What does NTSTATUS 0xC0430009 (STATUS_SECUREBOOT_POLICY_UNKNOWN) mean?

 
Previous Next
STATUS_SECUREBOOT_POLICY_NOT_AUTHORIZED STATUS_SECUREBOOT_POLICY_MISSING_ANTIROLLBACKVERSION

STATUS_SECUREBOOT_POLICY_UNKNOWN

STATUS_SECUREBOOT_POLICY_UNKNOWN (NTSTATUS 0xC0430009) This NTSTATUS value reports that the device cannot recognize the supplied supplemental policy.

What to check for STATUS_SECUREBOOT_POLICY_UNKNOWN

  • Check the policy publisher, version, and target platform.
  • Confirm the correct base policy is active.
  • Review Code Integrity operational events for the policy validation failure.

Read-only checks for STATUS_SECUREBOOT_POLICY_UNKNOWN

Get-SecureBootPolicy | Format-List
Get-WinEvent -LogName 'Microsoft-Windows-CodeIntegrity/Operational' -MaxEvents 50

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For STATUS_SECUREBOOT_POLICY_UNKNOWN, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events


Looking for a different code? Search another status or error code.