- TPM 2.0 since 25 Nov 2025
- Secure Boot required
- Windows 10: 22H2 + ESU
- Windows 11 from Oct 2027
FACEIT's anti-cheat is the reason many players move from Premier to FACEIT β and the reason some of them can't get into a match on day one. Since late 2025 it asks for more than an install: TPM 2.0, Secure Boot, a supported Windows version and, for higher-rated players, IOMMU and VBS. This guide explains what each requirement is in plain words, the dates they arrived, how to check your own PC in two minutes, and the fix FACEIT documents for every common error. Checked 2026-10-25.
- TPM 2.0 + Secure Boot: mandatory for all players since 25 November 2025 β over 95% already had them.
- Secure Boot needs UEFI + GPT β an old Legacy/MBR install has to be converted first.
- IOMMU and VBS are enforced in waves; everyone above 3,000 Elo since August 2025.
- Windows 10: 22H2 with ESU from 14 October 2026; Windows 11 required from October 2027.
- Memory Integrity (HVCI) only if the anti-cheat asks for it.
What the FACEIT anti-cheat is
FACEIT describes its client as "a kernel mode driver, loaded upon PC boot", available only for Windows 10 and 11, that has to be running whenever you play a protected Counter-Strike 2 match. Kernel level means it starts with Windows and can see what other drivers and programs do β which is why it's harder to fool than a program that starts with the game, and why it asks for the Windows security features below. If the client isn't running, FACEIT won't let you connect to the server.
Every requirement, in plain words
| Requirement | What it is | Who needs it | Since |
|---|---|---|---|
| TPM 2.0 | A security chip (or firmware TPM in your processor) that proves your PC's boot hasn't been tampered with | Everyone on Windows 10 and 11 | 25 November 2025 |
| Secure Boot | A BIOS setting that only lets signed software start before Windows β needs UEFI + GPT | Everyone | 25 November 2025 |
| IOMMU + VBS | Hardware memory protection and Windows' virtualisation-based security, which blocks memory-reading cheats | Rolled out in waves; everyone above 3,000 Elo | April 2025 (partly), August 2025 (above 3,000) |
| Windows version | Windows 10 22H2 with Extended Security Updates, then Windows 11 | Everyone | 14 October 2026 / October 2027 |
| Memory Integrity (HVCI) | A Windows Security setting under Core isolation | Only when the anti-cheat asks | β |
An older FACEIT announcement (October 2025) said Windows 11 would be required from 14 October 2026; FACEIT's requirements FAQ, updated 1 October 2026, replaced that with the Windows 10 22H2 + ESU rule and an October 2027 date. We follow the newer page.
Check your PC in two minutes
- TPM: press Win + R, type
tpm.msc.The TPM Management window should say "The TPM is ready for use" and Specification Version 2.0. "Compatible TPM cannot be found" means it's off in the BIOS.
- Secure Boot: press Win + R, type
msinfo32.In System Summary, BIOS Mode should say UEFI and Secure Boot State should say On. "Legacy" means the disk needs converting to GPT before Secure Boot can be enabled.
- Windows version: press Win + R, type
winver.Windows 10 must be version 22H2 with Extended Security Updates from 14 October 2026. Windows 11 is fine.
- Attestation: open Windows Security β Device security.
Under Security processor details, Attestation should show Ready.
Common errors and FACEIT's fixes
| Error | FACEIT's fix |
|---|---|
| TPM attestation is not ready | Windows Security β Device security must show Attestation as Ready; on AMD with TPM version 3.*.0.* update the BIOS. |
| TPM attestation failed | Switch to the firmware TPM (fTPM) in the BIOS and update the motherboard BIOS; self-signed bootloaders and old GRUB cause it. |
| Secure Boot isn't enabled (MSI boards) | Set Secure Boot Mode to Custom, then Secure Boot Preset to Maximum Security. |
| Please enable Memory Integrity to continue | Turn on virtualization (SVM / VT-x) in the BIOS, then Memory Integrity in Windows Security. |
| You need to have the Anti-cheat client running to connect | Start the anti-cheat, launch CS2 through Steam (or a proper shortcut) on the Steam account linked to FACEIT. |
Two more that catch people out: dual-boot PCs with self-signed bootloaders or old GRUB versions fail TPM attestation, and a BIOS update often fixes TPM errors on its own. Motherboard menus differ by brand β FACEIT's support pages have separate walkthroughs for TPM and Secure Boot.
Does it hurt performance or privacy?
On performance, FACEIT is upfront: "IOMMU and VBS can have a minor performance impact." TPM and Secure Boot cost nothing in frames. On privacy, a kernel driver runs with deep access to your system for as long as Windows is running β that's what makes it effective, and it's the trade every kernel anti-cheat (Vanguard, FACEIT, others) asks players to accept. If you don't want it running, quit the client when you're done playing.
The anti-cheat and boosting
The anti-cheat runs on whatever PC plays the match. With a piloted FACEIT boost the booster plays on their own PC with FACEIT's anti-cheat running there, logged into your FACEIT and Steam accounts β so your PC's settings don't matter, but account sharing is against FACEIT's rules and carries the risk the FACEIT boosting guide sets out. A duo boost shares no login: you play on your PC, with your anti-cheat, next to the booster.
Help
- Read next: how to start FACEIT and how much Elo a win is worth.
- Play with a pro: a high-rated teammate in your lobby β no login shared.
- Climb faster: a FACEIT Elo boost by a verified Level 10.
- FACEIT β Rollout of TPM, Secure Boot, IOMMU and VBS (23 Oct 2025) Β· Windows Security Requirements FAQ (updated 1 Oct 2026) Β· Known issues with anti-cheat requirements
- What is FACEIT Anti-cheat (updated 23 Oct 2025) Β· Enabling TPM 2.0 Β· Enabling Secure Boot Β· Enabling Memory Integrity (updated 21 Jul 2026) Β· TPM attestation failed Β· PC check guide Β· Anti-cheat client not running
- Checked 2026-10-25. Not affiliated with FACEIT.
All free tools: calculators, percentiles & season countdowns β
