Rust TPM 2.0 and Secure Boot: Understanding the 2026 Requirements
Learn about Rust's TPM 2.0 and Secure Boot requirements, how to check Windows settings and what the phased secure-server rollout means.
Rust's security requirements have been changing.
In 2026, Facepunch began a phased rollout of TPM and Secure Boot requirements in cooperation with Easy Anti-Cheat and Epic Online Services.
This is important for players who encounter security-related connection problems.
It also means that a PC capable of running Rust well may still need a firmware setting enabled for certain servers.
What Is TPM 2.0?
TPM stands for Trusted Platform Module.
It is a security component that supports hardware-based security operations.
Many modern systems provide TPM functionality through firmware.
AMD computers may use AMD fTPM, while Intel systems may use Intel PTT.
What Is Secure Boot?
Secure Boot is a UEFI firmware security feature.
It helps establish that trusted software is loaded during system startup.
A computer can support Secure Boot without having it enabled.
Rust's Phased Rollout
Facepunch's September 2026 support guidance explains that the first phase began in March 2026 on selected servers.
These servers display a special secure tag in the browser.
Facepunch also describes a later phase in which the requirements will apply globally.
The timeline should be checked against the developer's newest announcements rather than assumed to have already completed.
How to Check TPM in Windows
Press Windows + R.
Enter:
`tpm.msc`
Check whether Windows reports a compatible and ready TPM.
How to Check Secure Boot
Press Windows + R.
Enter:
`msinfo32`
Look for BIOS Mode and Secure Boot State.
If Secure Boot State is Off, check your motherboard manufacturer's documentation before changing firmware settings.
Important BIOS Warning
Switching from Legacy or CSM boot mode to UEFI without preparing Windows correctly can prevent the computer from booting.
Do not change these settings blindly.
Back up important data and consult the correct motherboard instructions.
Is This an HWID Ban?
No.
A missing TPM or disabled Secure Boot is a security-configuration problem.
An HWID spoofer does not provide the missing firmware security feature.
Final Thoughts
Rust's TPM 2.0 and Secure Boot rollout is an important technical development for PC players.
Check your current system configuration and Facepunch's latest guidance before attempting changes.
Official resource: https://support.facepunchstudios.com/hc/en-us/articles/34396134943389-How-to-Turn-On-TPM-Secure-Boot
Related: Start Service Failed and Untrusted System File.