What does NTSTATUS 0xC0220040 (STATUS_FWP_KEY_DICTATION_INVALID_KEYING_MATERIAL) mean?

 
Previous Next
STATUS_FWP_KEY_DICTATOR_ALREADY_REGISTERED STATUS_FWP_CONNECTIONS_DISABLED

STATUS_FWP_KEY_DICTATION_INVALID_KEYING_MATERIAL

The dictated IPsec keying material is invalid

This status is about externally supplied keying material, not peer negotiation. WFP rejected the keys dictated by the key manager because they do not satisfy the expected format or policy.

For this key-dictation failure, compare the supplied keying material with the negotiated SA and the key-dictator contract. Capture the transform and key source that produced the rejected material.

What to inspect

  • Validate key length, SPI, algorithm, and lifetime fields.
  • Check that keying material matches the negotiated transform set.
  • Do not continue using a security association created from rejected keys.

References for STATUS_FWP_KEY_DICTATION_INVALID_KEYING_MATERIAL


Looking for a different code? Search another status or error code.