STATUS_SECUREBOOT_INVALID_POLICY: meaning and diagnosis

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

Windows rejected the supplied Secure Boot policy as invalid.

Previous	Next
STATUS_SECUREBOOT_POLICY_VIOLATION	STATUS_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND

STATUS_SECUREBOOT_INVALID_POLICY

STATUS_SECUREBOOT_INVALID_POLICY (NTSTATUS 0xC0430003) This NTSTATUS value reports that the Secure Boot policy supplied to an NT component is invalid.

What to check

Verify policy provenance, signature, role, and version.
Confirm the package targets this device and policy lineage.
Use Code Integrity events to find the validation step that rejected it.

Read-only checks

Get-SecureBootPolicy | Format-List

Get-WinEvent -LogName 'Microsoft-Windows-CodeIntegrity/Operational' -MaxEvents 50

An invalid-policy result means validation failed before the policy could be used normally. Compare the package with the original signed artifact and check its signer, format, policy type, and deployment source.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.