What does Windows error code 4427 (ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED the Secure Boot Supplemental Policy file was not authorized on this machine.

Previous	Next
ERROR_SECUREBOOT_FILE_REPLACED	ERROR_SECUREBOOT_POLICY_UNKNOWN

ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED

ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED (LRESULT 0x0000114B) This Win32 error means a supplemental Secure Boot policy was not authorized on this device.

What to check for ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED

Verify that the supplemental policy was signed, deployed for this device, and authorized by the applicable base policy.
Confirm that the base and supplemental policies belong to the same approved deployment set.
Do not load a policy copied from a different device group or platform as a substitute for authorization.

Read-only checks

Get-SecureBootPolicy | Format-List

Get-SecureBootUEFI -Name DB | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Get-SecureBootPolicy

Microsoft: Get-SecureBootUEFI

Microsoft: Set-SecureBootUEFI

Looking for a different code? Search another status or error code.