IPSEC 'AUTH payload not received'

fortigate FG201f running 7.4.12 b2902

forticlient 7.4.8, managed by forticloud

intune pki (CloudPKI)

the payload (via sniff) appears to be sent, but fortigate ignores as the tunnel has been ignored.

wanting to set up a device cert based TCP IPSEC tunnel.  end goal is for the device to connect without user involvement.

from the ike debug logs:

session started on tcp 8443

proposal accepted

cert requested

cert sent (in 6 pieces

cert received and reassembled

client details sent, mostly correct except the OSVER.  this is a Win 11 device

peer is matched

“AUTH payload not received”

tunnel is closed

How do I diagnose why the tunnel was closed?  Why is the OSVER wrong?

debug log:

ike V=root:accepts ike tcp-transport(vd=0, vrf=0, intf=0:27, 162.252.yyy.yy:8443->142.167.xx.xx:58204 sock=42 refcnt=2 ph1=(nil)) (1).
ike V=root:0: comes 142.167.xx.xx:58204->162.252.yyy.yy:8443,ifindex=27,vrf=0,len=606....
ike V=root:0: IKEv2 exchange=SA_INIT id=225ee7034892962d/0000000000000000 len=606
ike 0: in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
ike V=root:0:225ee7034892962d/0000000000000000:411:sa bind new tcp-transport(vd=0, vrf=0, intf=0:27, 162.252.yyy.yy:8443->142.167.xx.xx:58204 sock=42 refcnt=2 ph1=(nil))
ike V=root:0:225ee7034892962d/0000000000000000:411: responder received SA_INIT msg
ike V=root:0:225ee7034892962d/0000000000000000:411: VID forticlient connect license 4C53427B6D465D1B337BB755A37A7FEF
ike V=root:0:225ee7034892962d/0000000000000000:411: VID Fortinet Endpoint Control B4F01CA951E9DA8D0BAFBBD34AD3044E
ike V=root:0:225ee7034892962d/0000000000000000:411: VID Forticlient EAP Extension C1DC4350476B98A429B91781914CA43E
ike V=root:0:225ee7034892962d/0000000000000000:411: received notify type FRAGMENTATION_SUPPORTED
ike V=root:0:225ee7034892962d/0000000000000000:411: received notify type NAT_DETECTION_SOURCE_IP
ike V=root:0:225ee7034892962d/0000000000000000:411: received notify type NAT_DETECTION_DESTINATION_IP
ike V=root:0:225ee7034892962d/0000000000000000:411: received notify type SIGNATURE_HASH_ALGORITHMS
ike V=root:0:225ee7034892962d/0000000000000000:411: incoming proposal:
ike V=root:0:225ee7034892962d/0000000000000000:411: proposal id = 1:
ike V=root:0:225ee7034892962d/0000000000000000:411:   protocol = IKEv2:
ike V=root:0:225ee7034892962d/0000000000000000:411:      encapsulation = IKEv2/none
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=ENCR, val=AES_CBC (key_len = 256)
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=INTEGR, val=AUTH_HMAC_SHA2_256_128
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=PRF, val=PRF_HMAC_SHA
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=PRF, val=PRF_HMAC_SHA2_512
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=PRF, val=PRF_HMAC_SHA2_384
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=PRF, val=PRF_HMAC_SHA2_256
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=DH_GROUP, val=MODP2048.
ike V=root:0:225ee7034892962d/0000000000000000:411: proposal id = 2:
ike V=root:0:225ee7034892962d/0000000000000000:411:   protocol = IKEv2:
ike V=root:0:225ee7034892962d/0000000000000000:411:      encapsulation = IKEv2/none
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=ENCR, val=AES_CBC (key_len = 256)
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=INTEGR, val=AUTH_HMAC_SHA2_256_128
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=PRF, val=PRF_HMAC_SHA
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=PRF, val=PRF_HMAC_SHA2_512
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=PRF, val=PRF_HMAC_SHA2_384
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=PRF, val=PRF_HMAC_SHA2_256
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=DH_GROUP, val=MODP2048.
ike V=root:0:225ee7034892962d/0000000000000000:411: matched proposal id 1
ike V=root:0:225ee7034892962d/0000000000000000:411: proposal id = 1:
ike V=root:0:225ee7034892962d/0000000000000000:411:   protocol = IKEv2:
ike V=root:0:225ee7034892962d/0000000000000000:411:      encapsulation = IKEv2/none
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=ENCR, val=AES_CBC (key_len = 256)
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=INTEGR, val=AUTH_HMAC_SHA2_256_128
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=PRF, val=PRF_HMAC_SHA2_256
ike V=root:0:225ee7034892962d/0000000000000000:411:         type=DH_GROUP, val=MODP2048.
ike V=root:0:225ee7034892962d/0000000000000000:411: lifetime=86400
ike V=root:0:225ee7034892962d/0000000000000000:411: SA proposal chosen, matched gateway EMS-TCP-VPN
ike V=root:0:EMS-TCP-VPN:EMS-TCP-VPN: created connection: 0x7f8c3e97bd40 27 162.252.yyy.yy->142.167.xx.xx:58204.
ike V=root:0:EMS-TCP-VPN: HA start as master
ike V=root:0:EMS-TCP-VPN:411: processing notify type NAT_DETECTION_SOURCE_IP
ike V=root:0:EMS-TCP-VPN:411: processing NAT-D payload
ike V=root:0:EMS-TCP-VPN:411: NAT detected: PEER
ike V=root:0:EMS-TCP-VPN:411: process NAT-D
ike V=root:0:EMS-TCP-VPN:411: processing notify type NAT_DETECTION_DESTINATION_IP
ike V=root:0:EMS-TCP-VPN:411: processing NAT-D payload
ike V=root:0:EMS-TCP-VPN:411: NAT detected: ME PEER
ike V=root:0:EMS-TCP-VPN:411: process NAT-D
ike V=root:0:EMS-TCP-VPN:411: processing notify type FRAGMENTATION_SUPPORTED
ike V=root:0:EMS-TCP-VPN:411: processing notify type SIGNATURE_HASH_ALGORITHMS
ike V=root:0:EMS-TCP-VPN:411: FEC vendor ID received FEC but IP not set
ike 0:EMS-TCP-VPN:411: FCT EAP 2FA extension vendor ID received
ike V=root:0:EMS-TCP-VPN:411: responder preparing SA_INIT msg
ike V=root:0:EMS-TCP-VPN:411: generate DH public value request queued
ike V=root:0:EMS-TCP-VPN:411: responder preparing SA_INIT msg
ike V=root:0:EMS-TCP-VPN:411: compute DH shared secret request queued
ike V=root:0:EMS-TCP-VPN:411: responder preparing SA_INIT msg
ike V=root:0:EMS-TCP-VPN:411: create NAT-D hash local 162.252.yyy.yy/8443 remote 142.167.xx.xx/58204
ike V=root:0:EMS-TCP-VPN:411: sending CERTREQ payload (len=21)
ike V=root:0:EMS-TCP-VPN:411: certreq[0]: '0FF54B48F2DA02B3B3A3CBCD046A0BDB1B6F3329'
ike 0:EMS-TCP-VPN:411: IKE SA 225ee7034892962d/a26b0a97d3da22a3 SK_ei 32:351286F3A4D04E2E485244E25C3526CCC7A894A340ED515B70B05E2C1C269AE3
ike 0:EMS-TCP-VPN:411: IKE SA 225ee7034892962d/a26b0a97d3da22a3 SK_er 32:C7B5ACBF11ABC4A99FA07A9B7759909DD03C1A34B9A2710FDCF99DF1900FCF7E
ike 0:EMS-TCP-VPN:411: IKE SA 225ee7034892962d/a26b0a97d3da22a3 SK_ai 32:76139396AAD4F511E5C6FB1B14181C3EA9238F3DBCDF256A3D7C82928EE3C912
ike 0:EMS-TCP-VPN:411: IKE SA 225ee7034892962d/a26b0a97d3da22a3 SK_ar 32:61E5666940E5AE1EFC44AF56F2ACC492F01B6833216704B5C274084F30262564
ike V=root:0: comes 142.167.xx.xx:58204->162.252.yyy.yy:8443,ifindex=27,vrf=0,len=548....
ike V=root:0: IKEv2 exchange=AUTH id=225ee7034892962d/a26b0a97d3da22a3:00000001 len=548
ike 0: in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
ike V=root:0:EMS-TCP-VPN: HA state master(2)
ike V=root:0:EMS-TCP-VPN:411: encrypted fragment 1 of 6 queued
ike V=root:0: comes 142.167.xx.xx:58204->162.252.yyy.yy:8443,ifindex=27,vrf=0,len=548....
ike V=root:0: IKEv2 exchange=AUTH id=225ee7034892962d/a26b0a97d3da22a3:00000001 len=548
ike 0: in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
ike V=root:0:EMS-TCP-VPN: HA state master(2)
ike V=root:0:EMS-TCP-VPN:411: encrypted fragment 2 of 6 queued
ike V=root:0: comes 142.167.xx.xx:58204->162.252.yyy.yy:8443,ifindex=27,vrf=0,len=548....
ike V=root:0: IKEv2 exchange=AUTH id=225ee7034892962d/a26b0a97d3da22a3:00000001 len=548
ike 0: in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
ike V=root:0:EMS-TCP-VPN: HA state master(2)
ike V=root:0:EMS-TCP-VPN:411: encrypted fragment 3 of 6 queued
ike V=root:0: comes 142.167.xx.xx:58204->162.252.yyy.yy:8443,ifindex=27,vrf=0,len=548....
ike V=root:0: IKEv2 exchange=AUTH id=225ee7034892962d/a26b0a97d3da22a3:00000001 len=548
ike 0: in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
ike V=root:0:EMS-TCP-VPN: HA state master(2)
ike V=root:0:EMS-TCP-VPN:411: encrypted fragment 4 of 6 queued
ike V=root:0: comes 142.167.xx.xx:58204->162.252.yyy.yy:8443,ifindex=27,vrf=0,len=548....
ike V=root:0: IKEv2 exchange=AUTH id=225ee7034892962d/a26b0a97d3da22a3:00000001 len=548
ike 0: in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
ike V=root:0:EMS-TCP-VPN: HA state master(2)
ike V=root:0:EMS-TCP-VPN:411: encrypted fragment 5 of 6 queued
ike V=root:0: comes 142.167.xx.xx:58204->162.252.yyy.yy:8443,ifindex=27,vrf=0,len=100....
ike V=root:0: IKEv2 exchange=AUTH id=225ee7034892962d/a26b0a97d3da22a3:00000001 len=100
ike 0: in 225EE7034892962DA26B0A97D3DA22A33520230800000001000000640000004800060006638B4FC8F407F8F6F3D262F7482C2766C036A2FD282AD8979D7472538C1FDDE5D3E97143F9BB6859C346B28FAEBC8E2ADA291BAB3DA760AF750832940258BC13
ike V=root:0:EMS-TCP-VPN: HA state master(2)
ike V=root:0:EMS-TCP-VPN:411: encrypted fragment 6 of 6 queued
ike 0:EMS-TCP-VPN:411: dec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
ike 0:EMS-TCP-VPN:411: dec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
ike 0:EMS-TCP-VPN:411: dec 225EE7034892962DA26B0A97D3DA22A33520230800000001000001FC00000008000300062F63757272656E742E63726C308201BB06082B06010505070101048201AD308201A930818906082B06010505073002867D68747470733A2F2F30663632373238386461666134396434613333313136373338613361383463382E656173747573322E706B692E617A7572652E6E65742F6365727469666963617465417574686F7269746965732F64313564373130302D333935302D343637332D626566352D3636626433383830623735335F763130818F06082B06010505073002868182687474703A2F2F7072696D6172792D63646E2E706B692E617A7572652E6E65742F656173747573322F636163657274732F30663632373238386461666134396434613333313136373338613361383463382F64313564373130302D333935302D343637332D626566352D3636626433383830623735335F76312F636572742E63657230818806082B06010505073002867C687474703A2F2F30663632373238386461666134396434613333313136373338613361383463382E656173747573322E706B692E617A7572652E6E65742F6365727469666963617465417574686F7269746965732F64313564373130302D333935302D343637332D626566352D3636626433383830623735335F7631300D06092A864886F70D01010C
ike 0:EMS-TCP-VPN:411: dec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
ike 0:EMS-TCP-VPN:411: dec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
ike 0:EMS-TCP-VPN:411: dec 225EE7034892962DA26B0A97D3DA22A335202308000000010000003600000008000600060000070000100000FFFF00000000FFFFFFFF
ike V=root:0:EMS-TCP-VPN:411: reassembled fragmented message
ike V=root:0:EMS-TCP-VPN:411: responder received AUTH msg
ike V=root:0:EMS-TCP-VPN:411: processing notify type INITIAL_CONTACT
ike V=root:0:EMS-TCP-VPN:411: processing notify type FORTICLIENT_CONNECT
ike V=root:0:EMS-TCP-VPN:411: received FCT data len = 351, data = 'VER=1
FCTVER=7.4.8.2066
UID=66FEE5B1BADB40A799FEAAD9D836EFF4
IP=192.168.1.48
MAC=90-2e-16-dc-44-22;14-5a-fc-36-db-fa;14-5a-fc-36-db-f9;16-5a-fc-36-db-f9;96-5a-fc-36-db-f9;
HOST=AAAA-000000
USER=pocuser1test
OSVER=Microsoft Windows 8.0 Enterprise Edition, 64-bit (build 9200)
REG_STATUS=0
EMSSN=FCTEMS8825002268
EMSID=00000000000000000000000000000000
'
ike V=root:0:EMS-TCP-VPN:411: received FCT-UID : 66FEE5B1BADB40A799FEAAD9D836EFF4
ike V=root:0:EMS-TCP-VPN:411: received EMS SN : FCTEMS8825002268
ike V=root:0:EMS-TCP-VPN:411: received EMS tenant ID : 00000000000000000000000000000000
ike V=root:0:EMS-TCP-VPN:411: received peer identifier DER_ASN1_DN 'CN = AAAA-000000'
ike V=root:0:EMS-TCP-VPN:411: match gw peer ID by FNBAM
ike V=root:0:EMS-TCP-VPN:411: AUTH payload not received
ike V=root:0:EMS-TCP-VPN:411: schedule delete of IKE SA 225ee7034892962d/a26b0a97d3da22a3
ike V=root:0:EMS-TCP-VPN:411: scheduled delete of IKE SA 225ee7034892962d/a26b0a97d3da22a3
ike V=root:destorys tcp-transport(vd=0, vrf=0, intf=27:27, 162.252.yyy.yy:8443->142.167.xx.xx:58204 sock=42 refcnt=0 ph1=(nil)) (0).
ike V=root:0:EMS-TCP-VPN: connection expiring due to phase1 down
ike V=root:0:EMS-TCP-VPN: going to be deleted
ike V=root:0:EMS-TCP-VPN: reset TCP ports