Windows error 4432 (ERROR_SECUREBOOT_POLICY_UPGRADE

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: ERROR_SECUREBOOT_POLICY_UPGRADE_MISMATCH the Secure Boot policy file does not match the upgraded legacy policy.

Previous	Next
ERROR_SECUREBOOT_POLICY_ROLLBACK_DETECTED	ERROR_SECUREBOOT_REQUIRED_POLICY_FILE_MISSING

ERROR_SECUREBOOT_POLICY_UPGRADE_MISMATCH

ERROR_SECUREBOOT_POLICY_UPGRADE_MISMATCH (LRESULT 0x00001150) This Win32 error means the new policy does not match the legacy policy state that it is supposed to upgrade.

What to check for ERROR_SECUREBOOT_POLICY_UPGRADE_MISMATCH

Confirm that the update package is from the same policy lineage as the legacy policy installed on the device.
Check whether a previous policy migration only partially completed.
Use the policy owner’s documented upgrade path rather than substituting a base or supplemental policy from another release stream.

Read-only checks

Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For ERROR_SECUREBOOT_POLICY_UPGRADE_MISMATCH, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Get-SecureBootPolicy

Microsoft: Set-SecureBootUEFI

Microsoft: Secure Boot

Looking for a different code? Search another status or error code.