How to Fix Highguard “Machine Integrity Failed” Error (0xE0670402)

The “Machine Integrity Failed. ERROR: 0xE0670402 Secure Boot disabled” in Highguard is a security error. The game’s anti-cheat system requires Secure Boot and often a TPM (Trusted Platform Module) to be active in your PC’s UEFI/BIOS settings. Here is a systematic guide to resolve it.

🛠️ Troubleshooting Roadmap

Follow these steps in order. Start with the simple checks before entering BIOS settings.

🔧 Detailed Step-by-Step Instructions

Step 1: Initial Verification (From Windows)

Before modifying BIOS, do a quick check in Windows.

1. Verify Game Files:

   • In your game launcher (Steam/Epic), find Highguard, verify its file integrity. This ensures no game files are corrupt.

Step 2: Enter UEFI/BIOS Firmware Settings

You must access your motherboard’s settings.

1. Click the Windows Start menu, select Settings (gear icon).

2. Go to System > Recovery.

3. Under Advanced startup, click Restart now.

4. After restart, select Troubleshoot > Advanced options > UEFI Firmware Settings > Restart. Your PC will reboot into BIOS/UEFI.

Step 3: Configure BIOS/UEFI Settings

Navigating BIOS menus varies by manufacturer (ASUS, MSI, Gigabyte, etc.). Look for similarly named sections.
⚠️ Caution: Changing settings here can affect system bootability. Note your original settings.

1. Enable TPM/PTT (Pre-requisite):

   • Find a Settings, Advanced, or Security tab.

   • Look for AMD CPU fTPM, Intel Platform Trust Technology (PTT), or Security Device. Set it to Enabled.

2. Disable CSM (Compatibility Support Module):

   • Find the Boot options.

   • Locate CSM or Compatibility Support Module. Set it to Disabled. This is often required for Secure Boot to activate.

3. Enable and Configure Secure Boot:

   • In the Boot or Security section, find Secure Boot.

   • Set Secure Boot to Enabled.

   • Set Secure Boot Mode to “Standard” (some systems may use “Custom” initially).

   • If options are grayed out or you encounter issues, proceed to Step 4.

Step 4: Restore Factory Default Keys (If Needed)

If Secure Boot was never set up or is corrupted, restore its default keys.

1. With Secure Boot Mode set to “Custom”, an option like “Restore Factory Keys” or “Install Default Secure Boot Keys” should appear.

2. Select it and confirm Yes.

3. This resets the Secure Boot database to the manufacturer’s trusted state. After this, you can usually switch the mode back to “Standard”.

4. Save and Exit:

   • Press F10 or find the Save & Exit tab.

   • Select “Save Changes and Reset”. Your PC will reboot.

Step 5: Final Check

1. After Windows loads, launch Highguard. The error should be resolved.

2. If the error persists, ensure all steps were saved correctly in the BIOS and that your Windows installation supports UEFI (it does if you followed these steps).

❓ Frequently Asked Questions (FAQ)

• Why does Highguard require Secure Boot?
  Modern competitive games use advanced anti-cheat software (like Easy Anti-Cheat, BattlEye) that require Secure Boot and TPM as part of their security standards to prevent cheating at the kernel level.

• Will enabling Secure Boot and TPM affect my PC’s performance or other games?
  No. These are security features that run in the background. They will not impact FPS, performance, or compatibility with other software. They are required for an increasing number of games and are part of modern Windows 11 standards.

• What if I can’t find these options in my BIOS?
  Your motherboard might use different terminology or have limited support. Consult your motherboard’s manual or manufacturer’s website. Some older systems (pre-2014) may not fully support these features.

• I get a “boot device not found” error after disabling CSM. What do I do?
  This means your Windows was installed in Legacy BIOS mode, not UEFI mode. You must re-enable CSM to boot, then look up a guide to convert your Windows installation from Legacy to UEFI mode without data loss before trying these steps again.

✅ Summary

To permanently fix Highguard Error 0xE0670402:

1. Enable fTPM/PTT and Disable CSM in your BIOS/UEFI.

2. Enable Secure Boot and set it to Standard mode.

3. If necessary, use “Restore Factory Keys” to reset Secure Boot.

4. Save all changes and restart.

This process aligns your PC with the security requirements of Highguard’s anti-cheat system. If issues continue, contact Highguard’s official support and specify you have already enabled Secure Boot and TPM.