STATUS_SECUREBOOT_POLICY_UNKNOWN: meaning and diagnosis

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

The device does not recognize the supplemental Secure Boot policy supplied to it.

Previous	Next
STATUS_SECUREBOOT_POLICY_NOT_AUTHORIZED	STATUS_SECUREBOOT_POLICY_MISSING_ANTIROLLBACKVERSION

STATUS_SECUREBOOT_POLICY_UNKNOWN

STATUS_SECUREBOOT_POLICY_UNKNOWN (NTSTATUS 0xC0430009) This NTSTATUS value reports that the device cannot recognize the supplied supplemental policy.

What to check

Check the policy publisher, version, and target platform.
Confirm the correct base policy is active.
Review Code Integrity operational events for the policy validation failure.

Read-only checks

Get-SecureBootPolicy | Format-List

Get-WinEvent -LogName 'Microsoft-Windows-CodeIntegrity/Operational' -MaxEvents 50

Check Code Integrity events for the policy identifier and validation stage that failed. A supplement can be unknown because its base policy, publisher, version, or target platform does not match the device state.

Preserve both the supplied supplemental policy and the active base-policy identity. The pair must be compatible, and diagnosing only the signature or only the device firmware can miss a base/supplemental mismatch.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.