| Previous | Next |
| ERROR_PNP_RESTART_ENUMERATION | ERROR_PNP_REBOOT_REQUIRED |
ERROR_SYSTEM_IMAGE_BAD_SIGNATURE
What ERROR_SYSTEM_IMAGE_BAD_SIGNATURE means
The file may be unsigned, altered after signing, signed with an untrusted or revoked certificate, or evaluated under a policy that requires a different signing level. For protected system and driver paths, Windows blocks loading rather than trusting the file contents.
Where it commonly appears
- Driver and boot-component loading
- Protected service startup
- Code Integrity and application-control enforcement
- Servicing or update operations
Likely causes
- The binary was modified or corrupted after signing
- The signature chain is untrusted, expired under applicable rules, or revoked
- The file is signed for the wrong policy or platform
- System catalog data is missing or inconsistent
- A security policy was tightened after the binary was deployed
Troubleshooting checklist
- Record the full file path, hash, signer, catalog, and verification policy
- Use Windows signature-verification tools and inspect Code Integrity logs
- Compare the file with the vendor or servicing source
- Check system time and certificate-chain availability
- Do not disable integrity enforcement before collecting evidence
Guidance for developers
Sign the exact release artifact in the supported pipeline and verify it after packaging. Avoid any post-signing modification. Report signature diagnostics separately from generic load failure.
Guidance for administrators
Replace the file from a trusted source, repair system files when applicable, and update obsolete drivers. Disabling signature enforcement is unsafe as a permanent workaround.
Example
An installer signs a driver and later injects configuration data into the binary. The changed hash no longer matches the signature, so Windows rejects the image. Moving customization before signing resolves the problem.
Related conditions
ERROR_INVALID_IMAGE_HASH is closely related. ERROR_BAD_EXE_FORMAT concerns binary format or architecture and can occur even when a signature is valid.
References
Looking for a different code? Search another status or error code.