Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,635 questions
Debugging options for VPN certificate 13806
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 69%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJP%3C/text%3E%3C/svg%3E)
John Perkins
1
Reputation point
Can anyone suggest some debugging options for diagnosing certificate-based IKE VPN tunnel connection error 13806?
I'm in the process of setting up a new Remote Access VPN server on Server 2019. Both client and server have the same trusted root cert installed, the server and client both have certs with IP security IKE intermediate EKU, certs are not expired, server cert matches the FQDN the client is attempting to connect to...but the client still reports back error 13806 when it attempts to connect.
The old Remote Access VPN server on Server 2016 with the same client works fine.
Is there a way to enable debugging to look at which certificates are being used? I'm not seeing any Event Viewer services listed that sound like they would have such information logged either on the server or client side.