What does Windows error code 4425 (ERROR_SECUREBOOT_NOT_ENABLED) mean?

 
Previous Next
ERROR_SECUREBOOT_POLICY_NOT_SIGNED ERROR_SECUREBOOT_FILE_REPLACED

ERROR_SECUREBOOT_NOT_ENABLED

ERROR_SECUREBOOT_NOT_ENABLED (LRESULT 0x00001149) This Win32 error means Secure Boot is not enabled on the local machine.

What to check for ERROR_SECUREBOOT_NOT_ENABLED

  • Confirm that the machine is booted in UEFI mode and supports Secure Boot before changing firmware settings.
  • Check the Secure Boot status from an elevated PowerShell session.
  • If an organization requires Secure Boot, follow its approved firmware and key-management process rather than enabling or resetting keys blindly.

Read-only checks

Confirm-SecureBootUEFI
Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For ERROR_SECUREBOOT_NOT_ENABLED, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Secure Boot

Looking for a different code? Search another status or error code.