ERROR_IPSEC_IKE_QM_ACQUIRE_DROP: meaning and diagnosis

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: A Quick Mode acquisition request stayed queued too long and was dropped.

Previous	Next
ERROR_IPSEC_IKE_MM_ACQUIRE_DROP	ERROR_IPSEC_IKE_QUEUE_DROP_MM

ERROR_IPSEC_IKE_QM_ACQUIRE_DROP

ERROR_IPSEC_IKE_QM_ACQUIRE_DROP means the request to create the traffic-protection SA waited too long after the authenticated channel phase. This points to a delayed or overloaded Quick Mode negotiation, not necessarily a credential problem.

Because Main Mode may already be established, inspect the traffic selectors and Quick Mode proposal that should create the child SA. Repeating authentication diagnostics alone can miss the actual traffic-protection mismatch.

What to check

Check whether Main Mode succeeds but Quick Mode never establishes an SA.
Compare traffic selectors, IPsec transform sets and lifetimes on both peers.
Look for many concurrent traffic-triggered negotiations or repeated Quick Mode retries.

Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSA

Microsoft: Get-NetIPsecQuickModeSA

Microsoft: Audit IPsec Quick Mode

Microsoft: IPsec IKE system error codes

Looking for a different code? Search another status or error code.