What does NTSTATUS 0xC0430008 (STATUS_SECUREBOOT_POLICY_NOT_AUTHORIZED) mean?

 
Previous Next
STATUS_SECUREBOOT_FILE_REPLACED STATUS_SECUREBOOT_POLICY_UNKNOWN

STATUS_SECUREBOOT_POLICY_NOT_AUTHORIZED

STATUS_SECUREBOOT_POLICY_NOT_AUTHORIZED (NTSTATUS 0xC0430008) This NTSTATUS value reports that the supplemental Secure Boot policy is not authorized on this device.

What to check

  • Verify policy identity and authorization under the active base policy.
  • Confirm the package belongs to the intended device deployment set.
  • Collect policy-load events before replacing any policy artifact.

Read-only checks

Get-SecureBootPolicy | Format-List
Get-SecureBootUEFI -Name DB | Format-List

Authorization is evaluated against the policy state already active on the device. Compare the base-policy identity and the supplemental-policy identity, then use Code Integrity events to determine why this particular supplement was rejected.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events


Looking for a different code? Search another status or error code.