c2DDragonEverybody complain about the anticheat and not about the price ?

70€ or 100€ without the future DLCs but the paid battlepass :)

I was hyped by the reddit posts about this game, I now don't care to see it fall like Battlefield 2042 due to a lack of players in a few months for real.

Still cheaper than GTA 6.

FR3D1Hey!

The TPM just needs to be activated and, if necessary, deleted.
Clear all the keys from the TPM

By the way, after today's last update, I still don't need a TPM.


Regards, Fred.

Thanks for attempting to answer this but I'm not sure if this answer is complete. Currently I have registry keys in place to bypass these features that were added before installation (live disk environment). I'm not sure if simply enabling fTPM in bios would be enough to get SecureBoot and TPM working.

It might be that some additional setup or configuration is needed, steps that normally would have happened automatically during a W11 install. That's worst-case scenario and what I'm worried about. I'd hate to have to reinstall W11 for him again after we just got it set up.

phil995511And if it allows you to play BF with complete peace of mind, without cheaters in the game, I think that's pretty good.

My understanding is that some cheats bypass the anticheat entirely by running on a second system so I don't think complete piece of mind is a possiblity.

phil995511And if it allows you to play BF with complete peace of mind, without cheaters in the game, I think that's pretty good.

You haven't been paying attention to the rest of the conversation. SecureBoot does NOTHING that can't be cracked. The best and ONLY way to ensure cheaters have serious problems or can't cheat at all is to do all user stat checks on EA's own servers.

Pets4EverMy understanding is that some cheats bypass the anticheat entirely by running on a second system so I don't think complete piece of mind is a possiblity.

That is one of many ways of going it.

Pets4EverThanks for attempting to answer this but I'm not sure if this answer is complete.

The "Trick 17" you used (to bypass Secure Boot & TPM) is only relevant for the installation. So you can easily enable Secure Boot & TPM later to use the additional security features and/or to play Battlefield 6. Only the TPM module might need to be manually emptied (Windows doesn't trigger this automatically) using the instructions I linked above. By the way, Secure Boot should ideally be enabled (unless it conflicts with a Linux distribution).

Regards, Fred.

OnasiAnd the game will still most likely be infested with cheaters by week two. Getting more and more invasive isn’t the play methinks. I would agree with Valve that the endgame is an AI based solution that’s constantly learning and adapting, though even they haven’t yet cracked that chestnut. But no, requiring TPM, SecBoot and a Ring-0 kernel driver for your AC just to play a mediocre MP FPS is a bridge too far.

I would almost agree until you said mediocre MP FPS go play COD

Enabling secure boot is fun.
POST stopped at VGA code for some reason.
After connecting the display to the iGPU, I could see that it was not happy about signatures and decided not to send any signal to my discrete GPU for some reason.


And this UEFI from Gigabyte does not help. It is set to English but a lot of descriptions for functions are in Portuguese :roll:
After exploding PSUs and GPUs which are dumping a load in your PC, can't expect much from Gigabyte :roll:

Hecate91Secure boot is an issue, it's unnecessary, forcing it was a terrible decision and people on the r/battlefield reddit are breaking their systems by turning it on.
Disabling secure boot and TPM are very popular things being done when installing W11 with a USB format tool like Rufus.

Now I really want to know how and why their systems break by just turning it on (bold claim is very bold). This is internet, I most definitely do not trust some random redditor's claims.

EasoNow I really want to know how and why their systems break by just turning it on (bold claim is very bold). This is internet, I most definitely do not trust some random redditor's claims.

People can be really dramatic lol. Recently I saw a Helldivers 2 youtuber crashing out saying that GameGaurd was "taking over" his webcam. The "proof" was that tabbing in and out of the game would change the capture settings of the camera drastically changing the look of the feed. (It was calibrated to make the room look shadowy and would instead appear bright and a little washed out with GG in play)

Now I'm not saying that's a good thing, it's proof positive that GameGuard is trash, but I think it's clear that GameGuard isn't taking over anything. It's just blocking advanced driver functions that have probably been abused for cheats before. I do believe it probably does this in a blanket fashion aka lazily, but going around saying that GameGaurd is controlling your camera is another thing entirely.

EasoNow I really want to know how and why their systems break by just turning it on (bold claim is very bold). This is internet, I most definitely do not trust some random redditor's claims.

I'm honestly not sure, I have secureboot and TPM on by default with W11. Some older boards couldn't use TPM or secureboot without having performance issues in games, but I think having the average gamer dig around in the UEFI and potentially brick their system was a dumb move, IMO.

EasoNow I really want to know how and why their systems break by just turning it on (bold claim is very bold). This is internet, I most definitely do not trust some random redditor's claims.

You're kidding? Ok. Turn it on, install an OS. Turn it off, try to boot then and see what happens. Trying to diag a system with TPM/SB is a royal pain in the rectum. Neither do anything serious for system security but add a ton of headache to usability. Both are needless shit-shows.

Hecate91Some older boards couldn't use TPM or secureboot without having performance issues in games

Neither Secure Boot nor TPM require any kind of computing power. With HVCI/VBS, however, this would be correct. For this, I'll link to the German equivalent, ComputerBase. You may need to have the linked tests translated!

Windows 11 & 10: Benchmarks zum VBS-Leistungsverlust inkl. HVCI
VBS inkl. HVCI in Windows 11: Aktuelle Benchmarks zum Leistungsverlust in Spielen

Hecate91but I think having the average gamer dig around in the UEFI and potentially brick their system was a dumb move, IMO.

Security-relevant features like Secure Boot (13 years old?) haven't been around for a long time. Accordingly, you should be aware of them and, in my opinion, have them enabled (not applicable, e.g., #UnsignedDrivers).

lexluthermiesterTurn it off, try to boot then and see what happens.

I recently had to do this again for "Rescuezilla v2.5.1," and I quote as follows: Updated the UEFI Secure Boot shim package to v1.58 after a Windows 11 update revoked older shims by incrementing the minimum "SBAT generation" (#525). This fixes any "SBAT self-check failed" errors to ensure Rescuezilla continues to boot on UEFI Secure Boot enabled systems which require the latest "SBAT generation." Quote/end.

Source

And what's the problem? Honestly, I haven't had one. Never! Not even with the TPM, which can also be activated, deleted, and used for Windows as needed.

Greetings Fred

well hold on to your secure boot and TMP
BF6 hacked in day 1 :roll:

BesensacBF6 hacked in day 1 :roll:

Secure Boot and TPM are helpless against, for example, DMA (Direct Memory Access) hacks. And yes, yesterday I reported some dubious players from the Russian Federation for "cheating." I'm really hoping that BF6, like BF2042, will come with a solo/co-op mode. I prefer playing privately with friends against AI. The latter, however, would just have to be as competent as those in Counter-Strike 2.

Regards, Fred.

Besensacwell hold on to your secure boot and TMP
BF6 hacked in day 1 :roll:

This is very shocking and unexpected. See? This is my shocked face.
Seriously, this whole AC thing nowadays reminds me of the ”good” old times of “we implemented invasive DRM that fucks over the paying customer, yet the game is on torrent sites day one”. Similar vibe.

Not surprising at all, I played a few rounds today and noticed some sketchy stuff going on like getting headshot killed through smoke or people would get fast kills from over 100m away with an SMG. I'm not going to pay $80 for a game which will probably be full of cheaters on launch day. Oh well, guess I'll stick to bf3 and bf4 with custom servers.

lexluthermiesterYou're kidding? Ok. Turn it on, install an OS. Turn it off, try to boot then and see what happens. Trying to diag a system with TPM/SB is a royal pain in the rectum. Neither do anything serious for system security but add a ton of headache to usability. Both are needless shit-shows.

Ok, so, the system I have in my specs - it is on, you can see that in attachment (pardon my Latvian). So did my previous one.

I manage ~600 laptops/desktops - all have it on + BitLocker with TPM saving the keys. I even converted couple hundred computers from BIOS to UEFI with Secure Boot (option available for computers which had both CSM and UEFI) during Windows 10 migration few years ago, zero issues - again all of those were using BitLocker with TPM. Now the whole fleet is on Windows 11, same setup.
Additionally there are few physical servers - all with Secure Boot on. I even have a 200 TB physical server for archiving - Secure Boot and encrypted with BitLocker - again TPM is in use.
We additionally have a hundred or so virtual machines with Secure Boot enabled, that list includes few Linux VM's too.

Sure - my work gear is all HP business class computers and HPE servers. But my own home PC is clearly not factory built and just mashed together.
The question is - why it doesn't work for you? Compatibility is up to hardware manufacturer, not Microsoft or whatever.

Pets4EverPeople can be really dramatic lol. Recently I saw a Helldivers 2 youtuber crashing out saying that GameGaurd was "taking over" his webcam. The "proof" was that tabbing in and out of the game would change the capture settings of the camera drastically changing the look of the feed. (It was calibrated to make the room look shadowy and would instead appear bright and a little washed out with GG in play)

Now I'm not saying that's a good thing, it's proof positive that GameGuard is trash, but I think it's clear that GameGuard isn't taking over anything. It's just blocking advanced driver functions that have probably been abused for cheats before. I do believe it probably does this in a blanket fashion aka lazily, but going around saying that GameGaurd is controlling your camera is another thing entirely.

Ehh, just take a look at any thread regarding Microsoft/Windows. It's usually ridiculous.... I do think kernel level anticheat is a bad thing, but not physical security of the computer. Shitting on SB/TPM is silly and just " 1337 gamerzzzz" stuff.

Hecate91I'm honestly not sure, I have secureboot and TPM on by default with W11. Some older boards couldn't use TPM or secureboot without having performance issues in games, but I think having the average gamer dig around in the UEFI and potentially brick their system was a dumb move, IMO.

It's like 1-2 options, usually. For business class computer - one checkbox. Literally. For, say, gamer motherboard - maybe one more, like "Do you want to enroll the default certificates or use custom ones?" to which the answer is "Default pl0x", which might confuse some. Then again that is an enthusiast system and as an enthusiast one should understand as to what they are doing. The average person would have no need to of course.

EasoCompatibility is up to hardware manufacturer

In this case it seems to be Gigabyte.

Gruß Fred.

FR3D1And what's the problem?

Other than It's needless, useless and a waste of time?

EasoI manage ~600 laptops/desktops - all have it on + BitLocker with TPM saving the keys. I even converted couple hundred computers from BIOS to UEFI with Secure Boot (option available for computers which had both CSM and UEFI) during Windows 10 migration few years ago, zero issues - again all of those were using BitLocker with TPM. Now the whole fleet is on Windows 11, same setup.
Additionally there are few physical servers - all with Secure Boot on. I even have a 200 TB physical server for archiving - Secure Boot and encrypted with BitLocker - again TPM is in use.
We additionally have a hundred or so virtual machines with Secure Boot enabled, that list includes few Linux VM's too.

That's impressive. It also has nothing to do with my complaints. Additionally, there are much better ways to implement data and system security. SecureBoot and TPM have weaknesses that can not be fixed because of the very way they work. Couple that with the fact they are a needless hassle and it shouldn't be too difficult to understand why they're ultimately useless.

lexluthermiesterOther than It's needless, useless and a waste of time?


That's impressive. It also has nothing to do with my complaints. Additionally, there are much better ways to implement data and system security. SecureBoot and TPM have weaknesses that can not be fixed because of the very way they work. Couple that with the fact they are a needless hassle and it shouldn't be too difficult to understand why they're ultimately useless.

So.. what *are* your complaints? All you've done so far is tell people to install with SB/TPM on, then turn off SB/TPM and try booting... which will drop you to a bitlocker recovery menu *if and only if* you have bitlocker enabled (which IMO everyone should). Well, that's what hapenned the last time I tried.

For the rest of folks: all that SecureBoot does is make sure that the thing that is booting has a valid digital signature (same basic system as what powers HTTPS/TLS). In and of itself, there is no problem with SB. The only problem that can arise with SB is that you get locked out of installing your own software - by the platform vendor (mobo manufacturer/OEM/SI) refusing to sign your OS's bootloader and the platform vendor also refusing to install your own SB keys. This is a non-issue on PCs, both x86 and ARM (Apple included!) where you can both freely turn SB off, and also fully manage your SB keys, including blocking the MS keys. It is, however, a major issue with smartphones, so I can certainly understand the fear that it spreads to PCs, but let's remain factual, not hyperbolic.

As for TPM.. TPM is just a secure storage of encryption keys (well.. secure enough until you decap it with nitric acid and prod it with a logic analyzer or break into Intel ME/AMD PSP). It is physically incapable of doing more than that.. so uhh, please, do tell, where is the problem?

I was just about to consider asking what's wrong with secure boot that people are going apeshit here, bcause there are 3 pages of complains and not a single sound comment, but someone beat me to it.

edit: Oh wait I did, got the "we don't talk about the fight club" response from none other than the tech VIP :D

I just reinstalled thenOS on my Ex-wife’s recently purchased Prebuilt(well I think she got it in Jan-Feb) and the initial install was like nothing I’d ever seen with it constantly being on the black “updating screen” but no percentage and would never actually finish/change.
Eventually have probably more than a few hard resets it finally loaded up and I did all the basic stuff for drives and such. But the issue arose when trying to install the EA App. It was just a total no go nothing I found for fixes online changed it. My ex-wife only plays BF so I mean is was the point of upgrading the PC. I of course told her it was definitely that kooky install and a fresh install would fix it. So fast forwards months later and her being forced to play CoD(guys she is REALLY good and of course Pwned in CoD too)
I reinstalled the OS last weekend and upgraded it to Pro and first app I installed was EA with absolutely ZERO issue. She plays BF1 but was really excited about BF6 and was very excited to play the Beta
Now long story short I DID NOT even look in the BIOS or even consider Secure Boot…Thankfully apparently it was on or I’d have one very unhappy Ex and another hour drive out to sort it.
History: Divorced over 15 years still very close friends and I have always handled her PCs and PC issues so I am not put out at all for doing it and frankly her area is an absolutely beautiful drive with the gorgeous scenery you’d expect here in Norway. Too bad it was a rainy day…
THANKFULLY Secure Boot was enabled…

ZeDestructoryou have bitlocker enabled (which IMO everyone should)

Why should i enable bitlocker?

So i am locked out of the operating system?

even refurbished lenovo notebooks came with half activated secure boot. which is very bad. Very well hidden. needs special shell commands to see status. needs special shell commands to get rid of it as several microsoft windows 11 pro gui do not show that. I experienced this in spring 2025 with my refurbished lenovo notebook.

Do you expect everyone to have the bitlocker unlock key lying around? this is not a company owned pc with intune.

bitlocker is not worth it for most cases.

ZeDestructorFor the rest of folks: all that SecureBoot does is make sure that the thing that is booting has a valid digital signature

so i should sign any iso image / all my ventoy boot media - several

all my custom kernels which i build at least once per week

NONSENSE.

It is not needed. Pc works withotu TPM and secure boot, except windows 11 pro updates.

--

i bothered with the usual ai

the key is not secure. end of discussion about secure tpm or secure boot.
feel free to ask your ai the same question.

the only way would be libreboot or what they call it. too bad asus and msi does not offer it. tpm and secure boot are the wrong way to go.

_roman_Why should i enable bitlocker?

So i am locked out of the operating system?

even refurbished lenovo notebooks came with half activated secure boot. which is very bad. Very well hidden. needs special shell commands to see status. needs special shell commands to get rid of it as several microsoft windows 11 pro gui do not show that. I experienced this in spring 2025 with my refurbished lenovo notebook.

You specifically don't have to, but the average user, using an average laptop all over the place? Absolutely - theft, losses, improper disposal - all situations where data can be exposed, and which encryption just solves.

_roman_Do you expect everyone to have the bitlocker unlock key lying around? this is not a company owned pc with intune.

bitlocker is not worth it for most cases.

Yes I do. That is the exact reason MS is so pushy about signing in with an MSAccount (as much as most people don't like it). On my and our company's machines, I have the recovery keys backed up to a keepass vault nice and tidy (not like I ever have to use it either, with how robust Windows installs have been since 7).

_roman_so i should sign any iso image / all my ventoy boot media - several

all my custom kernels which i build at least once per week

NONSENSE.

It is not needed. Pc works withotu TPM and secure boot, except windows 11 pro updates.

Ventoy itself is SecureBoot-signed already (from the very cursory look I had). That leaves your own kernels for which tooling exists to automate that. If you are competent enough to need and compile your own kernels at least once a week, you should be able to setup a script that signs your stuff.

_roman_--

i bothered with the usual ai

the key is not secure. end of discussion about secure tpm or secure boot.
feel free to ask your ai the same question.

the only way would be libreboot or what they call it. too bad asus and msi does not offer it. tpm and secure boot are the wrong way to go.

Libreboot doing some kind of verified boot chain would look pretty much identical to how UEFI does secureboot, just like how Apple secureboot looks roughly the same, or how Android Verified Boot looks the same, or <insert arbitrary MCU bootloader here> does it - fundamentally it's all "check if binary is signed, proceed if valid" and you chain along until the OS is loaded, just with different keys/certiicates and executable binary formats. There just has not been any real push in the libreboot/coreboot projects for it so far.

TPM, sure - it has it faults, but it's still quite a bit more secure than no TPM for the average user, considering that pretty much any viable attack for hardware TPMs involved fairly invasive physical attacks, while fTPMs require breaking ME/PSP... which mostly also requires invasive physical access.

FR3D1In this case it seems to be Gigabyte.

Gruß Fred.

Well, then it is up to them to fix the issue if there is one. Microsoft does not certify their hardware after all.
But considering the "details" in that thread I very much doubt user's tale.

lexluthermiesterOther than It's needless, useless and a waste of time?


That's impressive. It also has nothing to do with my complaints. Additionally, there are much better ways to implement data and system security. SecureBoot and TPM have weaknesses that can not be fixed because of the very way they work. Couple that with the fact they are a needless hassle and it shouldn't be too difficult to understand why they're ultimately useless.

The complaints there seems to stem either from some manufacturer screwing up or user issues. For example the "systems were slower because of Secure Boot" - like what??

Everything has weaknesses. As far as I am concerned if someone get's my BitLocker encrypted disk out of computer and into his pocket he is very unlikely to ever get the data.
Hassle? It works by default.