Fix every FACEIT Anti-Cheat error.

Secure Boot, TPM 2.0, IOMMU, virtualization, Memory Integrity and the fatal error codes — each with the exact steps. Got your PC running? Tune it with the CS2 Optimizer.

Trust factor: why you’re asked for more than your friend

FACEIT AC is not only a cheat detector — it also acts as face control. The exact set of features it forces you to enable depends on how much it trusts your account: reports, playing in a stack with cheaters/boosters/smurfs, playing from a PC café on another IP, or several accounts from one PC all raise the bar. One player can play without core isolation or virtualization; another must enable every Windows and motherboard security mechanism. So treat the list below as a menu — switch on whatever your client actually asks for.

⚠ First: a clean, official Windows

Pirated and “debloated” Windows builds with stripped updates, Defender and security components are the #1 reason errors won’t fix. On such a system TPM, Secure Boot, Memory Integrity and Windows Update often simply don’t work — and you can’t even tell what was removed. Install an official Windows 11 image (23H2+) and tune it by hand, not with a gutted build.

Step 0 · Check the foundation

The foundation: UEFI + GPT

Almost every FACEIT AC error traces back to two things: your BIOS must run in UEFI mode (not Legacy/CSM) and your system disk must be GPT (not MBR). Check this before touching anything else.

Check Win+R → msinfo32. Look at two fields: “BIOS Mode” and “Secure Boot State”.

✓ BIOS Mode = UEFI

Good — almost everything is fixable right in BIOS/Windows. If “Secure Boot State” is Off, go to the Secure Boot card below. If it’s On but FACEIT still complains, re-check drivers and reinstall the AC client.

✕ BIOS Mode = Legacy (CSM)

STOP. Do NOT enable Secure Boot — on Legacy/MBR the PC will fail to boot. Check the disk partition style (Win+R → diskmgmt.msc → disk Properties → Volumes → “Partition style”). If GPT — disable CSM in BIOS (Boot → CSM/Legacy Support → Disabled / “UEFI only”), then enable Secure Boot. If MBR — convert with mbr2gpt, or clean-install Windows from USB (Rufus: scheme GPT, target UEFI; or Ventoy) with CSM disabled.

Please enable Secure Boot

Enable Secure Boot

BIOS / UEFI
Symptom

FACEIT AC shows “Please enable Secure Boot” — often after a Windows reinstall, hardware swap or BIOS reset.

Why it happens

“Secure Boot: Enabled” in BIOS is not the same as it being active. It only truly works in UEFI mode with GPT disks, and often needs its keys re-written.

Steps
  1. Win+R → msinfo32. Confirm BIOS Mode = UEFI (if Legacy — see “The foundation” and stop here).
  2. Reboot → Del/F2 → Security tab (or Boot).
  3. New BIOS (2022+): Secure Boot = Enabled, Secure Boot Mode = Standard. Often enough.
  4. Still asking at “Enabled”: set Secure Boot → Disabled, then Secure Boot Mode → Custom (lets you re-write keys).
  5. Key Management → “Restore Factory Keys” / “Install default keys” (if active) → confirm.
  6. Set Secure Boot back to Enabled (Standard). Save (F10) & exit.
  7. Reboot → msinfo32 again: Secure Boot State should now read On.
BIOS paths
  • MSI Settings → Advanced → Windows OS Configuration → Secure Boot. Доп. параметр Secure Boot Preset / hardware OS → Maximum Security.
  • ASUS Boot → Secure Boot → OS Type → «Windows UEFI Mode» (+ Key Management → Clear/Restore Keys).
  • Gigabyte BIOS → Secure Boot → Secure Boot Enable + Secure Boot Mode → Standard/Custom.

↳ Still asking after this? Update your BIOS and Windows. If the PC hangs on boot, your disk is likely MBR/Legacy — see “The foundation” above.

Please enable TPM 2.0 / TPM attestation failed

Enable TPM 2.0

BIOS / UEFI
Symptom

“Please enable TPM 2.0” or “TPM attestation failed”. The AC won’t start without TPM 2.0.

Why it happens

TPM 2.0 is a security module on most modern boards. FACEIT AC will not start without it. Intel exposes it as PTT; AMD as fTPM.

Steps
  1. Win+R → tpm.msc (maximize the window). “The TPM is ready for use” + version 2.0 → already on.
  2. “Compatible TPM cannot be found” → it’s off in BIOS. Reboot → Del/F2 → Advanced or Security.
  3. Intel: enable “Intel Platform Trust Technology (PTT)”.
  4. AMD: enable “AMD fTPM” / “Security Device Support” → AMD CPU fTPM.
  5. Sometimes a simple off → reboot → on of the module helps.
  6. Save, reboot, re-check tpm.msc.
BIOS paths
  • Intel Advanced / Security → Intel Platform Trust Technology (PTT) → Enabled.
  • AMD Advanced / Security → AMD fTPM switch → AMD CPU fTPM (или Security Device Support → Enabled).

↳ No TPM at all on your board? You need a board/CPU that supports it or an add-on TPM module. Pirated/debloated Windows often breaks TPM — use an official Windows image.

System is missing important Windows security updates

Missing Windows security updates

Windows
Symptom

“System is missing important Windows security updates”. Needs Windows 11 23H2+.

Why it happens

FACEIT AC requires up-to-date Windows security protocols. It needs Windows 11 23H2 or newer — Windows 10 support has ended.

Steps
  1. Open Windows Update and install every available security update.
  2. On Windows 10: upgrade to 11, or clean-install 11 from USB.
  3. On Windows 11 with no updates showing: run PC Health Check, then Windows 11 Installation Assistant → Start.
  4. If updates keep failing or you re-installed several times this year, check you are not stripping Windows Defender during “optimization”.
  5. Last resort: clean install of an official Windows image, then update via Windows Update.
Please enable Memory Integrity / Core Isolation

Enable Memory Integrity

Windows
Symptom

“Please enable Memory Integrity / Core Isolation”.

Why it happens

A Core Isolation feature FACEIT may require at higher trust. It depends on Secure Boot and virtualization being on too.

Steps
  1. Search “Core isolation” → Windows Security → turn on Memory Integrity → reboot.
  2. If it errors despite being on, enable SVM/VT-x and Secure Boot in BIOS — they are linked.
  3. If Windows Security is broken/won’t open (debloated Windows), reinstall an official Windows image.

↳ Old FACEIT guides told you to DISABLE core isolation for TPM — that no longer applies. TPM must be ON now.

Please enable virtualization (Intel VT-x / AMD SVM)

Enable virtualization

BIOS / UEFI
Symptom

“Please enable virtualization” (Intel VT-x / AMD SVM).

Why it happens

CPU virtualization must be on in BIOS, and sometimes in Windows too.

Steps
  1. BIOS → Advanced → CPU Configuration.
  2. AMD: enable “SVM Mode” / “SVM” / “AMD-V”.
  3. Intel: enable “Intel Virtualization Technology” / “VT-x”.
  4. Save & reboot.
  5. If Windows still reports it off, enable virtualization in Windows features too.
BIOS paths
  • MSI OS Settings → CPU Features (или просто Advanced).
  • Gigabyte Tweaker → Advanced CPU Settings → SVM Mode / VT-x.
  • ASUS / Intel Advanced → CPU Configuration → Intel Virtualization Technology.
Please enable IOMMU (VT-d)

Enable IOMMU / VT-d

BIOS / UEFI
Symptom

“Please enable IOMMU”. Usually for players at ~2000 ELO+.

Why it happens

Usually required for players at ~2000 ELO+. AMD calls it IOMMU; Intel calls it VT-d.

Steps
  1. Update your BIOS first.
  2. AMD: Advanced → AMD CBS → NBIO Common Options → enable IOMMU.
  3. Intel: enable “VT-d” (Advanced → System Agent / PCI subsystem / CPU config).
  4. Some boards also need “Kernel DMA Protection” enabled. Save & reboot.
BIOS paths
  • AMD (MSI) Advanced → AMD CBS → NBIO Common Options → IOMMU (или OC → CPU Common Options).
  • AMD (ASUS/Gigabyte) AMD CBS → NBIO, либо System Agent (SA) Configuration.
  • Intel Advanced → System Agent (SA) Configuration / PCI Subsystem / CPU Config → VT-d → Enabled.
Enable NX / Execute Disable Bit / DEP

Enable NX bit & DEP

BIOS / UEFI
Symptom

“Enable NX / Execute Disable Bit / DEP”.

Why it happens

Data Execution Prevention must be active at CPU and Windows level.

Steps
  1. BIOS → Advanced → CPU Configuration → set “NX Mode” / “Execute Disable Bit” / “XD Bit” to Enabled.
  2. Windows: System → Advanced system settings → Performance → Data Execution Prevention → turn on DEP for all programs and services.
  3. Reboot and re-check.
You need to disable test signing

Disable driver test signing

Windows
Symptom

“You need to disable test signing to launch FACEIT AC”.

Why it happens

Windows is in test-signing mode, usually after safe-mode boots or third-party “optimizer” driver testing.

Steps
  1. Open an elevated Command Prompt (Run as administrator).
  2. Run: bcdedit /set testsigning off
  3. Reboot.
The service cannot be started

AC service cannot start

Windows
Symptom

“The service cannot be started”.

Why it happens

The FACEIT AC service was disabled — often by an “optimizer” that touched services or the registry.

Steps
  1. Win+R → services.msc.
  2. Find every FACEIT-related service and set Startup type to Automatic, then Start it.
  3. If it still fails, reinstall the FACEIT AC client.
Forbidden / blocked driver (e.g. iqvw64, HWiNFO sys, sound/SSD drivers)

Forbidden / blocked driver

Drivers
Symptom

A specific .sys driver name is named as forbidden/blocked (HWiNFO, storage or sound drivers).

Why it happens

A driver with an outdated/vulnerable signature is loaded — common with monitoring tools (HWiNFO) and storage/sound drivers.

Steps
  1. For storage controllers: Device Manager → find the SSD/HDD controller → Update driver → pick the standard Microsoft driver.
  2. For monitoring .sys files (e.g. HWiNFO): remove the tool from startup (e.g. via Autoruns), reboot, then delete the file.
  3. For external sound cards/peripherals: update the driver from the official vendor site.
Fatal errors (23, 78/79, 95, 99, 100, 115, 122, 126) & memory corruption

FACEIT fatal error codes

Fatal codes
Symptom

A “Fatal error” with a numeric code, or “Memory corruption detected”.

Why it happens

These are mostly hardware/driver/Windows-integrity issues. The fix depends on the code.

Error codes
  1. Error 23 — update your BIOS.
  2. Errors 78/79 — test hardware: RAM with MemTest, CPU with Prime95. Often too-tight RAM timings or unstable OC.
  3. Error 95 — remove the “secret” folder if present; update ASUS Armoury Crate.
  4. Error 99 — bad sectors / pagefile issue — check your SSD/HDD.
  5. Error 100 — an overlay/recording app is hooking the game — close capture/analytics overlays.
  6. Error 115 — possible rootkit — scan with an anti-rootkit tool (e.g. Malwarebytes Anti-Rootkit).
  7. Error 122 — file/disk corruption or driver conflict — see “Forbidden driver” above.
  8. Error 126 — a critical Windows component is missing/corrupt — repair, then reinstall Windows if needed.
  9. Memory corruption detected — reset any RAM overclock to default; test RAM (TestMem5 / Karhu).
Anti-cheat restarts in a loop

AC restart loop

Network
Symptom

FACEIT AC restarts over and over and never finishes loading.

Why it happens

FACEIT AC cannot verify your hardware config or fetch its files — usually network/VPN/ISP related.

Steps
  1. Keep clicking Restart until it loads.
  2. Disable any VPN, reboot your router, and try again.
  3. If you are in a region with FACEIT connectivity issues, a stable connection / region change often fixes it.
You need the anti-cheat client running to connect

AC client must be running

Network
Symptom

“You need the anti-cheat client running to connect”, even though it is running.

Why it happens

Usually a mismatch between the Steam account in CS2 and the one linked to your FACEIT profile.