Share via

Windows 11 Ike authentication credentials unacceptable

Handian Sudianto 6,886 Reputation points
2025-02-13T01:30:50.7166667+00:00

I want to connecting my workstation to office using VPN IKE, the VPN server using Mikrotik and authentication use certificate.

I import the CA certificate and Client certificate from Mikrotik to my workstation and when try connecting i got error "Ike authentication credentials unacceptable".

In the Network Adapter properties i also already change the authentication using "use machine certificates". The same certificate if i apply on my phone is running normally, i able to connect to the VPN.

The CA certificates stored in

  • Trusted Root Certification Authorities
  • Intermediate Certification Authorities

The Client certificate stored in

  • Personal

Seem windows select wrong certificate when connecting to the VPN. Any one know how to fix this?

Windows for business | Windows Client for IT Pros | User experience | Other

Locked Question. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  2. Anonymous
    2025-02-14T08:11:43.1+00:00

    Hello

    Thank you for posting in Q&A forum.

    Here are some steps you can take to troubleshoot:

    1. Ensure that both the CA certificate and the client certificate are valid and not expired. Verify that the certificates are correctly installed on your workstation.
    2. Make sure the server certificate on the VPN server has the "Server Authentication" EKU. You can check this by running mmc, adding the "Certificates" snap-in, and inspecting the certificate details under "Enhanced Key Usage".
    3. Ensure that the trusted root certificate for the server certificate is present on your workstation. If the root certificate is missing, import it into the trusted root certification authorities store.
    4. Verify that the VPN server name provided on the client matches the subject name of the server certificate.
    5. Temporarily disable any firewall or antivirus software to see if they are interfering with the VPN connection.

    References:

    Error 13801, IKE authentication credentials are unacceptable

    KB23221 - '13801: IKE authentication credentials are ... - Ivanti

    I hope the information above is helpful.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments