| Previous | Next |
| STATUS_FWP_L2_DRIVER_NOT_READY | STATUS_FWP_KEY_DICTATION_INVALID_KEYING_MATERIAL |
STATUS_FWP_KEY_DICTATOR_ALREADY_REGISTERED
Only one WFP key dictator can own key dictation
These status values come from the Windows Filtering Platform path. For STATUS_FWP_KEY_DICTATOR_ALREADY_REGISTERED, wFP classifies traffic through layers, filters, provider contexts, sublayers, and callouts; IPsec policy is also configured through WFP at IKE/AuthIP-related layers.
Key dictation is a specialized IPsec key-management path. This status means another key manager has already registered that capability, so a second component cannot take over.
For STATUS_FWP_KEY_DICTATOR_ALREADY_REGISTERED, when this appears during IPsec or AuthIP negotiation, compare the Main Mode, Quick Mode, Extended Mode, transform, tunnel endpoint, DNS name, and authentication-method policy actually installed in WFP.
What to inspect
- Find the component that registered key dictation first.
- Avoid loading two IPsec/key-management products with the same role.
- Check service and driver startup order.
References for STATUS_FWP_KEY_DICTATOR_ALREADY_REGISTERED
- Microsoft Open Specifications: NTSTATUS values
- Microsoft: WFP error codes
- Microsoft: IPsec configuration through WFP
Looking for a different code? Search another status or error code.