| Previous | Next |
| ERROR_IPSEC_IKE_REQUIRE_CP_PAYLOAD_MISSING | ERROR_IPSEC_IKE_COEXISTENCE_SUPPRESS |
ERROR_IPSEC_KEY_MODULE_IMPERSONATION_NEGOTIATION_PENDING
Negotiation is running under the requesting security principal
This status identifies a negotiation executed while impersonating the security principal that issued the connection request. The keying work has not completed yet. It is therefore both a pending-state result and a clue that caller security context is relevant to authentication or authorization.
Do not compare it directly with ordinary machine-only Main Mode negotiation without checking the rule and authentication proposal. Windows IPsec can use computer and user authentication proposals, and AuthIP supports richer authentication flows than classic IKEv1. A service account, interactive user, or delegated process can lead to different credential availability.
What to inspect
- Identify the security principal under which the connection request was issued.
- Compare the effective Phase 1 and Phase 2 authentication sets with the expected machine or user credentials.
- Follow the negotiation to its later success or specific failure; the pending status itself is not terminal.
Get-NetIPsecPhase1AuthSet
Get-NetIPsecPhase2AuthSetReferences
- Microsoft: New-NetIPsecAuthProposal
- Microsoft Open Specifications: AuthIP overview
- Microsoft: IPsec audit events
Looking for a different code? Search another status or error code.