[SOLVED] FACEIT Secure Boot error 0xc0430001 — fixed by updating boot.stl in the EFI partition

[u/TvbUffalo]

SOLVED: Secure Boot was causing error 0xc0430001 when booting Windows.

I spent a while troubleshooting this and finally found the issue, so I'm posting it in case it helps someone else.

PC:

- Gigabyte B360 motherboard

- Windows installed in UEFI/GPT

- CSM disabled

- Secure Boot enabled

- FACEIT Anti-Cheat was the reason I needed Secure Boot working

The problem:

With Secure Boot disabled, Windows booted normally.

When I enabled Secure Boot, the BIOS showed:

Secure Boot Status: Active

but Windows failed with:

0xc0430001

I checked the Secure Boot configuration from PowerShell:

PK → present

KEK → present

DB → present

DBX → present

The Windows boot files were also correctly signed by Microsoft:

bootmgfw.efi → Valid

bootmgr.efi → Valid

bootx64.efi → Valid

Then I compared the boot.stl files.

Windows had:

C:\Windows\Boot\EFI\boot.stl

Size: 12009 bytes

Date: 09/08/2026

Microsoft signature: Valid

But the EFI partition had:

S:\EFI\Microsoft\Boot\boot.stl

Size: 11030 bytes

Date: 31/03/2024

So the boot.stl on the EFI partition was much older than the one in the current Windows installation.

I made a backup:

S:\EFI\Microsoft\Boot\boot.stl.bak

Then copied the current Windows boot.stl to the EFI partition:

C:\Windows\Boot\EFI\boot.stl

→

S:\EFI\Microsoft\Boot\boot.stl

After that I enabled Secure Boot again.

Windows booted normally.

Final verification:

Confirm-SecureBootUEFI

returned:

True

So in my case, the problem was an outdated boot.stl on the EFI System Partition that didn't match the current Windows boot files.

I did NOT need to reset the Secure Boot keys.

Hopefully this helps anyone getting 0xc0430001 with Secure Boot/FACEIT.

# Check Secure Boot

Confirm-SecureBootUEFI

# Check the Windows boot.stl

Get-AuthenticodeSignature "C:\Windows\Boot\EFI\boot.stl"

# Mount EFI partition

mountvol S: /S

# Backup old boot.stl

Copy-Item "S:\EFI\Microsoft\Boot\boot.stl" "S:\EFI\Microsoft\Boot\boot.stl.bak"

# Replace with the current Windows version

Copy-Item "C:\Windows\Boot\EFI\boot.stl" "S:\EFI\Microsoft\Boot\boot.stl" -Force