What does Windows error code 4431 (ERROR_SECUREBOOT_POLICY_ROLLBACK_DETECTED) mean?

 
Previous Next
ERROR_SECUREBOOT_PLATFORM_ID_MISMATCH ERROR_SECUREBOOT_POLICY_UPGRADE_MISMATCH

ERROR_SECUREBOOT_POLICY_ROLLBACK_DETECTED

ERROR_SECUREBOOT_POLICY_ROLLBACK_DETECTED (LRESULT 0x0000114F) This Win32 error means the policy file has an anti-rollback version older than the version accepted by this device.

What to check for ERROR_SECUREBOOT_POLICY_ROLLBACK_DETECTED

  • Stop the downgrade attempt and locate the newest authorized policy release for the device.
  • Verify that deployment tooling did not select an obsolete package from a cache, image, or share.
  • Compare the active policy version with the package version before retrying.

Read-only checks

Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For ERROR_SECUREBOOT_POLICY_ROLLBACK_DETECTED, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Get-SecureBootPolicy

Microsoft: Secure Boot

Microsoft: Set-SecureBootUEFI

Looking for a different code? Search another status or error code.