What does Windows error code 4425 (ERROR_SECUREBOOT_NOT_ENABLED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: ERROR_SECUREBOOT_NOT_ENABLED: secure Boot is not enabled on this machine.

Previous	Next
ERROR_SECUREBOOT_POLICY_NOT_SIGNED	ERROR_SECUREBOOT_FILE_REPLACED

ERROR_SECUREBOOT_NOT_ENABLED

ERROR_SECUREBOOT_NOT_ENABLED (LRESULT 0x00001149) This Win32 error means Secure Boot is not enabled on the local machine.

What to check for ERROR_SECUREBOOT_NOT_ENABLED

Confirm that the machine is booted in UEFI mode and supports Secure Boot before changing firmware settings.
Check the Secure Boot status from an elevated PowerShell session.
If an organization requires Secure Boot, follow its approved firmware and key-management process rather than enabling or resetting keys blindly.

Read-only checks

Confirm-SecureBootUEFI

Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For ERROR_SECUREBOOT_NOT_ENABLED, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Confirm-SecureBootUEFI

Microsoft: Get-SecureBootPolicy

Microsoft: Secure Boot

Looking for a different code? Search another status or error code.