What does NTSTATUS 0xC043000D (STATUS_SECUREBOOT_POLICY_UPGRADE_MISMATCH) mean?

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

STATUS_SECUREBOOT_POLICY_UPGRADE_MISMATCH the Secure Boot policy file does not match the upgraded legacy policy.

Previous	Next
STATUS_SECUREBOOT_POLICY_ROLLBACK_DETECTED	STATUS_SECUREBOOT_REQUIRED_POLICY_FILE_MISSING

STATUS_SECUREBOOT_POLICY_UPGRADE_MISMATCH

STATUS_SECUREBOOT_POLICY_UPGRADE_MISMATCH (NTSTATUS 0xC043000D) This NTSTATUS value reports that the policy does not match the legacy policy configuration it is intended to upgrade.

What to check for STATUS_SECUREBOOT_POLICY_UPGRADE_MISMATCH

Verify the policy lineage and migration path.
Check for a partially completed earlier policy update.
Use the documented upgrade package for the current baseline.

Read-only checks

Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. Capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Viewing Code Integrity events

Looking for a different code? Search another status or error code.