STATUS_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND: meaning and diagnosis

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

The new Secure Boot policy does not include the current policy publisher in the publishers allowed to perform the update.

Previous	Next
STATUS_SECUREBOOT_INVALID_POLICY	STATUS_SECUREBOOT_POLICY_NOT_SIGNED

STATUS_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND

STATUS_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND (NTSTATUS 0xC0430004) This NTSTATUS value reports that the new policy lacks the publisher required to update the active policy.

What to check

Verify the publisher and version expected by the active policy.
Ensure deployment did not select a policy for another release lineage.
Obtain the correct signed update from the policy owner.

Read-only checks

Get-SecureBootPolicy | Format-List

This usually indicates that the update package belongs to a different policy lineage. Identify the publisher of the active policy and compare it with the publishers permitted by the new package before attempting another deployment.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.