What does NTSTATUS 0xC0430002 (STATUS_SECUREBOOT_POLICY_VIOLATION) mean?

 
Previous Next
STATUS_SECUREBOOT_ROLLBACK_DETECTED STATUS_SECUREBOOT_INVALID_POLICY

STATUS_SECUREBOOT_POLICY_VIOLATION

STATUS_SECUREBOOT_POLICY_VIOLATION (NTSTATUS 0xC0430002) This NTSTATUS value reports that an NT component attempted to alter a value protected by Secure Boot policy.

What to check

  • Identify the caller and protected resource from the first Code Integrity event.
  • Verify whether the change is authorized by the active policy.
  • Use the signed, supported policy-update process instead of attempting direct modification.

Read-only checks

Get-SecureBootPolicy | Format-List
Get-SecureBootUEFI -Name PK | Format-List

Treat this as an enforcement decision by the active policy, not as a file-permission failure. Identify the protected object and the policy rule that owns it before choosing a supported policy update.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.