What does NTSTATUS 0xC043000C (STATUS_SECUREBOOT_POLICY_ROLLBACK_DETECTED) mean?

 
Previous Next
STATUS_SECUREBOOT_PLATFORM_ID_MISMATCH STATUS_SECUREBOOT_POLICY_UPGRADE_MISMATCH

STATUS_SECUREBOOT_POLICY_ROLLBACK_DETECTED

STATUS_SECUREBOOT_POLICY_ROLLBACK_DETECTED (NTSTATUS 0xC043000C) This NTSTATUS value reports that the policy anti-rollback version is older than the one accepted by the device.

What to check for STATUS_SECUREBOOT_POLICY_ROLLBACK_DETECTED

  • Stop the downgrade attempt.
  • Check package selection, cache, and deployment versioning.
  • Use the newest authorized policy for this device.

Read-only checks for STATUS_SECUREBOOT_POLICY_ROLLBACK_DETECTED

Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For STATUS_SECUREBOOT_POLICY_ROLLBACK_DETECTED, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events


Looking for a different code? Search another status or error code.