What does Windows error code 13821 (ERROR_IPSEC_IKE_SIMULTANEOUS_REKEY) mean?

 
Previous Next
ERROR_IPSEC_IKE_NO_PRIVATE_KEY ERROR_IPSEC_IKE_DH_FAIL

ERROR_IPSEC_IKE_SIMULTANEOUS_REKEY

ERROR_IPSEC_IKE_SIMULTANEOUS_REKEY means both endpoints initiated rekeying concurrently. This can be transient and may recover automatically, but repeated occurrences can expose incompatible lifetimes, packet loss, or unstable peers.

A single event is less important than whether one new SA becomes active and traffic continues. Repeated collisions at the same lifetime boundary suggest that both peers need their rekey timing and lifetime behavior compared.

What to check

  • Check whether the tunnel recovered and a new SA was established before treating the event as an outage.
  • Compare key lifetimes and rekey policy on both peers.
  • If it repeats, capture the rekey exchange and check for delayed or lost delete/notify messages.
Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSA

Microsoft: Get-NetIPsecMainModeSA

Microsoft: Get-NetIPsecQuickModeSA

Microsoft: IPsec IKE system error codes


Looking for a different code? Search another status or error code.