Rust TPM & Secure Boot Requirement: Check and Enable It Safely
Rust began a phased TPM and Secure Boot rollout on selected secure servers in March 2026. Check your status before changing BIOS settings.
Facepunch began the first phase of Rust's TPM and Secure Boot rollout in March 2026 on selected servers marked with secure tags, with a later global phase planned. Before entering BIOS, first check whether both security features are already enabled in Windows.
Fix it step by step
1Check TPM status in Windows
Press Windows + R, run tpm.msc, and look for a message that the TPM is ready for use. If it is already ready, do not change TPM settings in BIOS.
2Check Secure Boot status
Press Windows + R, run msinfo32, and locate Secure Boot State. If it says On, that part of the requirement is already satisfied.
3Identify your motherboard or PC model
Use System Information to record the system or motherboard model before entering UEFI. Exact menu names differ by ASUS, MSI, Gigabyte, ASRock, Dell, HP, Lenovo, Acer, and other vendors.
4Enable firmware TPM only if it is currently off
On AMD systems this may be called AMD fTPM; on Intel systems it is often called Intel PTT or TPM Device. Use your motherboard manufacturer's manual for the exact location.
5Enable Secure Boot carefully
Look under Boot, Security, or Authentication menus and enable Secure Boot. If the option is unavailable because the machine uses Legacy/CSM boot, do not blindly switch modes: Facepunch warns that changing Legacy to UEFI can prevent Windows from booting on some systems.
6Save, restart, and verify again in Windows
After any supported BIOS change, boot back into Windows and re-check tpm.msc and msinfo32. The goal is to confirm both features are actually active, not merely configured in firmware.
Frequently asked questions
Does every Rust server require TPM and Secure Boot right now?
Facepunch's March 2026 guidance says the first rollout phase applies to selected servers with secure tags, with a second global phase planned for later communication.
What if my PC has no TPM 2.0 or Secure Boot support?
Facepunch notes that older systems may not support the required features. In that case, hardware or platform changes may eventually be necessary once the global requirement takes effect.
Official sources
These references were used to build and verify the troubleshooting order in this guide.
Related troubleshooting guides
Continue with closely related guides from the same topic hub.