What does Windows error code 4422 (ERROR_SECUREBOOT_INVALID_POLICY) mean?

 
Previous Next
ERROR_SECUREBOOT_POLICY_VIOLATION ERROR_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND

ERROR_SECUREBOOT_INVALID_POLICY

ERROR_SECUREBOOT_INVALID_POLICY (LRESULT 0x00001146) This Win32 error means the Secure Boot policy presented to the system is invalid.

What to check

  • Verify that the policy came from the correct management or OEM source and was not truncated, altered, or copied from another device family.
  • Check the policy signer, policy type, and version before attempting another deployment.
  • Compare the active policy information with the expected release documentation; do not hand-edit a signed policy file.

Read-only checks

Get-SecureBootPolicy | Format-List
Get-WinEvent -LogName 'Microsoft-Windows-CodeIntegrity/Operational' -MaxEvents 50

An invalid-policy result means validation failed before the policy could be used normally. Compare the package with the original signed artifact and check its signer, format, policy type, and deployment source.

Microsoft: Get-SecureBootPolicy

Microsoft: Code Integrity event log messages

Microsoft: Secure Boot

Looking for a different code? Search another status or error code.