IKE authentication credentials are unacceptable - Strongswan - Windows Server 2008 R2-Enterprise (Cert Authority)

LegendZM
LegendZM used Ask the Experts™
on
Using strongswan 4.3.5 as gateway
server 2008 as client & certificate authority

issued cert with the requirements as outlined here to client: http://wiki.strongswan.org/projects/strongswan/wiki/Win7CertReq

Server 2008 still reports error in eventvwr:
IKE authentication credentials are unacceptable failure is 13801.


Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Top Expert 2016

Commented:
that is a generic failure code. take a look at this

Principal Security Architect
Commented:
Found the solution...


1) Windows 7 native Agile VPN Client does not propose SHA256 for IKE.

2) Windows 7 native Agile VPN Client does not propose AES128-GCM for ESP.
LegendZMPrincipal Security Architect

Author

Commented:
Found answer myself.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial