What does NTSTATUS 0xC043000D (STATUS_SECUREBOOT_POLICY_UPGRADE_MISMATCH) mean?

 
Previous Next
STATUS_SECUREBOOT_POLICY_ROLLBACK_DETECTED STATUS_SECUREBOOT_REQUIRED_POLICY_FILE_MISSING

STATUS_SECUREBOOT_POLICY_UPGRADE_MISMATCH

STATUS_SECUREBOOT_POLICY_UPGRADE_MISMATCH (NTSTATUS 0xC043000D) This NTSTATUS value reports that the policy does not match the legacy policy configuration it is intended to upgrade.

What to check

  • Verify the policy lineage and migration path.
  • Check for a partially completed earlier policy update.
  • Use the documented upgrade package for the current baseline.

Read-only checks

Get-SecureBootPolicy | Format-List

An upgrade package must continue the lineage of the policy already installed. Confirm the active legacy policy identity and migration state, then use the corresponding upgrade package from the same release stream.

Treat this as a policy-lineage problem. Compare the existing legacy policy with the intended upgrade package and use the documented migration sequence rather than replacing state in an arbitrary order.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.