What does Windows error code 13022 (ERROR_IPSEC_MM_AUTH_PENDING_DELETION) mean?

ERROR_IPSEC_MM_AUTH_PENDING_DELETION

ERROR_IPSEC_MM_AUTH_PENDING_DELETION (0x000032DE) The authentication bundle is being removed, but the policy engine has not completed cleanup. New edits should wait until the configuration converges, particularly when certificate or Kerberos authentication is in use.

Observe policy-store convergence and active Main Mode associations before recreating the same authentication entry. If deletion remains pending, identify the reference that keeps it alive rather than issuing alternating create and delete commands.

What to check

• Check whether the authentication configuration is still referenced by a connection-security rule.
• Allow GPO or the configuration-management system to finish its refresh cycle before retrying.
• If it remains pending, investigate active Main Mode associations and dependent rule objects rather than manually deleting system state.

Get-NetIPsecMainModeSA

Microsoft: Get-NetIPsecMainModeSA

Microsoft: IKE authentication method types

Microsoft: IPsec/IKE system error codes