How to fix error error-ipsec-ike-strong-cred-authorization-and-certmap-failure in Windows 11

Solution Steps

1. 1 First, verify that your certificate is installed correctly. Press Windows key + R, type 'certmgr.msc' and press Enter. Navigate to 'Personal' > 'Certificates'. Look for a certificate that is valid (not expired) and has a private key icon. If you don't see one, you need to install the certificate provided by your IT. Double-click the .pfx file and follow the wizard, choosing 'Local Machine' and 'Personal' store.
2. 2 If the certificate is present but you're still getting the error, check the certificate's properties. Right-click the certificate, select 'Properties', and go to the 'Details' tab. Look for 'Enhanced Key Usage' — it should include 'Client Authentication'. If it doesn't, the certificate is not meant for VPN authentication, and you need a different one from IT.
3. 3 Open your VPN client (e.g., Cisco AnyConnect, Pulse Secure). Go to its settings and find the authentication section. Ensure that 'Certificate' is selected and that the correct certificate is chosen. If there are multiple certificates, try selecting a different one that matches your company's requirements.
4. 4 If you're using Windows built-in VPN, go to Settings > Network & Internet > VPN, click your connection, and select 'Advanced options'. Under 'Authentication method', choose 'Microsoft: Smart Card or other certificate'. Then click 'Edit' next to 'Certificate' and select the correct certificate from the list. Save and try connecting.
5. 5 If the error persists, the certificate mapping on the server might be incorrect. Contact your IT department and provide them with the error code. They may need to update the certificate mapping in the VPN server's configuration.