Windows 8.1 or Windows Server 2012 R2 hosts crash when they set up IPSec tunnel

This article describes an issue that occurs when Windows 8.1 or Windows Server 2012 R2 hosts communicate with Windows 10 devices. An update is available to fix this issue. Before you install this update, check out the Prerequisites section.
Symptoms
This issue occurs when Windows 8.1 or Windows Server 2012 R2 hosts try to establish a connection with another host. The connection uses an IPsec tunnel, and is configured by using an IKE_EXCHANGE_INFO_GUARANTEE_ENCRYPTION flag. 
How to get this update
Important If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Method 1: Windows Update

This update is provided as an Optional update on Windows Update. For more information on how to run Windows Update, see How to get an update through Windows Update.

Method 2: Microsoft Download Center

The following files are available for download from the Microsoft Download Center:
Operating systemUpdate
All supported x86-based versions of Windows 8.1DownloadDownload the package now.
All supported x64-based versions of Windows 8.1 DownloadDownload the package now.
All supported x64-based versions of Windows Server 2012 R2DownloadDownload the package now.
Note The update for Windows RT 8.1 can be got only from Windows Update.

For more information about how to download Microsoft support files, select the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services 
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Update detail information

Prerequisites

To install this update, install April 2014, update rollup for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 (2919355) in Windows 8.1 or Windows Server 2012 R2.

Registry information

To apply this update, you don't have to make any changes to the registry.

Restart requirement

You may have to restart the computer after you apply this update.

Update replacement information

This update doesn't replace a previously released update.

File information

The global version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 8.1 and Windows Server 2012 R2 file information and notes


  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.3.960 0.17 xxxWindows RT 8.1, Windows 8.1, and Windows Server 2012 R2RTMGDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information" section. MUM, MANIFEST, and the associated security catalog (.cat) files, are very important to maintain the state of the updated components. The security catalog files, for which the attributes aren't listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows 8.1
File nameFile versionFile sizeDateTimePlatform
Bfe.dll6.3.9600.18009570,36810-Aug-201517:01x86
Fwpuclnt.dll6.3.9600.18009272,38410-Aug-201516:56x86
Ikeext.dll6.3.9600.18009734,20810-Aug-201516:58x86
Nshwfp.dll6.3.9600.18009561,66410-Aug-201516:46x86
Bfe.dll6.3.9600.18009570,36810-Aug-201517:01x86
Fwpuclnt.dll6.3.9600.18009272,38410-Aug-201516:56x86
Ikeext.dll6.3.9600.18009734,20810-Aug-201516:58x86
Networksecurity-ppdlic.xrm-msNot applicable3,05912-Aug-201520:04Not applicable
Nshwfp.dll6.3.9600.18009561,66410-Aug-201516:46x86
Wfplwfs.sys6.3.9600.1748569,44010-Nov-201417:47x86
For all supported x64-based versions of Windows 8.1 or Windows Server 2012 R2
File nameFile versionFile sizeDateTimePlatform
Bfe.dll6.3.9600.18009845,31210-Aug-201518:15x64
Fwpuclnt.dll6.3.9600.18009422,40010-Aug-201518:06x64
Ikeext.dll6.3.9600.180091,084,92810-Aug-201518:15x64
Nshwfp.dll6.3.9600.18009713,21610-Aug-201517:49x64
Bfe.dll6.3.9600.18009845,31210-Aug-201518:15x64
Fwpuclnt.dll6.3.9600.18009422,40010-Aug-201518:06x64
Ikeext.dll6.3.9600.180091,084,92810-Aug-201518:15x64
Networksecurity-ppdlic.xrm-msNot applicable3,05912-Aug-201520:25Not applicable
Nshwfp.dll6.3.9600.18009713,21610-Aug-201517:49x64
Wfplwfs.sys6.3.9600.17485136,51210-Nov-201418:06x64
Fwpuclnt.dll6.3.9600.18009272,38410-Aug-201516:56x86
Nshwfp.dll6.3.9600.18009561,66410-Aug-201516:46x86
For all supported Windows RT 8.1
File nameFile versionFile sizeDateTimePlatform
Bfe.dll6.3.9600.18009528,89610-Aug-201516:46Not applicable
Fwpuclnt.dll6.3.9600.18009246,78410-Aug-201516:41Not applicable
Ikeext.dll6.3.9600.18009634,36810-Aug-201516:42Not applicable
Nshwfp.dll6.3.9600.18009559,61610-Aug-201516:33Not applicable
Bfe.dll6.3.9600.18009528,89610-Aug-201516:46Not applicable
Fwpuclnt.dll6.3.9600.18009246,78410-Aug-201516:41Not applicable
Ikeext.dll6.3.9600.18009634,36810-Aug-201516:42Not applicable
Networksecurity-ppdlic.xrm-msNot applicable3,05912-Aug-201519:39Not applicable
Nshwfp.dll6.3.9600.18009559,61610-Aug-201516:33Not applicable
Wfplwfs.sys6.3.9600.1748570,98410-Nov-201417:52Not applicable

Additional file information


Additional file information for Windows 8.1 and for Windows Server 2012 R2

Additional files for all supported x86-based versions of Windows 8.1
File propertyValue
File nameX86_2fd7fba4fd82e6bcd110fb8319ec8fc5_31bf3856ad364e35_6.3.9600.18012_none_7eb448aeab9918a8.manifest
File versionNot applicable
File size704
Date (UTC)13-Aug-2015
Time (UTC)23:49
PlatformNot applicable
File nameX86_34b29f48bc2ec6f7750770fc44efed18_31bf3856ad364e35_6.3.9600.18012_none_4186489e5cce3e47.manifest
File versionNot applicable
File size710
Date (UTC)13-Aug-2015
Time (UTC)23:49
PlatformNot applicable
File nameX86_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.3.9600.18012_none_7af261d9324272f1.manifest
File versionNot applicable
File size97,109
Date (UTC)12-Aug-2015
Time (UTC)20:10
PlatformNot applicable
File nameX86_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.18012_none_620db00e45edb2cf.manifest
File versionNot applicable
File size95,167
Date (UTC)13-Aug-2015
Time (UTC)23:59
PlatformNot applicable

Additional files for all supported x64-based versions of Windows 8.1 and of Windows Server 2012 R2
File propertyValue
File nameAmd64_168bbcab89ea2fc76b8701dae1f62723_31bf3856ad364e35_6.3.9600.18012_none_e385ca72999a027a.manifest
File versionNot applicable
File size708
Date (UTC)13-Aug-2015
Time (UTC)23:49
PlatformNot applicable
File nameAmd64_6cda2c8c00fcb0dd874827ec171f1109_31bf3856ad364e35_6.3.9600.18012_none_8fe8e947ef778d38.manifest
File versionNot applicable
File size708
Date (UTC)13-Aug-2015
Time (UTC)23:49
PlatformNot applicable
File nameAmd64_84bcdd30ecbbcff02c0bbf6fba735ca2_31bf3856ad364e35_6.3.9600.18012_none_f8dd5049884ab07b.manifest
File versionNot applicable
File size714
Date (UTC)13-Aug-2015
Time (UTC)23:49
PlatformNot applicable
File nameAmd64_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.3.9600.18012_none_d710fd5cea9fe427.manifest
File versionNot applicable
File size97,115
Date (UTC)12-Aug-2015
Time (UTC)20:26
PlatformNot applicable
File nameAmd64_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.18012_none_be2c4b91fe4b2405.manifest
File versionNot applicable
File size95,173
Date (UTC)14-Aug-2015
Time (UTC)00:18
PlatformNot applicable
File nameWow64_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.18012_none_c880f5e432abe600.manifest
File versionNot applicable
File size19,282
Date (UTC)12-Aug-2015
Time (UTC)20:09
PlatformNot applicable

Additional files for all supported Windows RT 8.1
File propertyValue
File nameArm_2693705ce3d566c1089f6d87a98223eb_31bf3856ad364e35_6.3.9600.18012_none_0a3c71c0992b2003.manifest
File versionNot applicable
File size704
Date (UTC)13-Aug-2015
Time (UTC)23:49
PlatformNot applicable
File nameArm_eb813953987f4a936a8916204158ced2_31bf3856ad364e35_6.3.9600.18012_none_4db1bc44987abc3d.manifest
File versionNot applicable
File size710
Date (UTC)13-Aug-2015
Time (UTC)23:49
PlatformNot applicable
File nameArm_microsoft-windows-network-security-winpe_31bf3856ad364e35_6.3.9600.18012_none_7af4d431323f91b7.manifest
File versionNot applicable
File size97,109
Date (UTC)12-Aug-2015
Time (UTC)19:39
PlatformNot applicable
File nameArm_microsoft-windows-network-security_31bf3856ad364e35_6.3.9600.18012_none_6210226645ead195.manifest
File versionNot applicable
File size95,227
Date (UTC)13-Aug-2015
Time (UTC)23:49
PlatformNot applicable


Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
References
See the terminology that Microsoft uses to describe software updates.
Properties

Article ID: 3082353 - Last Review: 09/15/2015 17:08:00 - Revision: 1.0

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation, Windows 8.1 Enterprise, Windows 8.1 Pro, Windows 8.1, Windows RT 8.1

  • kbsurveynew kbfix kbexpertiseadvanced atdownload KB3082353
Feedback