| Previous | Next |
| ERROR_IPSEC_IKE_NO_CERT | ERROR_IPSEC_IKE_SA_REAPED |
ERROR_IPSEC_IKE_SA_DELETED
ERROR_IPSEC_IKE_SA_DELETED means the remote peer sent or triggered deletion of the IKE security association before negotiation finished. The local error is usually a consequence of a rejection, policy replacement, peer restart, or competing negotiation on the other side.
What to check
- Inspect the remote peer logs at the same timestamp; that side often records the specific reason for deleting the SA.
- Check for policy refreshes, service restarts, peer failover, or a concurrent tunnel establishment attempt.
- Compare Main Mode security associations before and after reproducing the issue.
Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSA
Microsoft: Get-NetIPsecMainModeSA
Microsoft: Audit IPsec Main Mode
Microsoft: IPsec IKE system error codes
Looking for a different code? Search another status or error code.