NTSTATUS 0xC043000F (STATUS_SECUREBOOT_NOT_BASE

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

STATUS_SECUREBOOT_NOT_BASE_POLICY supplemental Secure Boot policy file can not be loaded as a base Secure Boot policy.

Previous	Next
STATUS_SECUREBOOT_REQUIRED_POLICY_FILE_MISSING	STATUS_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY

STATUS_SECUREBOOT_NOT_BASE_POLICY

STATUS_SECUREBOOT_NOT_BASE_POLICY (NTSTATUS 0xC043000F) This NTSTATUS value reports that a supplemental policy was passed where a base policy is required.

What to check for STATUS_SECUREBOOT_NOT_BASE_POLICY

Verify the policy role expected by the API or deployment step.
Keep the base policy and supplemental policy deployment paths separate.
Use the correct signed package rather than repurposing the policy file.

Read-only checks for STATUS_SECUREBOOT_NOT_BASE_POLICY

Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For STATUS_SECUREBOOT_NOT_BASE_POLICY, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.