| Previous | Next |
| ERROR_IPSEC_IKE_LOAD_SOFT_SA | ERROR_IPSEC_IKE_INVALID_COOKIE |
ERROR_IPSEC_IKE_SOFT_SA_TORN_DOWN
Temporary negotiation state was discarded
This status records teardown of a soft security association used by the IKE path. Because the object is temporary negotiation state, removal does not automatically mean that an established IPsec SA failed. It can follow cancellation, policy change, reinitialization, a failed exchange, or transition to different negotiated state.
The key diagnostic question is what happened to the associated Main Mode and Quick Mode SAs. If protected traffic continued through an established Quick Mode SA, the soft-SA teardown can be benign lifecycle cleanup. If no established SA appears and the same peer immediately retries, inspect the preceding negotiation status and authentication or proposal events.
What to inspect
- Match the teardown timestamp to the peer and active SA inventory.
- Look for policy reload, IKEEXT shutdown, or explicit SA deletion around the same time.
- Treat repeated soft-SA churn as a symptom and find the first specific negotiation failure in the sequence.
Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSAReferences
- Microsoft: Windows Filtering Platform API sets
- Microsoft: Get-NetIPsecMainModeSA
- Microsoft: Get-NetIPsecQuickModeSA
Looking for a different code? Search another status or error code.