STATUS_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY: meaning and diagnosis

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

A base Secure Boot policy was supplied where Windows requires a supplemental policy.

Previous	Next
STATUS_SECUREBOOT_NOT_BASE_POLICY	STATUS_AUDIO_ENGINE_NODE_NOT_FOUND

STATUS_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY

STATUS_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY (NTSTATUS 0xC0430010) This NTSTATUS value reports that a base policy was passed where a supplemental policy is required.

What to check

Verify the policy role and the deployment target.
Confirm that the intended base policy is already active.
Deploy only a proper supplemental policy through the supported workflow.

Read-only checks

Get-SecureBootPolicy | Format-List

This is the inverse policy-role mismatch: Windows expected a supplement linked to the active base policy. Use the intended supplemental package rather than repackaging or renaming the base-policy file.

Confirm that the operation truly expects a supplemental policy and that the artifact was produced as one. A valid signed base policy is still the wrong input for an API requiring supplemental policy semantics.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.