Windows error 4420 (ERROR_SECUREBOOT_ROLLBACK

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: ERROR_SECUREBOOT_ROLLBACK_DETECTED secure Boot detected that rollback of protected data has been attempted.

Previous	Next
ERROR_APP_DATA_REBOOT_REQUIRED	ERROR_SECUREBOOT_POLICY_VIOLATION

ERROR_SECUREBOOT_ROLLBACK_DETECTED

ERROR_SECUREBOOT_ROLLBACK_DETECTED (LRESULT 0x00001144) This Win32 error means Secure Boot detected an attempt to roll protected data back to an older state.

What to check for ERROR_SECUREBOOT_ROLLBACK_DETECTED

Stop the deployment or firmware-policy update that produced the error; do not retry by forcing an older file.
Identify the policy, database update, or boot component being deployed and verify its version and signer against the device baseline.
Review the Secure Boot policy and the Code Integrity operational log for the first related failure.

Read-only checks for ERROR_SECUREBOOT_ROLLBACK_DETECTED

Get-SecureBootPolicy | Format-List

Get-WinEvent -LogName 'Microsoft-Windows-CodeIntegrity/Operational' -MaxEvents 50

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For ERROR_SECUREBOOT_ROLLBACK_DETECTED, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Microsoft: Secure Boot

Looking for a different code? Search another status or error code.