What does NTSTATUS 0xC0430008 (STATUS_SECUREBOOT_POLICY_NOT_AUTHORIZED) mean?

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

STATUS_SECUREBOOT_POLICY_NOT_AUTHORIZED the Secure Boot Supplemental Policy file was not authorized on this machine.

Previous	Next
STATUS_SECUREBOOT_FILE_REPLACED	STATUS_SECUREBOOT_POLICY_UNKNOWN

STATUS_SECUREBOOT_POLICY_NOT_AUTHORIZED

STATUS_SECUREBOOT_POLICY_NOT_AUTHORIZED (NTSTATUS 0xC0430008) This NTSTATUS value reports that the supplemental Secure Boot policy is not authorized on this device.

What to check for STATUS_SECUREBOOT_POLICY_NOT_AUTHORIZED

Verify policy identity and authorization under the active base policy.
Confirm the package belongs to the intended device deployment set.
Collect policy-load events before replacing any policy artifact.

Read-only checks

Get-SecureBootPolicy | Format-List

Get-SecureBootUEFI -Name DB | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. Capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.