| Previous | Next |
| FWP_E_CALLOUT_NOTIFICATION_FAILED | FWP_E_INVALID_CIPHER_TRANSFORM |
FWP_E_INVALID_AUTH_TRANSFORM
FWP_E_INVALID_AUTH_TRANSFORM means an IPsec authentication transform is malformed or contains unsupported values. This is distinct from a peer refusing an otherwise valid proposal.
What to verify for FWP_E_INVALID_AUTH_TRANSFORM
- Check the transform identifier, key material requirements, and structure initialization.
- Make sure the transform is legal for the chosen IPsec policy and tunnel or transport mode.
- Review the final policy after any conversion from higher-level configuration into WFP structures.
Microsoft: capture IPsec events with netsh wfp
Diagnostic interpretation
This result has the HRESULT value 0x80320038. AllStat records the condition as “The IPsec authentication transform is not valid.”.
Evidence to capture
- Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the fwp / auth / transform operation.
- Preserve the first failure in the call chain; a later HRESULT can describe cleanup rather than the original fwp / auth / transform condition.
Retry and recovery
” has changed.
Looking for a different code? Search another status or error code.