What does NTSTATUS 0xC043000A (STATUS_SECUREBOOT_POLICY_MISSING_ANTIROLLBACKVERSION) mean?

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

the Secure Boot policy lacks required anti-rollback metadata.

Previous	Next
STATUS_SECUREBOOT_POLICY_UNKNOWN	STATUS_SECUREBOOT_PLATFORM_ID_MISMATCH

STATUS_SECUREBOOT_POLICY_MISSING_ANTIROLLBACKVERSION

STATUS_SECUREBOOT_POLICY_MISSING_ANTIROLLBACKVERSION (NTSTATUS 0xC043000A) This NTSTATUS value reports that the policy does not include the anti-rollback version required by the device.

What to check

Obtain a corrected policy release from the publisher.
Verify version sequencing in the policy deployment process.
Do not attempt to load an older policy as a workaround.

Read-only checks

Get-SecureBootPolicy | Format-List

The problem is in the policy package itself rather than the current UEFI setting. Replace the package with a correctly generated, signed release that contains the required anti-rollback metadata.

The missing field is part of policy version enforcement. Obtain or build a policy containing the required anti-rollback metadata instead of modifying the deployed binary outside the supported policy-generation process.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.