What does Windows error code 13820 (ERROR_IPSEC_IKE_NO_PRIVATE_KEY) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The certificate chosen for IKE did not have an accessible private key.

Previous	Next
ERROR_IPSEC_IKE_INVALID_CERT_TYPE	ERROR_IPSEC_IKE_SIMULTANEOUS_REKEY

ERROR_IPSEC_IKE_NO_PRIVATE_KEY

ERROR_IPSEC_IKE_NO_PRIVATE_KEY means Windows found a certificate but cannot use it to authenticate because its private key is missing or inaccessible. A certificate imported without its private key will produce this type of failure.

What to check

Check that the certificate shows an associated private key in the Local Computer store.
Verify private-key permissions for the system context and any hardware-key provider used by the certificate.
Reenroll or reimport the complete certificate and private key from the approved source if the association is missing.

Microsoft: IKE/AuthIP authentication methods

Microsoft: IPsec IKE system error codes

Microsoft: Audit IPsec Main Mode

Looking for a different code? Search another status or error code.