| Previous | Next |
| STATUS_FWP_DUPLICATE_CONDITION | STATUS_FWP_ACTION_INCOMPATIBLE_WITH_LAYER |
STATUS_FWP_DUPLICATE_KEYMOD
The security policy contains duplicate key-management identity
STATUS_FWP_DUPLICATE_KEYMOD belongs to WFP policy validation for key-management configuration. It does not say that a generic filter was duplicated. The engine found the same keying module more than once in one policy, which prevents the policy from expressing a single unambiguous key-management choice.
Trace policy composition rather than merely filtering the final error. Duplicate entries can arise when a base policy and an override both add the same module, or when a configuration importer expands one logical request twice. Removing one entry is correct only after confirming the remaining module carries the intended authentication and transform policy.
What to inspect
- The policy object and all keying-module identifiers after configuration merge.
- The source layer that added each duplicate entry: base policy, override, or generated default.
- Associated authentication, cipher, and tunnel settings that depend on the surviving module.
- Whether the request targets IPsec policy rather than an ordinary packet filter.
References
- Microsoft: WFP error codes
- Microsoft: WFP management functions
- Microsoft: WFP API overview and headers
- Microsoft WFPSampler source
Looking for a different code? Search another status or error code.