What does Windows error code 4425 (ERROR_SECUREBOOT_NOT_ENABLED) mean?

 
Previous Next
ERROR_SECUREBOOT_POLICY_NOT_SIGNED ERROR_SECUREBOOT_FILE_REPLACED

ERROR_SECUREBOOT_NOT_ENABLED

ERROR_SECUREBOOT_NOT_ENABLED (LRESULT 0x00001149) This Win32 error means Secure Boot is not enabled on the local machine.

What to check

  • Confirm that the machine is booted in UEFI mode and supports Secure Boot before changing firmware settings.
  • Check the Secure Boot status from an elevated PowerShell session.
  • If an organization requires Secure Boot, follow its approved firmware and key-management process rather than enabling or resetting keys blindly.

Read-only checks

Confirm-SecureBootUEFI
Get-SecureBootPolicy | Format-List

This status describes the machine’s boot configuration rather than a malformed policy file. Confirm UEFI boot mode and firmware support first; only then decide whether Secure Boot should be enabled under the device’s management policy.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Secure Boot

Looking for a different code? Search another status or error code.