Symptoms

Consider the following scenario:

  • You have a computer that is running Windows 8.1, Windows Server 2012 R2, Windows 7 Service Pack 1, or Windows Server 2008 R2 Service Pack 1.

  • You try to set up an Internet Protocol security (IPsec) connection with certain third-party devices that use Internet Key Exchange version 1 (IKEv1) together with Advanced Encryption Standard-Galois Message Authentication Code (AES-GMAC-128, AES-GMAC-192 or AES-GMAC-256) as an integrity algorithm.


In this scenario, you cannot establish the IPsec connection.

Cause

This problem occurs because the transform identifier that is used for AES-GMAC integrity algorithms in Windows is incorrect.

Resolution

To resolve this issue for Windows 8.1 and Windows Server 2012 R2, install update 2919355.
To resolve this issue for Windows 7 and Windows Server 2008 R2, install the hotfix that is described in this article.

Update information for Windows 8.1 and Windows Server 2012 R2

For more information about how to obtain update 2919355, click the following article number to view the article in the Microsoft Knowledge Base:

2919355 Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Update April, 2014

Hotfix information for Windows 7 and Windows Server 2008 R2

A supported hotfix is available from Microsoft Support. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, go to the following Microsoft website:

http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must have Service Pack 1 for Windows 7 or Windows Server 2008 R2 installed.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any previously released hotfix.

The English (United States) version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 7 and Windows Server 2008 R2 file information and notes

Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The files that apply to a specific product, SR_Level (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

    Version

    Product

    SR_Level

    Service branch

    6.1.760 1.17xxx

    Windows 7 and Windows Server 2008 R2

    SP1

    GDR

    6.1.760 1.18xxx

    Windows 7 and Windows Server 2008 R2

    SP1

    GDR

    6.1.760 1.22xxx

    Windows 7 and Windows Server 2008 R2

    SP1

    LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, extremely important issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintain the state of the updated components. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 7

File name

File version

File size

Date

Time

Platform

Bfe.dll

6.1.7601.17514

494,592

20-Nov-2010

12:18

x86

Fwpuclnt.dll

6.1.7601.18283

216,576

12-Oct-2013

02:01

x86

Ikeext.dll

6.1.7601.18389

680,448

08-Feb-2014

02:06

x86

Networksecurity-ppdlic.xrm-ms

Not applicable

3,028

08-Feb-2014

02:27

Not applicable

Nshwfp.dll

6.1.7601.18283

656,896

12-Oct-2013

02:03

x86

Wfp.mof

Not applicable

822

10-Jun-2009

21:32

Not applicable

Bfe.dll

6.1.7601.22593

496,128

08-Feb-2014

02:04

x86

Fwpuclnt.dll

6.1.7601.22593

216,576

08-Feb-2014

02:04

x86

Ikeext.dll

6.1.7601.22593

682,496

08-Feb-2014

02:04

x86

Networksecurity-ppdlic.xrm-ms

Not applicable

3,028

08-Feb-2014

02:23

Not applicable

Nshwfp.dll

6.1.7601.22593

657,920

08-Feb-2014

02:04

x86

Wfp.mof

Not applicable

822

10-Jun-2009

21:32

Not applicable

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Bfe.dll

6.1.7601.17514

705,024

20-Nov-2010

13:25

x64

Fwpuclnt.dll

6.1.7601.18283

324,096

12-Oct-2013

02:29

x64

Ikeext.dll

6.1.7601.18389

860,672

08-Feb-2014

02:35

x64

Networksecurity-ppdlic.xrm-ms

Not applicable

3,028

08-Feb-2014

02:54

Not applicable

Nshwfp.dll

6.1.7601.18283

830,464

12-Oct-2013

02:30

x64

Wfp.mof

Not applicable

822

10-Jun-2009

20:51

Not applicable

Bfe.dll

6.1.7601.22593

706,560

08-Feb-2014

02:37

x64

Fwpuclnt.dll

6.1.7601.22593

324,096

08-Feb-2014

02:37

x64

Ikeext.dll

6.1.7601.22593

862,208

08-Feb-2014

02:37

x64

Networksecurity-ppdlic.xrm-ms

Not applicable

3,028

08-Feb-2014

02:56

Not applicable

Nshwfp.dll

6.1.7601.22593

832,000

08-Feb-2014

02:37

x64

Wfp.mof

Not applicable

822

10-Jun-2009

20:51

Not applicable

Fwpuclnt.dll

6.1.7601.18389

216,576

08-Feb-2014

02:06

x86

Nshwfp.dll

6.1.7601.18389

656,896

08-Feb-2014

02:06

x86

Wfp.mof

Not applicable

822

04-Jul-2013

12:21

Not applicable

Fwpuclnt.dll

6.1.7601.22593

216,576

08-Feb-2014

02:04

x86

Nshwfp.dll

6.1.7601.22593

657,920

08-Feb-2014

02:04

x86

Wfp.mof

Not applicable

822

09-Jul-2013

06:28

Not applicable

For all supported IA-64-based versions of Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Bfe.dll

6.1.7601.17514

1,071,616

20-Nov-2010

10:24

IA-64

Fwpuclnt.dll

6.1.7601.18283

566,272

12-Oct-2013

01:34

IA-64

Ikeext.dll

6.1.7601.18389

1,502,208

08-Feb-2014

01:46

IA-64

Networksecurity-ppdlic.xrm-ms

Not applicable

3,028

08-Feb-2014

02:04

Not applicable

Nshwfp.dll

6.1.7601.18283

1,112,064

12-Oct-2013

01:36

IA-64

Wfp.mof

Not applicable

822

10-Jun-2009

20:57

Not applicable

Bfe.dll

6.1.7601.22593

1,074,176

08-Feb-2014

01:47

IA-64

Fwpuclnt.dll

6.1.7601.22593

566,272

08-Feb-2014

01:48

IA-64

Ikeext.dll

6.1.7601.22593

1,505,280

08-Feb-2014

01:48

IA-64

Networksecurity-ppdlic.xrm-ms

Not applicable

3,028

08-Feb-2014

02:07

Not applicable

Nshwfp.dll

6.1.7601.22593

1,114,112

08-Feb-2014

01:48

IA-64

Wfp.mof

Not applicable

822

10-Jun-2009

20:57

Not applicable

Fwpuclnt.dll

6.1.7601.18389

216,576

08-Feb-2014

02:06

x86

Nshwfp.dll

6.1.7601.18389

656,896

08-Feb-2014

02:06

x86

Wfp.mof

Not applicable

822

04-Jul-2013

12:21

Not applicable

Fwpuclnt.dll

6.1.7601.22593

216,576

08-Feb-2014

02:04

x86

Nshwfp.dll

6.1.7601.22593

657,920

08-Feb-2014

02:04

x86

Wfp.mof

Not applicable

822

09-Jul-2013

06:28

Not applicable

Additional file information for Windows 7 and Windows Server 2008 R2

Additional files for all supported x86-based versions of Windows 7

File property

Value

File name

X86_0de15209fcec331128beb6ecac2505bd_31bf3856ad364e35_6.1.7601.18389_none_42a8325718a57ef1.manifest

File version

Not applicable

File size

720

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

X86_2239d6d41adc74f089e02ca3ab99f5bb_31bf3856ad364e35_6.1.7601.22593_none_381e8a29f66df8ac.manifest

File version

Not applicable

File size

704

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

X86_64c2349e17983b86fd78d25306d5f519_31bf3856ad364e35_6.1.7601.18389_none_02fa6f2ce3a95150.manifest

File version

Not applicable

File size

704

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

X86_7db349743fd04bbf010ca51b085166b9_31bf3856ad364e35_6.1.7601.22593_none_dbd93e6510795866.manifest

File version

Not applicable

File size

720

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

X86_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.18389_none_4567c7e970e46ce1.manifest

File version

Not applicable

File size

915

Date (UTC)

08-Feb-2014

Time (UTC)

02:32

File name

X86_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.22593_none_45e094f28a0f8db9.manifest

File version

Not applicable

File size

915

Date (UTC)

08-Feb-2014

Time (UTC)

02:28

File name

X86_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.18389_none_cee5113e890152b1.manifest

File version

Not applicable

File size

158,847

Date (UTC)

10-Feb-2014

Time (UTC)

12:56

File name

X86_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.22593_none_cf5dde47a22c7389.manifest

File version

Not applicable

File size

154,825

Date (UTC)

08-Feb-2014

Time (UTC)

02:29

Additional files for all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File property

Value

File name

Amd64_15c1a36e3c1ab62f65b0833addda2e71_31bf3856ad364e35_6.1.7601.18389_none_86f26eaa81864474.manifest

File version

Not applicable

File size

724

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

Amd64_362f1b120395b0785008e3c8c14e4d87_31bf3856ad364e35_6.1.7601.18389_none_48adbe4e19c822cc.manifest

File version

Not applicable

File size

708

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

Amd64_3755e4a72b2eb4390478d9826aec35a7_31bf3856ad364e35_6.1.7601.22593_none_295ee26636590dc8.manifest

File version

Not applicable

File size

724

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

Amd64_53a85b4f270a0516cddd53b8d0c3fc24_31bf3856ad364e35_6.1.7601.22593_none_947b08b385330cfd.manifest

File version

Not applicable

File size

708

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

Amd64_689d12407f8816d6ffa4f09c864e2a25_31bf3856ad364e35_6.1.7601.18389_none_00f98c0904905455.manifest

File version

Not applicable

File size

1,058

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

Amd64_9850b850c51e69771c3ee63fae886bff_31bf3856ad364e35_6.1.7601.22593_none_63cea0a4c9097bf5.manifest

File version

Not applicable

File size

1,058

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

Amd64_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.18389_none_a186636d2941de17.manifest

File version

Not applicable

File size

917

Date (UTC)

08-Feb-2014

Time (UTC)

02:59

File name

Amd64_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.22593_none_a1ff3076426cfeef.manifest

File version

Not applicable

File size

917

Date (UTC)

08-Feb-2014

Time (UTC)

03:01

File name

Amd64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.18389_none_2b03acc2415ec3e7.manifest

File version

Not applicable

File size

158,853

Date (UTC)

10-Feb-2014

Time (UTC)

12:59

File name

Amd64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.22593_none_2b7c79cb5a89e4bf.manifest

File version

Not applicable

File size

154,831

Date (UTC)

08-Feb-2014

Time (UTC)

03:03

File name

Wow64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.18389_none_3558571475bf85e2.manifest

File version

Not applicable

File size

94,348

Date (UTC)

08-Feb-2014

Time (UTC)

02:19

File name

Wow64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.22593_none_35d1241d8eeaa6ba.manifest

File version

Not applicable

File size

94,348

Date (UTC)

08-Feb-2014

Time (UTC)

02:22

Additional files for all supported IA-64-based versions of Windows Server 2008 R2

File property

Value

File name

Ia64_42898a9c38bfc8ac39d0fe90e4fd2349_31bf3856ad364e35_6.1.7601.18389_none_e83a1681525222a6.manifest

File version

Not applicable

File size

1,056

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

Ia64_86b8400a110c8c04714615d8bfd3eb2b_31bf3856ad364e35_6.1.7601.22593_none_7fd3284111eb6a82.manifest

File version

Not applicable

File size

1,056

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

Ia64_a9bd10d00b2c83bd2de240446f864ce3_31bf3856ad364e35_6.1.7601.18389_none_b5e34db3f1787cb6.manifest

File version

Not applicable

File size

722

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

Ia64_efcba0ccaa9d80810aed7c5bcdc6d1ce_31bf3856ad364e35_6.1.7601.22593_none_77d55b5580364f10.manifest

File version

Not applicable

File size

722

Date (UTC)

10-Feb-2014

Time (UTC)

12:52

File name

Ia64_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.18389_none_45696bdf70e275dd.manifest

File version

Not applicable

File size

916

Date (UTC)

08-Feb-2014

Time (UTC)

02:26

File name

Ia64_microsoft-windows-n..ity-ikev1gmacerrata_31bf3856ad364e35_6.1.7601.22593_none_45e238e88a0d96b5.manifest

File version

Not applicable

File size

916

Date (UTC)

08-Feb-2014

Time (UTC)

02:17

File name

Ia64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.18389_none_cee6b53488ff5bad.manifest

File version

Not applicable

File size

158,850

Date (UTC)

10-Feb-2014

Time (UTC)

12:53

File name

Ia64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.22593_none_cf5f823da22a7c85.manifest

File version

Not applicable

File size

154,828

Date (UTC)

08-Feb-2014

Time (UTC)

02:17

File name

Wow64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.18389_none_3558571475bf85e2.manifest

File version

Not applicable

File size

94,348

Date (UTC)

08-Feb-2014

Time (UTC)

02:19

File name

Wow64_microsoft-windows-network-security_31bf3856ad364e35_6.1.7601.22593_none_35d1241d8eeaa6ba.manifest

File version

Not applicable

File size

94,348

Date (UTC)

08-Feb-2014

Time (UTC)

02:22


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

References

Learn about the terminology that Microsoft uses to describe software updates.

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×