| Previous | Next |
| FWP_E_DUPLICATE_CONDITION | FWP_E_ACTION_INCOMPATIBLE_WITH_LAYER |
FWP_E_DUPLICATE_KEYMOD
FWP_E_DUPLICATE_KEYMOD means an IPsec policy repeats the same keying module. A policy must describe each selected key-management mechanism only once.
What to check for FWP_E_DUPLICATE_KEYMOD
- Deduplicate policy entries after merging local, domain, or application-generated configuration.
- Use stable identifiers for keying modules rather than comparing display names.
- Review the final serialized policy sent to WFP, not only the higher-level source configuration.
Microsoft: capture IPsec events with netsh wfp
Diagnostic discriminator: Enumerate registered key modules before adding another. Matching key-module identity distinguishes a duplicate-registration conflict from malformed keying material or an unavailable IPsec provider.
Looking for a different code? Search another status or error code.