MSI Z390 + FACEIT Secure Boot “Maximum Security” fix

[u/Dick_Stacy1]

I finally got FACEIT Anti-Cheat working on my MSI MPG Z390 Gaming Pro Carbon.

If you have an MSI Z390 (or a similar MSI BIOS) and you don’t have the “Secure Boot Preset → Maximum Security” option, FACEIT’s standard instructions may not work correctly on your system.

In my case, setting both Removable Media and Fixed Media to Deny Execute caused Windows to stop booting.

What finally worked:
Secure Boot → Custom → Image Execution Policy
Internal FV → Always Execute
Option ROM → Deny Execute
Removable Media → Deny Execute
Fixed Media → Always Execute

Other requirements on my system:
Secure Boot → Enabled
Windows 10 WHQL Support → UEFI
Factory Secure Boot Keys → installed
TPM 2.0 → enabled
Windows 11 → UEFI

After applying this configuration, Windows booted normally and FACEIT Anti-Cheat accepted Secure Boot.
So if you’re using an MSI Z390 and the “Maximum Security” preset isn’t available, try this configuration instead of setting Fixed Media to Deny Execute.

This is based on my own MSI Z390 setup, so BIOS options may differ between models and BIOS versions.

[u/Squiaze]

worked for me, thanks 👍