| Previous | Next |
| FWP_E_DUPLICATE_CONDITION | FWP_E_ACTION_INCOMPATIBLE_WITH_LAYER |
FWP_E_DUPLICATE_KEYMOD
FWP_E_DUPLICATE_KEYMOD means an IPsec policy repeats the same keying module. A policy must describe each selected key-management mechanism only once.
What to check for FWP_E_DUPLICATE_KEYMOD
- Deduplicate policy entries after merging local, domain, or application-generated configuration.
- Use stable identifiers for keying modules rather than comparing display names.
- Review the final serialized policy sent to WFP, not only the higher-level source configuration.
Microsoft: capture IPsec events with netsh wfp
Diagnostic interpretation
This result has the HRESULT value 0x8032002B. AllStat records the condition as “A policy cannot contain the same keying module more than once.”.
Evidence to capture
- Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the fwp / duplicate / keymod operation.
- Preserve the first failure in the call chain; a later HRESULT can describe cleanup rather than the original fwp / duplicate / keymod condition.
Retry and recovery
” has changed.
Looking for a different code? Search another status or error code.