| Previous | Next |
| ERROR_IPSEC_QM_POLICY_PENDING_DELETION | WARNING_IPSEC_QM_POLICY_PRUNED |
WARNING_IPSEC_MM_POLICY_PRUNED
The Main Mode policy was successfully added, but some of the requested offers are not supported.
WARNING_IPSEC_MM_POLICY_PRUNED is Windows status 13024 (0x000032E0) associated with addition of an IPsec Main Mode policy with unsupported offers removed. The system meaning is “The Main Mode policy was successfully added, but some of the requested offers are not supported.”
Likely impact: The add operation can succeed with a weaker or narrower effective policy than requested, so compliance validation is required.
Typical causes
- one or more encryption, integrity, DH, or authentication offers are unsupported.
- policy was copied from another Windows release.
- provider capability differs across hosts.
- the caller interprets a warning as total failure.
Troubleshooting steps
- Verify that at least one supported Main Mode offer remains and the caller evaluates the effective policy rather than assuming every requested offer was installed.
- Collect requested Main Mode offers and effective installed offers.
- Correlate OS build and cryptographic providers with IKEEXT operational events, Windows Filtering Platform events, IPsec security audits, policy export, peer configuration, and packet capture.
Useful evidence
- Collect policy export before and after.
- Collect IKEEXT events during a test negotiation.
Recovery and retry
Review the pruned offers, confirm the remaining set meets security requirements, and replace unsupported proposals explicitly rather than retrying unchanged.
Related errors
WARNING_IPSEC_QM_POLICY_PRUNED applies to Quick Mode data protection; this warning concerns Main Mode peer authentication and key establishment
Example
A policy contains a deprecated Main Mode offer and a current one. Windows installs the current offer and warns that the deprecated proposal was pruned.
References
Looking for a different code? Search another status or error code.