GuidesOct 27, 20266 min readCS2Sell

FACEIT anti-cheat requirements: TPM 2.0, Secure Boot and common errors

FACEIT anti-cheat explained: what the client does, the TPM 2.0 and Secure Boot rules, Windows 10 support until October 2027 and fixes for the common errors.

The FACEIT anti-cheat is a Windows program with a kernel driver, and it has to be running before you can queue for or join a FACEIT match in Counter-Strike 2. In October 2026 it also checks your PC: TPM 2.0 and Secure Boot are required for every player, Windows 10 is only accepted with extended security updates, and a growing share of players must turn on IOMMU and VBS as well. Here is what each requirement means and how to fix the errors people hit most.

What the FACEIT anti-cheat does

FACEIT describes its anti-cheat as custom-built software in three parts: an app that must be running for every protected CS2 match, a kernel-mode driver that loads when your PC boots, and a server-side component that confirms to FACEIT that the client is running while you play. Valve's own system works differently, as our guide to CS2 anti-cheat and VAC explains.

FACEIT says the software only activates and collects game and anti-cheat data while Counter-Strike is running. If you want the driver gone between sessions, the tray icon has a "disable driver" option, and a restart turns it back on. The client exists for Windows 10 and 11 only; there are no Mac or Linux versions.

Since Season 9 began on August 5, 2026, the client has also included Human Input Detection, a machine-learning layer that looks for cheating in how a player acts in the game rather than in the software on the PC. FACEIT says it's aimed especially at AI cheats that run on separate hardware, and that there's nothing extra to install.

FACEIT anti-cheat requirements in October 2026

Requirement	Who needs it	Since
Windows 11, or Windows 10 version 22H2 with Extended Security Updates	Everyone	October 14, 2026
TPM 2.0	Everyone	November 25, 2025
Secure Boot, which needs UEFI and a GPT disk	Everyone	November 25, 2025
IOMMU and VBS	Players above 3,000 Elo, plus more players in waves	Rolling out since April 2025
Memory Integrity, CPU virtualization	Only if the client asks	Varies

The Windows rule changed this autumn. In October 2025 FACEIT planned to require Windows 11 from October 14, 2026, the day after Windows 10's extended security updates were then due to stop. Microsoft's consumer Extended Security Updates programme now runs until October 12, 2027, and FACEIT followed it in an FAQ update on October 1, 2026: Windows 10 needs version 22H2 with ESU enabled, Windows 11 becomes mandatory in October 2027, and "some devices may be required to upgrade sooner." Microsoft offers ESU for Windows 10 22H2 free if you sync your PC settings, for 1,000 Microsoft Rewards points, or as a one-time purchase.

The reasoning behind TPM 2.0 and Secure Boot is the boot chain. Secure Boot only lets signed software start the PC, and the TPM records each step and hands the anti-cheat a signed report of it, which FACEIT calls attestation. Many advanced cheats, FACEIT says, attach themselves to modified legitimate software to reach the Windows kernel. IOMMU works like a firewall for your RAM against cheats running on DMA cards, plug-in hardware that reads game memory directly, and FACEIT needs VBS to enforce it reliably. TPM and Secure Boot don't cost performance, according to FACEIT; IOMMU and VBS can have a minor impact on some systems.

How to enable Secure Boot and TPM 2.0 for FACEIT

Start by checking what you already have:

Press the Windows key, type tpm.msc and press Enter. Status should read "The TPM is ready for use" and the Specification Version should be 2.0.
In Windows Security, open Device security and then Security processor details. Attestation and Storage should both show "Ready".
Run msinfo32. BIOS Mode should say UEFI and Secure Boot State should say On.

If something is missing, the fix is in your motherboard's firmware settings. Most CPUs and boards from the last decade have a firmware TPM, which Microsoft says can be labelled Intel PTT, Intel Platform Trust Technology, AMD fTPM switch, AMD PSP fTPM, TPM State or Security Device. Secure Boot needs the board in UEFI mode rather than Legacy, also called CSM. FACEIT's tips: ASUS boards should use "Windows UEFI Mode", others may call it "Standard", and if Secure Boot still won't turn on, restoring the factory keys can help.

Switching from Legacy to UEFI can stop Windows from booting if your system drive uses the older MBR layout. FACEIT points to Microsoft's MBR2GPT tool, which Microsoft says converts a disk to GPT without modifying or deleting data. Convert first, then change the firmware setting. If you're not comfortable in the BIOS, both FACEIT and Microsoft advise checking your manufacturer's guide or asking a professional.

FACEIT's logo as a graffiti and a Sticker Slab, both from the 2018 London Major

Common FACEIT anti-cheat errors

Error	Usual cause	What FACEIT suggests
You need to have the Anti-cheat client running to connect	Client closed, wrong Steam account, or CS2 started from a shortcut to the game's executable	Run the client and launch CS2 through Steam
TPM attestation failed	A faulty discrete TPM, an old GRUB or self-signed boot loader, a revoked loader from restore software, or an internet cafe's update system	Switch to firmware TPM, update the BIOS, boot Windows Boot Manager directly
Secure Boot preset error on MSI boards	MSI defaults where Secure Boot looks on but doesn't work	Set Secure Boot Mode to Custom and the preset to Maximum Security
Forbidden driver	A driver with a known vulnerability, sometimes installed by hardware monitoring or control software	Restart, then update or remove that software
Missing Windows security updates	An unpatched or unsupported Windows build	Run Windows Update; Windows 10 must be 22H2 (build 19045) or newer
Testsigning must be disabled	Windows test-signing mode is on	Run bcdedit /set testsigning off as administrator and restart
Your Windows kernel has been modified	A rootkit, malware or cheat software	System Restore, Windows recovery, or a clean reinstall

If the client asks for Memory Integrity, it's under Windows Security, Device security, Core isolation details. When that menu is missing, CPU virtualization is usually switched off in the BIOS. For IOMMU, look for VT-d on Intel boards or IOMMU and AMD-Vi on AMD boards.

Download it only from FACEIT

FACEIT's support page for the Windows updates error warns that some websites and YouTube videos claiming to fix it contain links to malware. It adds that the official anti-cheat page is on faceit.com, and "anything else is a scam." The same name is used as bait elsewhere: our guide to Steam phishing sites covers fake FACEIT "verification" pages that ask for a Steam login. For what FACEIT is and how its levels work, see our FACEIT levels and Elo guide.