What does Windows error code 4435 (ERROR_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY) mean?

ERROR_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY

ERROR_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY (LRESULT 0x00001153) This Win32 error means a base Secure Boot policy was supplied where a supplemental policy is required.

What to check for ERROR_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY

• Verify the role of the policy package and the deployment target that received it.
• Confirm that the intended base policy is already active before adding supplemental content.
• Use the policy owner’s approved package instead of converting or reusing a base policy as supplemental content.

Read-only checks

Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For ERROR_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Get-SecureBootPolicy

Microsoft: Set-SecureBootUEFI

Microsoft: Secure Boot

Looking for a different code? Search another status or error code.