What does Windows error code 4434 (ERROR_SECUREBOOT_NOT_BASE_POLICY) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: ERROR_SECUREBOOT_NOT_BASE_POLICY supplemental Secure Boot policy file can not be loaded as a base Secure Boot policy.

Previous	Next
ERROR_SECUREBOOT_REQUIRED_POLICY_FILE_MISSING	ERROR_SECUREBOOT_NOT_SUPPLEMENTAL_POLICY

ERROR_SECUREBOOT_NOT_BASE_POLICY

ERROR_SECUREBOOT_NOT_BASE_POLICY (LRESULT 0x00001152) This Win32 error means a supplemental Secure Boot policy was supplied where a base policy is required.

What to check for ERROR_SECUREBOOT_NOT_BASE_POLICY

Check the policy role in the deployment package before retrying.
Ensure the base policy is loaded first and any supplemental policies are deployed through the supported relationship to that base policy.
Do not rename or reclassify the file to force it into the base-policy slot.

Read-only checks

Get-SecureBootPolicy | Format-List

Secure Boot policy and UEFI-variable changes can affect whether a device boots. For ERROR_SECUREBOOT_NOT_BASE_POLICY, capture the current state first and use only the approved signed policy or OEM workflow for changes.

Microsoft: Get-SecureBootPolicy

Microsoft: Set-SecureBootUEFI

Microsoft: Secure Boot

Looking for a different code? Search another status or error code.