is failing. Download it from Microsoft's site, run it, and it'll say "Secure Boot is off" or "TPM 2.0 not detected". That narrows it down.
Reinstall Vanguard. Open Control Panel, uninstall "Riot Vanguard", restart, then launch Valorant — it'll reinstall Vanguard fresh. This clears any corrupted state from when the error first appeared.

Prevention

Once you've got it working, don't touch the BIOS again. If you ever reset BIOS to defaults (like after a RAM overclock fails), you'll lose these settings and get error 1067 again. Write down what you changed, or take a photo with your phone. Also, if you're building a new PC, buy a motherboard with TPM 2.0 on board — every board from the last five years has it, but some cheaper ones require you to enable it manually. That's the real fix: know your hardware, enable the security features, and you won't see this error again.