What does Windows error code 13010 (ERROR_IPSEC_MM_AUTH_EXISTS) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The requested Main Mode authentication set already exists.

Previous	Next
ERROR_IPSEC_TRANSPORT_FILTER_NOT_FOUND	ERROR_IPSEC_MM_AUTH_NOT_FOUND

ERROR_IPSEC_MM_AUTH_EXISTS

ERROR_IPSEC_MM_AUTH_EXISTS (0x000032D2) A legacy Main Mode authentication list already exists with the requested identity. It is generally a deployment or policy-store conflict rather than a certificate validation failure.

What to check

Determine whether the existing authentication set uses certificates, Kerberos, or another configured method before replacing it.
Check for duplicate local and domain policy objects that target the same connection security rule.
Update the managed policy source instead of adding a second authentication list with overlapping scope.

Get-NetIPsecMainModeRule

Microsoft: Get-NetIPsecMainModeRule

Microsoft: IKE authentication method types

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.