Windows error 13010 (ERROR_IPSEC_MM_AUTH

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The requested Main Mode authentication set already exists.

Previous	Next
ERROR_IPSEC_TRANSPORT_FILTER_NOT_FOUND	ERROR_IPSEC_MM_AUTH_NOT_FOUND

ERROR_IPSEC_MM_AUTH_EXISTS

ERROR_IPSEC_MM_AUTH_EXISTS (0x000032D2) A legacy Main Mode authentication list already exists with the requested identity. It is generally a deployment or policy-store conflict rather than a certificate validation failure.

Enumerate the existing Main Mode authentication objects and compare identity, authentication method, and policy source with the requested object. Make deployment update or reuse the intended entry instead of creating a duplicate across local and domain policy.

What to check

Determine whether the existing authentication set uses certificates, Kerberos, or another configured method before replacing it.
Check for duplicate local and domain policy objects that target the same connection security rule.
Update the managed policy source instead of adding a second authentication list with overlapping scope.

Get-NetIPsecMainModeRule

Microsoft: Get-NetIPsecMainModeRule

Microsoft: IKE authentication method types

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.