Spoofer TPM Perm setup
Working Advanced setup
A HWID spoofer with no menu: it changes hardware IDs, and the serials before and after show the result.
Requirements
0 of 2 items
Tick what matches your PC:
- Windows 10 or 11 (x64)
- Back up your data — spoofing changes hardware IDs
System requirements
- Operating system Windows 7, 8, 10 or 11, x32 and x64 All builds except 26H2
- Processor Intel or AMD
- Graphics card Any
- Game mode Any
- Launchers Any
- Built-in spoofer Yes
You will also need Not included in the purchase — have it ready before you pay
- USB flash drive, 8 GB+ For preparing the system
Preparation
Turn off Windows protection — that's enough for most systems.
0 of 14 steps
Remove third-party antivirus and anti-cheats Kaspersky, Avast, ESET and the like, plus FaceIT and Riot Vanguard, conflict with the loader. They must be uninstalled, not just paused.
- Open Settings → Apps → Installed apps (or Control Panel → Programs and Features).
- Uninstall any third-party antivirus (Kaspersky, Avast, AVG, ESET, 360, Malwarebytes, etc.). Pausing or disabling is not enough — the antivirus driver stays resident.
- Uninstall the FaceIT AC and Riot Vanguard anti-cheats if present — they block third-party software at the kernel level.
- FaceIT is the CS2 anti-cheat, Vanguard is the Valorant one. If you don't play those games, they are safe to remove.
After removing an antivirus, restart the PC — some of its services only unload after a reboot.
Fully disable Windows Defender The #1 cause of “it won't launch”. Disable it for real: manually first, then remove it from startup, reboot, and finish it off with Defender Control.
- Step 1. Turn protection off by hand. Open Windows Security → Virus & threat protection → Manage settings and switch every toggle off:
- Real-time protection — Off.
- Cloud-delivered protection — Off.
- Automatic sample submission — Off.
- Tamper Protection — Off. Turn this one off first, otherwise the others switch themselves back on.
- Step 2. Disable reputation-based protection. In Windows Security → App & browser control → Reputation-based protection → Settings, turn everything off (SmartScreen, potentially-unwanted-app blocking).
- Step 3. Remove Defender from startup. Open Task Manager (Ctrl+Shift+Esc) → Startup apps tab, find Windows Security notification icon and click Disable.
- Step 4. Restart your computer. This is mandatory — some Defender services only unload after a reboot.
- Step 5. Finish with Defender Control. Download Defender Control (archive password: r1xon), run it as administrator and click Disable Windows Defender — the tile turns red.
- If your antivirus deletes the utility itself, protection is still active — go back to step 1. The file ships zipped on purpose so Defender can't wipe it before it's disabled.
Don't skip steps 3–4. “I turned the toggles off but it didn't help” almost always means Defender came back after restart because it was left in startup.
- Download Windows 11 from the official Microsoft website through Media Creation Tool.
- Create an ISO file and prepare a bootable USB drive through Rufus.
- If you use Wi-Fi, save network drivers to the USB drive. You can check the motherboard model with
Win + R->msinfo32. - Install Windows cleanly if your game or ban type requires it.
- Install chipset/network drivers before TPM spoofing.
- Do not sign into old banned accounts before completing the spoof.
- Keep the USB drive ready for the TPM ISO step.
- Download Ventoy and extract the archive.
- Connect the USB drive and run
Ventoy2Disk.exeas administrator. - In Device, choose the correct USB drive and click Install.
- After Ventoy is installed, copy the required ISO to the USB root: UBGG AMD or UBGG Intel.
- Safely eject the USB drive and reboot the PC.
Launch
0 of 9 steps
- Reboot the PC and boot from the Ventoy USB drive.
- On the Ventoy screen, select the TPM Spoofer ISO and press
Enter. - On the next screen select Boot in normal mode.
- Select Compatibility mode when the ISO asks for boot mode.
- Wait for the setup screen to load.
- If you see Retry / Scan again, disconnect the internet cable or Wi-Fi, connect it back and choose Yes.
- Enter your license key exactly as received.
- Wait for TPM Setup Successful.
- Shut down the PC, remove the USB drive and boot back into Windows.
Problems & fixes
6Ventoy does not show the ISO
Make sure the ISO was fully downloaded and copied directly to the Ventoy USB root. If the file is damaged, download the image again for your CPU.
Stuck on Retry / Scan again
Disconnect Ethernet or Wi-Fi, connect it again and choose Yes. This step is needed to continue to the next stage.
Key is not accepted
Copy the key without spaces, check keyboard layout and make sure the key is for TPM Perm.
Valorant still blocks login
Check whether a HWID spoofer, clean Windows or a new account is also required. TPM Perm solves the TPM part only.
The PC boots back into Windows instead of Ventoy
Open the BIOS boot menu and select the USB drive manually. Disable Fast Boot if the USB drive is not shown.
More launch tips
- TPM spoofing is applied permanently. Follow the steps carefully and do not interrupt the process.
- Prepare a USB drive of at least 8 GB. Ventoy installation will format it.
- Choose the ISO strictly for your CPU: AMD or Intel.
- If your game requires a clean system, reinstall Windows first.
- For Valorant and other TPM bans, use a new account after successful spoofing.
- TPM changes remain after reboot, Windows reinstall and BIOS/UEFI flashing.
- You do not need to keep the spoofer running in the background.
- Do not use the old banned account to test the result.
- If a game also requires HWID spoofing, complete that part separately before logging in.
Advanced setup — only if it still won’t launch
Disable Secure Boot Secure Boot stops the loader from starting. Check the status first, then disable it in BIOS if needed.
- Check the status: press
Win + R, typemsinfo32, and in System Summary find Secure Boot State. If it reads Off or Unsupported — you're set, skip the rest. - If it's On — enter BIOS/UEFI (tap
Del,F2orF10while the PC boots — depends on the motherboard). - Find Boot or Security → Secure Boot and set it to Disabled. Save (usually
F10) and reboot.- If Secure Boot is greyed out, set a Supervisor Password under Security first — that unlocks the option. You can remove the password afterwards.
Enable virtualization (VT-x / SVM) The loader needs hardware CPU virtualization. Enabled in BIOS.
- Enter BIOS/UEFI and open Advanced → CPU Configuration (naming varies by board).
- Enable Intel Virtualization Technology (VT-x) on Intel, or SVM Mode on AMD. Save and reboot.
Disable Hyper-V and Windows virtualization Windows' own virtualization features grab the hypervisor and get in the loader's way. Disabled separately from VT-x.
- Open Control Panel → Programs → Turn Windows features on or off and uncheck Hyper-V, Virtual Machine Platform and Windows Hypervisor Platform.
- Open Command Prompt as administrator, run the command, then reboot:
bcdedit /set hypervisorlaunchtype off - Also turn off Memory Integrity and Application Guard if enabled (see “Disable Core Isolation”).
Disable Core Isolation Memory Integrity blocks the driver from loading. Takes a minute to switch off.
- Open Windows Security → Device security → Core isolation details.
- Turn off Memory Integrity and restart the PC.
Disk in GPT layout If the loader says “Unsupported firmware”, the system disk is MBR and needs converting to GPT.
- Check the layout: Win+R → diskmgmt.msc, right-click the system disk → Properties → Volumes → Partition style. It should read GUID (GPT).
- If it's MBR, convert without data loss: admin Command Prompt, run mbr2gpt /convert /allowfullOS. After converting, switch the BIOS boot mode to UEFI.
Back up anything important before converting. It usually goes smoothly, but a disk is a disk.
Disable Intel RST (Rapid Storage) On some laptops Intel RST mode gets in the loader's way. Switched to AHCI in BIOS.
- In BIOS find SATA Mode / Storage Configuration and switch from Intel RST / RAID to AHCI. Save and reboot.
If Windows won't boot after switching to AHCI, boot into Safe Mode once — Windows picks up the AHCI driver, then reboot normally.
Use a VPN for download and activation CIS ISPs often block the activation servers. A VPN is needed while downloading the loader, activating the key and injecting — you can turn it off before joining a match.
- Use a full VPN — an app that routes all traffic, not a browser proxy or extension: half the support tickets come from exactly this. In Happ and similar clients turn on TUN mode.
- Turn the VPN on before downloading the loader and activating the key. If something won't load, switch country (Europe or the US usually work).
- After a successful inject you can turn the VPN off before the match to avoid extra ping.
A VPN fixes most endless-loading and “key won't activate” problems.
Update Visual C++ and DirectX Up-to-date runtimes keep the loader and overlay from crashing at start.
- Install Visual C++ Redistributable x64 and restart the PC.
- Update DirectX if you haven't in a while.
FAQ
1Where do I get the key after payment?
The key arrives instantly after payment — it appears on the order page and lands in your email, and if Telegram is linked to your account, our bot sends a copy too. This guide opens from there as well.
Still stuck?
Run R1XON Checker first — it pinpoints most launch problems in 30 seconds. If it still fails, attach the checker report to your support ticket and we’ll sort it out fast.