| Previous | Next |
| ERROR_IPSEC_IKE_INVALID_GROUP | ERROR_IPSEC_IKE_DECRYPT |
ERROR_IPSEC_IKE_ENCRYPT
ERROR_IPSEC_IKE_ENCRYPT (0x0000362A) IKE could not encrypt a payload during negotiation. The root cause may be a crypto-provider failure, a proposal mismatch discovered late in processing, or local resource/service problems.
Determine whether Windows had already selected a valid proposal before encryption failed. That sequence helps separate local provider or service failure from a peer-policy mismatch that was discovered only after proposal processing.
What to check
- Check IKEEXT and cryptographic-service events for earlier errors on the local machine.
- Verify that both peers support the negotiated encryption algorithm and that policy did not change during the exchange.
- Capture the failing negotiation before modifying algorithm policy so that the selected proposal is known.
Get-Service IKEEXTMicrosoft: Netsh network tracing
Looking for a different code? Search another status or error code.