NTSTATUS 0xC0220044 (STATUS_FWP_IKEEXT_NOT

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

IKEEXT is not running for the requested IPsec operation.

Previous	Next
STATUS_FWP_STILL_ON	STATUS_FWP_TCPIP_NOT_READY

STATUS_FWP_IKEEXT_NOT_RUNNING

The IKE/AuthIP service is not running when IPsec policy needs it

These status values come from the Windows Filtering Platform path. For STATUS_FWP_IKEEXT_NOT_RUNNING, wFP classifies traffic through layers, filters, provider contexts, sublayers, and callouts; IPsec policy is also configured through WFP at IKE/AuthIP-related layers.

IKEEXT performs IKE and AuthIP negotiation when IPsec policy is active. This status means the service required for key negotiation is not available for the requested policy path.

For STATUS_FWP_IKEEXT_NOT_RUNNING, when this appears during IPsec or AuthIP negotiation, compare the Main Mode, Quick Mode, Extended Mode, transform, tunnel endpoint, DNS name, and authentication-method policy actually installed in WFP.

What to inspect

Check whether the IKE and AuthIP IPsec Keying Modules service is running.
Confirm IPsec policy is actually applied before expecting IKEEXT activity.
Look for service-start failures or disabled service policy.

References for STATUS_FWP_IKEEXT_NOT_RUNNING

Looking for a different code? Search another status or error code.