| Previous | Next |
| ERROR_IPSEC_MM_AUTH_PENDING_DELETION | WARNING_IPSEC_MM_POLICY_PRUNED |
ERROR_IPSEC_QM_POLICY_PENDING_DELETION
The policy object is between usable and absent states
ERROR_IPSEC_QM_POLICY_PENDING_DELETION indicates that deletion of the Quick Mode configuration object has begun but its lifetime has not ended. References from rules, active policy compilation, a transaction, or another management client can delay final removal. The condition is therefore different from both ERROR_IPSEC_QM_POLICY_IN_USE and ERROR_IPSEC_QM_POLICY_NOT_FOUND.
Serialize configuration changes and wait for a fresh policy-store enumeration to show that the object is gone. If replacement is urgent, create a new uniquely named crypto set, repoint dependent rules in one transaction, and remove the old set afterward. Reusing the old identity while deletion is pending risks repeated collisions and partial policy updates.
State distinctions that matter
IN_USE: a stable object still has configuration dependents.PENDING_DELETION: teardown has started but is not complete.NOT_FOUND: the addressed store no longer contains the object.- An active SA can survive briefly without making the deleted policy object writable again.
References
- Microsoft: deleting Quick Mode crypto sets
- Microsoft: transactions and object associations
- Microsoft: policy objects versus negotiated SAs
Looking for a different code? Search another status or error code.