| Previous | Next |
| ERROR_IPSEC_IKE_UNSUPPORTED_ID | ERROR_IPSEC_IKE_INVALID_HASH_ALG |
ERROR_IPSEC_IKE_INVALID_HASH
ERROR_IPSEC_IKE_INVALID_HASH (0x0000362E) A cryptographic hash in the IKE exchange did not validate. This can indicate incompatible negotiated state, a wrong pre-shared secret or authentication context, packet corruption, or an implementation mismatch at the peer.
A bad hash is evidence about authenticated negotiation state, not just algorithm availability. Preserve the preceding exchange so you can distinguish wrong shared authentication material, inconsistent state, and an altered or malformed packet.
What to check
- Confirm that both peers use the same authentication method and compatible integrity algorithms.
- Check for stale IKE state after policy changes, rekeying, or gateway failover.
- Use traces and Main Mode audit events to identify the first authentication or proposal mismatch.
Get-NetIPsecMainModeSAMicrosoft: Get-NetIPsecMainModeSA
Looking for a different code? Search another status or error code.