| Previous | Next |
| FWP_E_KEY_DICTATOR_ALREADY_REGISTERED | FWP_E_CONNECTIONS_DISABLED |
FWP_E_KEY_DICTATION_INVALID_KEYING_MATERIAL
FWP_E_KEY_DICTATION_INVALID_KEYING_MATERIAL means a key manager attempted to dictate keying material that failed WFP validation.
What to verify for FWP_E_KEY_DICTATION_INVALID_KEYING_MATERIAL
- Validate key sizes, transform compatibility, lifetime fields, and security-association selectors before passing the data to WFP.
- Ensure the key material was generated for the exact negotiated policy, not reused from another SA.
- Collect IKE/IPsec diagnostics while reproducing the problem, but avoid logging secret key material.
Microsoft: capture IPsec events with netsh wfp
Diagnostic interpretation
This result has the HRESULT value 0x80320040. AllStat records the condition as “A key manager dictated invalid keys”.
Evidence to capture
- Capture any IErrorInfo text, activity identifier, event-log entry, and subsystem trace that mentions this result or the fwp / key / dictation / keying / material operation.
- Preserve the first failure in the call chain; a later HRESULT can describe cleanup rather than the original fwp / key / dictation / keying / material condition.
Retry and recovery
Retry this result only when the owning API documents a transient state or after the condition described as “A key manager dictated invalid keys” has changed.
Looking for a different code? Search another status or error code.