What does Windows error code 4428 (ERROR_SECUREBOOT_POLICY_UNKNOWN) mean?

 
Previous Next
ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED ERROR_SECUREBOOT_POLICY_MISSING_ANTIROLLBACKVERSION

ERROR_SECUREBOOT_POLICY_UNKNOWN

ERROR_SECUREBOOT_POLICY_UNKNOWN (LRESULT 0x0000114C) This Win32 error means the device does not recognize the supplemental Secure Boot policy.

What to check

  • Check the policy identity, publisher, version, and target platform against the active base policy.
  • Verify that the intended base policy is present before attempting to add the supplemental policy.
  • Collect Code Integrity events that identify the policy load or validation failure.

Read-only checks

Get-SecureBootPolicy | Format-List
Get-WinEvent -LogName 'Microsoft-Windows-CodeIntegrity/Operational' -MaxEvents 50

Check Code Integrity events for the policy identifier and validation stage that failed. A supplement can be unknown because its base policy, publisher, version, or target platform does not match the device state.

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Microsoft: Set-SecureBootUEFI

Looking for a different code? Search another status or error code.