Windows 11 Ike authentication credentials unacceptable

Handian Sudianto 5,796 Reputation points
2025-02-13T01:30:50.7166667+00:00

I want to connecting my workstation to office using VPN IKE, the VPN server using Mikrotik and authentication use certificate.

I import the CA certificate and Client certificate from Mikrotik to my workstation and when try connecting i got error "Ike authentication credentials unacceptable".

In the Network Adapter properties i also already change the authentication using "use machine certificates". The same certificate if i apply on my phone is running normally, i able to connect to the VPN.

The CA certificates stored in

  • Trusted Root Certification Authorities
  • Intermediate Certification Authorities

The Client certificate stored in

  • Personal

Seem windows select wrong certificate when connecting to the VPN. Any one know how to fix this?

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
12,077 questions
Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
11,139 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Daisy Zhou 31,206 Reputation points Microsoft External Staff
    2025-02-14T08:11:43.1+00:00

    Hello

    Thank you for posting in Q&A forum.

    Here are some steps you can take to troubleshoot:

    1. Ensure that both the CA certificate and the client certificate are valid and not expired. Verify that the certificates are correctly installed on your workstation.
    2. Make sure the server certificate on the VPN server has the "Server Authentication" EKU. You can check this by running mmc, adding the "Certificates" snap-in, and inspecting the certificate details under "Enhanced Key Usage".
    3. Ensure that the trusted root certificate for the server certificate is present on your workstation. If the root certificate is missing, import it into the trusted root certification authorities store.
    4. Verify that the VPN server name provided on the client matches the subject name of the server certificate.
    5. Temporarily disable any firewall or antivirus software to see if they are interfering with the VPN connection.

    References:

    Error 13801, IKE authentication credentials are unacceptable

    KB23221 - '13801: IKE authentication credentials are ... - Ivanti

    I hope the information above is helpful.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.