| Previous | Next |
| SEC_E_ENCRYPT_FAILURE | SEC_E_SECURITY_QOS_FAILED |
SEC_E_ALGORITHM_MISMATCH
SEC_E_ALGORITHM_MISMATCH means that the two sides have no common cryptographic algorithm permitted by their effective policies. It is a negotiation compatibility problem, not a certificate-name error.
What can create the mismatch
- Disjoint TLS versions or cipher-suite policies.
- A legacy peer that offers only algorithms disabled by the local security policy.
- Hardware, provider or operating-system limitations that remove an algorithm expected by the other side.
How to diagnose
Record the client and server TLS versions, cipher-suite policy, and Schannel event information around the failure. Restore an explicitly approved overlap; do not re-enable obsolete algorithms only to make a single connection work.
Microsoft: TLS and Schannel Overview · SSPI Status Codes
Looking for a different code? Search another status or error code.