What does NTSTATUS 0xC0430002 (STATUS_SECUREBOOT_POLICY_VIOLATION) mean?

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

STATUS_SECUREBOOT_POLICY_VIOLATION the value is protected by Secure Boot policy and cannot be modified or deleted.

Previous	Next
STATUS_SECUREBOOT_ROLLBACK_DETECTED	STATUS_SECUREBOOT_INVALID_POLICY

STATUS_SECUREBOOT_POLICY_VIOLATION

STATUS_SECUREBOOT_POLICY_VIOLATION (NTSTATUS 0xC0430002) This NTSTATUS value reports that an NT component attempted to alter a value protected by Secure Boot policy.

What to check for STATUS_SECUREBOOT_POLICY_VIOLATION

Identify the caller and protected resource from the first Code Integrity event.
Verify whether the change is authorized by the active policy.
Use the signed, supported policy-update process instead of attempting direct modification.

Read-only checks

Get-SecureBootPolicy | Format-List

Get-SecureBootUEFI -Name PK | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. Capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.