NTSTATUS 0xC022003C (STATUS_FWP_DUPLICATE_AUTH

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

The same authentication method appears more than once in a policy.

Previous	Next
STATUS_FWP_INVALID_TRANSFORM_COMBINATION	STATUS_FWP_INVALID_TUNNEL_ENDPOINT

STATUS_FWP_DUPLICATE_AUTH_METHOD

The IPsec policy contains duplicate authentication methods

These status values come from the Windows Filtering Platform path. For STATUS_FWP_DUPLICATE_AUTH_METHOD, wFP classifies traffic through layers, filters, provider contexts, sublayers, and callouts; IPsec policy is also configured through WFP at IKE/AuthIP-related layers.

WFP rejects redundant authentication-method lists. The same method repeated inside one policy is a configuration error and should be removed rather than retried.

For STATUS_FWP_DUPLICATE_AUTH_METHOD, when this appears during IPsec or AuthIP negotiation, compare the Main Mode, Quick Mode, Extended Mode, transform, tunnel endpoint, DNS name, and authentication-method policy actually installed in WFP.

What to inspect

Deduplicate machine, user, certificate, Kerberos, or preshared-key methods.
Check policy merge code that appends methods repeatedly.
Compare generated policy before and after Group Policy refresh.

References for STATUS_FWP_DUPLICATE_AUTH_METHOD

Looking for a different code? Search another status or error code.