13887 is a network security policy result. Microsoft’s system-code table describes this value as: “Certificate doesn't chain to a trusted root in IPsec policy.”
Code reference and safe checks
Read the exact screen and operation before selecting a repair. This page does not run commands or collect files, keys or logs.
What this value means
Microsoft’s system-code table describes this value as: “Certificate doesn't chain to a trusted root in IPsec policy.”
ERROR_IPSEC_IKE_CERT_CHAIN_POLICY_MISMATCH is a Win32 system result, usually returned to an application or API caller. It is not a Windows blue-screen code or a diagnosis of the whole PC.
| Code | 13887 |
|---|---|
| Hex form | 0x363F |
| Symbol | ERROR_IPSEC_IKE_CERT_CHAIN_POLICY_MISMATCH |
| Windows family | Win32 system codes |
| Source level | Microsoft code and symbol entry |
Safe next steps
- For 13887 (ERROR_IPSEC_IKE_CERT_CHAIN_POLICY_MISMATCH), identify the IPsec, firewall or network-policy operation and the exact endpoint or rule involved.
- Compare the policy and connection logs with the organization’s approved configuration. Keep security protection enabled while investigating.
- Ask the network or security administrator before changing IPsec policy, certificates or firewall rules.
After one step, repeat the original operation and record whether this same code returns. A different code needs a fresh interpretation.
What this code cannot prove
The source establishes the identifier and reference meaning. It does not establish the cause on your specific PC.
If the result differs from the documented message or a repair could remove data, stop and use the official source or vendor support.
Official reference and verification
Source type: Microsoft code and symbol entry. Checked against the source set on Nov 2, 2026.
The reference gives the meaning of this identifier. It does not inspect your PC or guarantee that one repair will work.