Persian Gulf PGCS
فا

Guide · Oct 20, 2026 · 4 minutes

Turning on Windows' security locks for mix

Did the launcher say you need to switch something on for mix? Step by step, with pictures: what each one is, how to tell it's on, and where to turn it on.

For the mix servers the launcher wants three things switched on in your Windows: Secure Boot, memory integrity and DMA protection. This guide says what each one is, how to tell whether it's on, and where to turn it on. On the other servers (public, AWP and fun) they're only recommended, not required.

None of it touches the game or your Steam account. They're settings of Windows itself and your motherboard, and you can switch them off again whenever you like. The anti-cheat only asks whether they're on; it doesn't see or send anything beyond that.

1. First, see which ones are on

Press Win and R together, type msinfo32 and press Enter. On the first page (System Summary) find these four lines:

  • BIOS Mode should say UEFI. If it says Legacy, read step 3 too.
  • Secure Boot State should say On.
  • Kernel DMA Protection: if it says On, DMA protection is on.
  • Virtualization-based security Services Running: if it shows Hypervisor enforced Code Integrity, memory integrity is on.
The msinfo32 window with the four lines to look at
The four lines to look at in msinfo32 (a schematic picture)

The launcher has the last word: its home page has an "Anti-cheat" card that says exactly what's still missing. It looks again every 15 seconds, so you don't need to reinstall anything after a change.

2. Memory integrity

This is the easy one: it's in Windows itself and has nothing to do with the BIOS.

  1. Open the Start menu, type Windows Security and open it.
  2. Click Device security, then Core isolation details.
  3. Turn Memory integrity on and restart.
The Core isolation page in Windows Security with Memory integrity on
Turning Memory integrity on (a schematic picture)

If it won't turn on and says a driver is incompatible, click Review incompatible drivers. It lists them; usually it's an old driver of some hardware or program. Update or remove that program or device and try again. On most systems you won't notice any difference in FPS.

3. Secure Boot

This one is in the motherboard's BIOS. Restart and press Del (most desktops) or F2 to enter it.

  1. If msinfo32 said BIOS Mode: Legacy, Windows first has to boot in UEFI. Windows has an official tool that converts the disk without reinstalling (mbr2gpt). Back up your important files first, and ask support if you're not sure.
  2. Set CSM (or Launch CSM) to Disabled. While it's on, Secure Boot is usually greyed out.
  3. Set Secure Boot to Enabled.
  4. If it still won't turn on, choose Install default Secure Boot keys (or Restore factory keys).
  5. Press F10 to save and exit.
A BIOS Boot page with CSM off and Secure Boot on
Secure Boot in the BIOS (a schematic picture; your BIOS looks different)

Where the option sits depends on the board's brand. These are the usual places (menu names can differ a little between BIOS versions):

  • ASUS: Advanced mode (F7) → Boot → Secure Boot → OS Type: Windows UEFI mode.
  • MSI: Settings → Security → Secure Boot → Enabled.
  • Gigabyte: Boot → Secure Boot → Enabled (if it's greyed out, set CSM Support to Disabled first).
  • ASRock: Security → Secure Boot → Enabled.
  • Laptops: usually under Security or Boot. Search for your model name + "enable Secure Boot".

4. DMA protection (VT-d or IOMMU)

This stops devices that try to plug straight into your system's memory. Its name in the BIOS depends on your processor:

  • Intel: set VT-d to Enabled. It's usually under Advanced, Chipset or System Agent Configuration.
  • AMD: set IOMMU (sometimes AMD-Vi) to Enabled. It's usually under Advanced → AMD CBS → NBIO Common Options.
  • If you see Pre-boot DMA Protection or Kernel DMA Protection, turn that on too.
The VT-d option for Intel and IOMMU for AMD in the BIOS
VT-d and IOMMU in the BIOS (a schematic picture; your BIOS looks different)

If you can't find it, look around the BIOS or search for your motherboard name + "VT-d" (or "IOMMU"). Some older systems and cheap boards don't have it at all. In that case you just can't play mix; the other servers are fine.

5. Try again

After the restart, open the launcher. Within a few seconds the anti-cheat card either disappears (all good) or shows only what's still missing. If you're still stuck:

  • Make sure you saved with F10 after changing the BIOS and really restarted.
  • If Secure Boot is greyed out, set CSM to Disabled and come back.
  • If you can't find an option in the BIOS at all, send a photo of the BIOS screen and your motherboard's name in a support ticket.

Want to know exactly what the anti-cheat checks and what it never sends? It's written on the anti-cheat page.

Did this guide help?