ERROR_SECUREBOOT_POLICY_VIOLATION: meaning and diagnosis

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: A requested modification or deletion is blocked because the target value is protected by the active Secure Boot policy.

Previous	Next
ERROR_SECUREBOOT_ROLLBACK_DETECTED	ERROR_SECUREBOOT_INVALID_POLICY

ERROR_SECUREBOOT_POLICY_VIOLATION

ERROR_SECUREBOOT_POLICY_VIOLATION (LRESULT 0x00001145) This Win32 error means an attempt was made to change or delete data protected by Secure Boot policy.

What to check

Do not modify the protected value through the registry, a file replacement, or an unapproved firmware-variable update.
Determine which policy is active and whether the intended change is authorized by that policy.
Use the supported signed policy deployment workflow; first collect the policy version and UEFI variable state.

Read-only checks

Get-SecureBootPolicy | Format-List

Get-SecureBootUEFI -Name PK | Format-List

Treat this as an enforcement decision by the active policy, not as a file-permission failure. Identify the protected object and the policy rule that owns it before choosing a supported policy update.

Microsoft: Get-SecureBootPolicy

Microsoft: Get-SecureBootUEFI

Microsoft: Set-SecureBootUEFI

Looking for a different code? Search another status or error code.