| Previous | Next |
| ERROR_IPSEC_IKE_LOAD_FAILED | ERROR_IPSEC_IKE_BENIGN_REINIT |
ERROR_IPSEC_IKE_RPC_DELETE
The SA or negotiation was removed through a management path
This status records deletion initiated through an RPC control call. It is therefore materially different from lifetime expiry, peer silence, replay failure, or a delete payload received from the remote endpoint. The local management plane requested removal of the IKE state.
Windows exposes management APIs and NetSecurity commands for active security associations. When this code appears unexpectedly, identify the administrative process, script, service, or policy-refresh operation active at the same time. Repeatedly troubleshooting the remote peer will not explain a locally requested deletion.
What to inspect
- Correlate the timestamp with automation, VPN software, policy deployment, or security-management agents.
- Check whether Main Mode and associated Quick Mode SAs were removed together.
- If deletion is unexpected, preserve process and audit telemetry before recreating the SA.
Get-NetIPsecMainModeSA
Get-NetIPsecQuickModeSAReferences
- Microsoft: Get-NetIPsecMainModeSA
- Microsoft: Get-NetIPsecQuickModeSA
- Microsoft: Windows Filtering Platform API sets
Looking for a different code? Search another status or error code.