What does NTSTATUS 0xC0430010 (STATUS_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY) mean?

STATUS_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY

STATUS_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY (NTSTATUS 0xC0430010) This NTSTATUS value reports that a base policy was passed where a supplemental policy is required.

What to check for STATUS_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY

• Verify the policy role and the deployment target.
• Confirm that the intended base policy is already active.
• Deploy only a proper supplemental policy through the supported workflow.

Read-only checks for STATUS_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY

Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For STATUS_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.