What does Windows error code 4573 (ERROR_PLATFORM_MANIFEST_CATALOG_NOT_AUTHORIZED) mean?

ERROR_PLATFORM_MANIFEST_CATALOG_NOT_AUTHORIZED

The catalog is not authorized on this platform because an entry was not found in the Platform Manifest.

ERROR_PLATFORM_MANIFEST_CATALOG_NOT_AUTHORIZED is Win32 error 4573 (0x11DD) and belongs to Platform Manifest authorization.

Likely causes

• the catalog containing a file or package is not listed as authorized by the Platform Manifest.
• the active platform identity disagrees with catalog name, hash, signer, package, and manifest catalog entries.
• the provisioning pipeline did not install an authorized catalog or provision a correctly signed manifest update.

Troubleshooting steps

• Record catalog name, hash, signer, package, and manifest catalog entries.
• Record device identity and the active Platform Manifest generation.

What to verify

Verify whether the catalog containing a file or package is not listed as authorized by the Platform Manifest. Check catalog name, hash, signer, package, and manifest catalog entries, the device identity, and the active Platform Manifest generation.

Handling, retry, and recovery

Install an authorized catalog or provision a correctly signed manifest update. Preserve the artifact and authorization evidence before changing provisioning state.

Practical example

A servicing package includes a new catalog not present in the device manifest, so catalog authorization fails.

Developer and administrator guidance

Preserve the catalog hash, signer, package family, and manifest catalog entry. A valid signature alone does not place the catalog on this platform allow-list. Use the approved catalog or a trusted manifest update instead of changing individual file entries.

References

• Microsoft: System Error Codes (4000–5999) — reference for error 4573.
• Microsoft: How System Guard protects Windows — reference for error 4573.
• Microsoft: Windows security hardware — reference for error 4573.