What does Windows error code 13855 (ERROR_IPSEC_IKE_SRVACQFAIL) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: IKE could not acquire Kerberos server credentials for its service principal.

Previous	Next
ERROR_IPSEC_IKE_FAILQUERYSSP	ERROR_IPSEC_IKE_SRVQUERYCRED

ERROR_IPSEC_IKE_SRVACQFAIL

ERROR_IPSEC_IKE_SRVACQFAIL (0x0000361F) IKE could not obtain the Kerberos server credentials it needs for domain authentication. Microsoft documents that lack of domain membership is a common and expected reason on workgroup machines.

What to check

First confirm whether the machine is expected to use Kerberos for IPsec. A workgroup machine normally cannot satisfy this path.
For domain-joined systems, verify DNS to domain controllers, system time, secure-channel health, and machine-account state.
If certificate authentication is intended, check that the rule did not unexpectedly select Kerberos instead.

Test-ComputerSecureChannel -Verbose

Microsoft: IKE authentication method types

Microsoft: Remote Access and Always On VPN troubleshooting

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.