A system and method for boot failure recovery in a digital computer as a result of an attempt to load a procedure in which a flag is associated with the procedure following a loading attempt which results in failure. The flag is read on a further attempt to load the same procedure to initiate an orderly exit thereby avoiding the potential for entry into an endless loop.