Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. You cannot establish an IPsec connection with certain third-party devices in Windows

You cannot establish an IPsec connection with certain third-party devices in Windows

View products that this article applies to.

Symptoms

Consider the following scenario:
  • You have a computer that is running Windows 8.1, Windows Server 2012 R2, Windows 7 Service Pack 1, or Windows Server 2008 R2 Service Pack 1.
  • You try to set up an Internet Protocol security (IPsec) connection with certain third-party devices that use Internet Key Exchange version 1 (IKEv1) together with Advanced Encryption Standard-Galois Message Authentication Code (AES-GMAC-128, AES-GMAC-192 or AES-GMAC-256) as an integrity algorithm.

In this scenario, you cannot establish the IPsec connection.

↑ Back to the top

Cause

This problem occurs because the transform identifier that is used for AES-GMAC integrity algorithms in Windows is incorrect.

↑ Back to the top

Resolution

To resolve this issue for Windows 8.1 and Windows Server 2012 R2, install update 2919355.
To resolve this issue for Windows 7 and Windows Server 2008 R2, install the hotfix that is described in this article.

Update information for Windows 8.1 and Windows Server 2012 R2

For more information about how to obtain update 2919355, click the following article number to view the article in the Microsoft Knowledge Base:
2919355 Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Update April, 2014

Hotfix information for Windows 7 and Windows Server 2008 R2

A supported hotfix is available from Microsoft Support. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, go to the following Microsoft website:
http://support.microsoft.com/contactus/?ws=support
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must have Service Pack 1 for Windows 7 or Windows Server 2008 R2 installed.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any previously released hotfix.

↑ Back to the top

File information
The English (United States) version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 7 and Windows Server 2008 R2 file information and notes

Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

    VersionProductSR_LevelService branch
    6.1.760 1.17xxxWindows 7 and Windows Server 2008 R2SP1GDR
    6.1.760 1.18xxxWindows 7 and Windows Server 2008 R2SP1GDR
    6.1.760 1.22xxxWindows 7 and Windows Server 2008 R2SP1LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, extremely important issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows 7
File nameFile versionFile sizeDateTimePlatform
Bfe.dll6.1.7601.17514494,59220-Nov-201012:18x86
Fwpuclnt.dll6.1.7601.18283216,57612-Oct-201302:01x86
Ikeext.dll6.1.7601.18389680,44808-Feb-201402:06x86
Networksecurity-ppdlic.xrm-msNot applicable3,02808-Feb-201402:27Not applicable
Nshwfp.dll6.1.7601.18283656,89612-Oct-201302:03x86
Wfp.mofNot applicable82210-Jun-200921:32Not applicable
Bfe.dll6.1.7601.22593496,12808-Feb-201402:04x86
Fwpuclnt.dll6.1.7601.22593216,57608-Feb-201402:04x86
Ikeext.dll6.1.7601.22593682,49608-Feb-201402:04x86
Networksecurity-ppdlic.xrm-msNot applicable3,02808-Feb-201402:23Not applicable
Nshwfp.dll6.1.7601.22593657,92008-Feb-201402:04x86
Wfp.mofNot applicable82210-Jun-200921:32Not applicable
For all supported x64-based versions of Windows 7 and Windows Server 2008 R2
File nameFile versionFile sizeDateTimePlatform
Bfe.dll6.1.7601.17514705,02420-Nov-201013:25x64
Fwpuclnt.dll6.1.7601.18283324,09612-Oct-201302:29x64
Ikeext.dll6.1.7601.18389860,67208-Feb-201402:35x64
Networksecurity-ppdlic.xrm-msNot applicable3,02808-Feb-201402:54Not applicable
Nshwfp.dll6.1.7601.18283830,46412-Oct-201302:30x64
Wfp.mofNot applicable82210-Jun-200920:51Not applicable
Bfe.dll6.1.7601.22593706,56008-Feb-201402:37x64
Fwpuclnt.dll6.1.7601.22593324,09608-Feb-201402:37x64
Ikeext.dll6.1.7601.22593862,20808-Feb-201402:37x64
Networksecurity-ppdlic.xrm-msNot applicable3,02808-Feb-201402:56Not applicable
Nshwfp.dll6.1.7601.22593832,00008-Feb-201402:37x64
Wfp.mofNot applicable82210-Jun-200920:51Not applicable
Fwpuclnt.dll6.1.7601.18389216,57608-Feb-201402:06x86
Nshwfp.dll6.1.7601.18389656,89608-Feb-201402:06x86
Wfp.mofNot applicable82204-Jul-201312:21Not applicable
Fwpuclnt.dll6.1.7601.22593216,57608-Feb-201402:04x86
Nshwfp.dll6.1.7601.22593657,92008-Feb-201402:04x86
Wfp.mofNot applicable82209-Jul-201306:28Not applicable
For all supported IA-64-based versions of Windows Server 2008 R2
File nameFile versionFile sizeDateTimePlatform
Bfe.dll6.1.7601.175141,071,61620-Nov-201010:24IA-64
Fwpuclnt.dll6.1.7601.18283566,27212-Oct-201301:34IA-64
Ikeext.dll6.1.7601.183891,502,20808-Feb-201401:46IA-64
Networksecurity-ppdlic.xrm-msNot applicable3,02808-Feb-201402:04Not applicable
Nshwfp.dll6.1.7601.182831,112,06412-Oct-201301:36IA-64
Wfp.mofNot applicable82210-Jun-200920:57Not applicable
Bfe.dll6.1.7601.225931,074,17608-Feb-201401:47IA-64
Fwpuclnt.dll6.1.7601.22593566,27208-Feb-201401:48IA-64
Ikeext.dll6.1.7601.225931,505,28008-Feb-201401:48IA-64
Networksecurity-ppdlic.xrm-msNot applicable3,02808-Feb-201402:07Not applicable
Nshwfp.dll6.1.7601.225931,114,11208-Feb-201401:48IA-64
Wfp.mofNot applicable82210-Jun-200920:57Not applicable
Fwpuclnt.dll6.1.7601.18389216,57608-Feb-201402:06x86
Nshwfp.dll6.1.7601.18389656,89608-Feb-201402:06x86
Wfp.mofNot applicable82204-Jul-201312:21Not applicable
Fwpuclnt.dll6.1.7601.22593216,57608-Feb-201402:04x86
Nshwfp.dll6.1.7601.22593657,92008-Feb-201402:04x86
Wfp.mofNot applicable82209-Jul-201306:28Not applicable

Additional file information for Windows 7 and Windows Server 2008 R2

Additional files for all supported x86-based versions of Windows 7
File propertyValue
File nameX86_0de15209fcec331128beb6ecac2505bd_31bf3856ad364e35_6.1.7601.18389_none_42a8325718a57ef1.manifest
File versionNot applicable
File size720
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameX86_2239d6d41adc74f089e02ca3ab99f5bb_31bf3856ad364e35_6.1.7601.22593_none_381e8a29f66df8ac.manifest
File versionNot applicable
File size704
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameX86_64c2349e17983b86fd78d25306d5f519_31bf3856ad364e35_6.1.7601.18389_none_02fa6f2ce3a95150.manifest
File versionNot applicable
File size704
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameX86_7db349743fd04bbf010ca51b085166b9_31bf3856ad364e35_6.1.7601.22593_none_dbd93e6510795866.manifest
File versionNot applicable
File size720
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameX86_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.18389_none_4567c7e970e46ce1.manifest
File versionNot applicable
File size915
Date (UTC)08-Feb-2014
Time (UTC)02:32
File nameX86_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.22593_none_45e094f28a0f8db9.manifest
File versionNot applicable
File size915
Date (UTC)08-Feb-2014
Time (UTC)02:28
File nameX86_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.18389_none_cee5113e890152b1.manifest
File versionNot applicable
File size158,847
Date (UTC)10-Feb-2014
Time (UTC)12:56
File nameX86_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.22593_none_cf5dde47a22c7389.manifest
File versionNot applicable
File size154,825
Date (UTC)08-Feb-2014
Time (UTC)02:29
Additional files for all supported x64-based versions of Windows 7 and Windows Server 2008 R2
File propertyValue
File nameAmd64_15c1a36e3c1ab62f65b0833addda2e71_31bf3856ad364e35_6.1.7601.18389_none_86f26eaa81864474.manifest
File versionNot applicable
File size724
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameAmd64_362f1b120395b0785008e3c8c14e4d87_31bf3856ad364e35_6.1.7601.18389_none_48adbe4e19c822cc.manifest
File versionNot applicable
File size708
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameAmd64_3755e4a72b2eb4390478d9826aec35a7_31bf3856ad364e35_6.1.7601.22593_none_295ee26636590dc8.manifest
File versionNot applicable
File size724
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameAmd64_53a85b4f270a0516cddd53b8d0c3fc24_31bf3856ad364e35_6.1.7601.22593_none_947b08b385330cfd.manifest
File versionNot applicable
File size708
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameAmd64_689d12407f8816d6ffa4f09c864e2a25_31bf3856ad364e35_6.1.7601.18389_none_00f98c0904905455.manifest
File versionNot applicable
File size1,058
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameAmd64_9850b850c51e69771c3ee63fae886bff_31bf3856ad364e35_6.1.7601.22593_none_63cea0a4c9097bf5.manifest
File versionNot applicable
File size1,058
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameAmd64_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.18389_none_a186636d2941de17.manifest
File versionNot applicable
File size917
Date (UTC)08-Feb-2014
Time (UTC)02:59
File nameAmd64_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.22593_none_a1ff3076426cfeef.manifest
File versionNot applicable
File size917
Date (UTC)08-Feb-2014
Time (UTC)03:01
File nameAmd64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.18389_none_2b03acc2415ec3e7.manifest
File versionNot applicable
File size158,853
Date (UTC)10-Feb-2014
Time (UTC)12:59
File nameAmd64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.22593_none_2b7c79cb5a89e4bf.manifest
File versionNot applicable
File size154,831
Date (UTC)08-Feb-2014
Time (UTC)03:03
File nameWow64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.18389_none_3558571475bf85e2.manifest
File versionNot applicable
File size94,348
Date (UTC)08-Feb-2014
Time (UTC)02:19
File nameWow64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.22593_none_35d1241d8eeaa6ba.manifest
File versionNot applicable
File size94,348
Date (UTC)08-Feb-2014
Time (UTC)02:22
Additional files for all supported IA-64-based versions of Windows Server 2008 R2
File propertyValue
File nameIa64_42898a9c38bfc8ac39d0fe90e4fd2349_31bf3856ad364e35_6.1.7601.18389_none_e83a1681525222a6.manifest
File versionNot applicable
File size1,056
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameIa64_86b8400a110c8c04714615d8bfd3eb2b_31bf3856ad364e35_6.1.7601.22593_none_7fd3284111eb6a82.manifest
File versionNot applicable
File size1,056
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameIa64_a9bd10d00b2c83bd2de240446f864ce3_31bf3856ad364e35_6.1.7601.18389_none_b5e34db3f1787cb6.manifest
File versionNot applicable
File size722
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameIa64_efcba0ccaa9d80810aed7c5bcdc6d1ce_31bf3856ad364e35_6.1.7601.22593_none_77d55b5580364f10.manifest
File versionNot applicable
File size722
Date (UTC)10-Feb-2014
Time (UTC)12:52
File nameIa64_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.18389_none_45696bdf70e275dd.manifest
File versionNot applicable
File size916
Date (UTC)08-Feb-2014
Time (UTC)02:26
File nameIa64_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.22593_none_45e238e88a0d96b5.manifest
File versionNot applicable
File size916
Date (UTC)08-Feb-2014
Time (UTC)02:17
File nameIa64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.18389_none_cee6b53488ff5bad.manifest
File versionNot applicable
File size158,850
Date (UTC)10-Feb-2014
Time (UTC)12:53
File nameIa64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.22593_none_cf5f823da22a7c85.manifest
File versionNot applicable
File size154,828
Date (UTC)08-Feb-2014
Time (UTC)02:17
File nameWow64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.18389_none_3558571475bf85e2.manifest
File versionNot applicable
File size94,348
Date (UTC)08-Feb-2014
Time (UTC)02:19
File nameWow64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.22593_none_35d1241d8eeaa6ba.manifest
File versionNot applicable
File size94,348
Date (UTC)08-Feb-2014
Time (UTC)02:22

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

References

Learn about the terminology that Microsoft uses to describe software updates.

↑ Back to the top

Keywords: kbautohotfix, kbqfe, kbhotfixserver, kbfix, kbexpertiseinter, kbsurveynew, kbbug, kb

↑ Back to the top

Article Info
Article ID : 2925489
Revision : 1
Created on : 1/7/2017
Published on : 1/22/2015
Exists online : False
Views : 275