What does Windows error code 13869 (ERROR_IPSEC_IKE_UNSUPPORTED_ID) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The peer supplied an unsupported IKE identity type or value.

Previous	Next
ERROR_IPSEC_IKE_POLICY_MATCH	ERROR_IPSEC_IKE_INVALID_HASH

ERROR_IPSEC_IKE_UNSUPPORTED_ID

ERROR_IPSEC_IKE_UNSUPPORTED_ID (0x0000362D) Windows could not use the identity carried by the peer. This can happen when a certificate subject/SAN, FQDN, IP address, or user/machine identity does not match the form expected by the active IPsec policy.

What to check

Compare the identity type expected by policy with the identity the peer sends.
For certificate authentication, inspect the certificate subject, SAN, EKU, and private-key availability.
For domain authentication, verify that the device identity and DNS/domain context are correct.

certutil -store my

Microsoft: IKE authentication method types

Microsoft: Remote Access and Always On VPN troubleshooting

Microsoft: IPsec/IKE system error codes

Looking for a different code? Search another status or error code.