ERROR_SECUREBOOT_POLICY_ROLLBACK_DETECTED: meaning and diagnosis

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The Secure Boot policy has an anti-rollback version older than the version already accepted by this device.

Previous	Next
ERROR_SECUREBOOT_PLATFORM_ID_MISMATCH	ERROR_SECUREBOOT_POLICY_UPGRADE_MISMATCH

ERROR_SECUREBOOT_POLICY_ROLLBACK_DETECTED

ERROR_SECUREBOOT_POLICY_ROLLBACK_DETECTED (LRESULT 0x0000114F) This Win32 error means the policy file has an anti-rollback version older than the version accepted by this device.

What to check

Stop the downgrade attempt and locate the newest authorized policy release for the device.
Verify that deployment tooling did not select an obsolete package from a cache, image, or share.
Compare the active policy version with the package version before retrying.

Read-only checks

Get-SecureBootPolicy | Format-List

The device is deliberately refusing a downgrade. Determine the anti-rollback version of the active policy and deploy an authorized package with an equal or newer accepted version.

Microsoft: Get-SecureBootPolicy

Microsoft: Secure Boot

Microsoft: Set-SecureBootUEFI

Looking for a different code? Search another status or error code.