Knowledge

ERROR_SECUREBOOT_ROLLBACK_DETECTED - 4420 (0x1144)

Secure Boot detected that rollback of protected data has been attempted.

Updated: Feb 21, 2026

Technical Background

Secure Boot is a feature in UEFI firmware that ensures the operating system boots only from trusted sources. This error code, ERROR_SECUREBOOT_ROLLBACK_DETECTED (4420 or 0x1144), indicates that Secure Boot has detected an attempt to roll back protected data.

Error Details

Secure Boot monitors the integrity of critical firmware components and operating system files. If it detects any changes that could indicate a rollback, such as modifications to secure boot keys or other protected data, this error is generated.

Common Causes

  • Invalid parameter values: Incorrect parameters passed during Secure Boot initialization can trigger this error.
  • Incorrect object type: Attempting operations on objects of the wrong type may lead to this error.
  • Exceeding limits: Operations that exceed system-defined limits could result in this error.

    Real-World Context

    This error typically occurs during boot-up or firmware update processes. It is a critical safety mechanism designed to prevent unauthorized modifications to the system's secure boot configuration.

    Is This Error Critical?

    Yes, this error indicates potential security vulnerabilities and should be addressed promptly.

    How to Diagnose

    1. Review operation context: Ensure that Secure Boot operations are performed in an appropriate environment.
    2. Validate parameters: Verify all parameters used during Secure Boot initialization are correct.
    3. Confirm object types: Ensure that the objects being manipulated are of the expected type.
    4. Verify input data: Check for any corrupted or invalid data that could trigger this error.
    5. Check limits or constraints: Confirm that operations do not exceed system-defined limits.

      How to Resolve

    6. Correct parameter usage: Ensure all parameters are correctly set and validated before Secure Boot operations.
    7. Adjust operation context: Perform Secure Boot operations in a secure environment.
    8. Restore data: If corrupted data is detected, restore the correct state of protected files or keys.
    9. Retry operation with valid inputs: Attempt to perform the operation again using valid and verified parameters.

      Developer Notes

      Secure Boot operations should be handled carefully to avoid triggering this error. Developers should ensure that all Secure Boot-related operations are performed in a controlled environment and with validated parameters.

      Related Errors

  • ERROR_SECUREBOOT_DISABLED (4419)
  • ERROR_SECUREBOOT_NOT_ENABLED (4421)

    FAQ

    Q: What does the ERROR_SECUREBOOT_ROLLBACK_DETECTED error indicate?

    A: This error indicates that Secure Boot has detected an attempted rollback of protected data.

    Q: How can I prevent this error from occurring?

    A: Ensure all Secure Boot operations are performed in a secure environment and with validated parameters to avoid triggering this error.

    Q: Is this error critical for system security?

    A: Yes, it indicates potential security vulnerabilities that should be addressed promptly.

    Summary

    ERROR_SECUREBOOT_ROLLBACK_DETECTED is a specific error code indicating an attempted rollback of protected data by Secure Boot. It is crucial to address this error to maintain system integrity and prevent unauthorized modifications.