Windows error 4423: meaning and diagnosis

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: ERROR_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND a new Secure Boot policy did not contain the current publisher on its update list.

Previous	Next
ERROR_SECUREBOOT_INVALID_POLICY	ERROR_SECUREBOOT_POLICY_NOT_SIGNED

ERROR_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND

ERROR_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND (LRESULT 0x00001147) This Win32 error means the new Secure Boot policy does not list the publisher required to update the current policy.

What to check for ERROR_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND

Treat this as a policy-lineage problem, not as a generic signature failure.
Confirm that the update package was built for the currently installed policy publisher and version.
Obtain the correct policy update from the policy owner or OEM rather than trying to bypass the publisher check.

Read-only checks

Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For ERROR_SECUREBOOT_POLICY_PUBLISHER_NOT_FOUND, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Get-SecureBootPolicy

Microsoft: Set-SecureBootUEFI

Microsoft: Secure Boot

Looking for a different code? Search another status or error code.