What does Windows error code 13853 (ERROR_IPSEC_IKE_FAILSSPINIT) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: IKE could not initialize the SSPI security-function interface.

Previous	Next
ERROR_IPSEC_IKE_SECLOADFAIL	ERROR_IPSEC_IKE_FAILQUERYSSP

ERROR_IPSEC_IKE_FAILSSPINIT

ERROR_IPSEC_IKE_FAILSSPINIT (0x0000361D) The IKE service failed before it could obtain the SSPI functions required for authentication. This is typically a local security-subsystem or service-initialization problem, not a remote certificate rejection.

What to check

Check IKEEXT service startup events and any preceding LSA, Kerberos, or SSPI errors.
Verify that the computer is healthy after recent servicing or security-product changes before changing VPN policy.
If the problem is isolated to domain authentication, verify domain reachability and time synchronization as well.

Get-Service IKEEXT

Microsoft: Remote Access and Always On VPN troubleshooting

Microsoft: Audit IPsec Main Mode

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.