Event ID 2027 — IPsec Service Initialization

  • Article

Applies To: Windows Server 2008 R2

The IKE and AuthIP IPsec Keying Modules (IKEEXT) service must be running for Internet Protocol security (IPsec) to provide authentication and encryption services. This service implements the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) protocols. These keying modules support the authentication and key exchange features required by Internet Protocol security (IPsec).

When appropriate auditing events are enabled (https://go.microsoft.com/fwlink/?linkid=92666), Windows reports successes and failures in starting the service, or when the service stops operating due to a failure.

Event Details

Product: Windows Operating System
ID: 2027
Source: Microsoft-Windows-Windows Firewall with Advanced Security
Version: 6.1
Symbolic Name: WFPhase2CryptoSetStartupAddEvent
Message: A phase 2 crypto set was added to IPsec settings when Windows Firewall started.

%tSet ID:%t%1
%tSetName:%t%2
%tOrigin:%t%4
%tPfs:%t%6
%tNumSuites:%t%7
%tModifyingUser:%t%10
%tModifyingApplication:%t%11

Resolve

This is a normal condition. No further action is required.

IPsec Service Initialization

Windows Firewall with Advanced Security