What does Windows error code 13841 (ERROR_IPSEC_IKE_PROCESS_ERR_DELETE) mean?

ERROR_IPSEC_IKE_PROCESS_ERR_DELETE

ERROR_IPSEC_IKE_PROCESS_ERR_DELETE means a peer sent a delete payload that Windows could not process. Delete messages are used during SA teardown and rekeying, so this can appear during a tunnel transition rather than initial setup.

Check whether the affected SA was otherwise healthy before the delete arrived. A malformed teardown message after successful traffic points to peer lifecycle handling, while earlier negotiation failures may make the delete error secondary.

What to check

• Check whether the failure occurs during rekey, disconnect, or policy refresh rather than initial negotiation.
• Compare SA lifetimes and rekey behavior on both peers.
• Capture the delete message to determine which SA identifiers the peer attempted to remove.

Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSA

Microsoft: Get-NetIPsecMainModeSA

Microsoft: Get-NetIPsecQuickModeSA

Microsoft: Use Netsh to manage network traces