What does Windows error code 4427 (ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The supplemental Secure Boot policy is valid enough to be recognized, but this device is not authorized to load it.

Previous	Next
ERROR_SECUREBOOT_FILE_REPLACED	ERROR_SECUREBOOT_POLICY_UNKNOWN

ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED

ERROR_SECUREBOOT_POLICY_NOT_AUTHORIZED (LRESULT 0x0000114B) This Win32 error means a supplemental Secure Boot policy was not authorized on this device.

What to check

Verify that the supplemental policy was signed, deployed for this device, and authorized by the applicable base policy.
Confirm that the base and supplemental policies belong to the same approved deployment set.
Do not load a policy copied from a different device group or platform as a substitute for authorization.

Read-only checks

Get-SecureBootPolicy | Format-List

Get-SecureBootUEFI -Name DB | Format-List

Authorization is evaluated against the policy state already active on the device. Compare the base-policy identity and the supplemental-policy identity, then use Code Integrity events to determine why this particular supplement was rejected.

Microsoft: Get-SecureBootPolicy

Microsoft: Get-SecureBootUEFI

Microsoft: Set-SecureBootUEFI

Looking for a different code? Search another status or error code.