What does Windows error code 13021 (ERROR_IPSEC_MM_POLICY_PENDING_DELETION) mean?

ERROR_IPSEC_MM_POLICY_PENDING_DELETION

ERROR_IPSEC_MM_POLICY_PENDING_DELETION (0x000032DD) The policy has been scheduled for removal but remains visible while the IPsec policy engine finishes cleanup. This is a transitional management state, not a new negotiation error.

What to check for ERROR_IPSEC_MM_POLICY_PENDING_DELETION

• Confirm that no deployment system is simultaneously recreating the policy.
• Check rule and security-association state before retrying changes.
• Use the policy source of truth, such as the applicable GPO, to avoid local-policy and domain-policy races.

Get-NetIPsecMainModeRule

Microsoft: Get-NetIPsecMainModeRule

Microsoft: Get-NetIPsecMainModeSA

Microsoft: IPsec/IKE system error codes

Where the result is returned

This result is Win32 system error 13021 (0x000032DD) from winerror.h. AllStat describes it as “The Main Mode policy is pending deletion.”