ERROR_IPSEC_IKE_INVALID_HASH_ALG: meaning and diagnosis

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The IKE peer proposed an invalid or unsupported hash algorithm.

Previous	Next
ERROR_IPSEC_IKE_INVALID_HASH	ERROR_IPSEC_IKE_INVALID_HASH_SIZE

ERROR_IPSEC_IKE_INVALID_HASH_ALG

ERROR_IPSEC_IKE_INVALID_HASH_ALG (0x0000362F) The integrity/hash algorithm offered by the peer is not acceptable under the active Windows IPsec policy. This is a proposal-compatibility issue and should be resolved by aligning supported cryptographic suites.

Identify the exact integrity algorithm sent by the peer and the policy source that rejected it. This is more useful than broad firewall testing because packet delivery can be normal while proposal negotiation still fails.

What to check

Compare integrity algorithms on both sides of the IKE policy.
Check whether a security baseline removed legacy algorithms still required by an old peer.
Avoid weakening the Windows policy unless there is a deliberate, risk-reviewed compatibility requirement.

Get-NetIPsecMainModeRule

Microsoft: Get-NetIPsecMainModeRule

Microsoft: Audit IPsec Main Mode

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.