| Description |
This article describes how to fix the IPsec tunnels that are down on FortiGate with FIPS enabled after the firmware upgrade to v7.6.3. |
| Scope | FortiGate. |
| Solution |
The following errors are seen on the IKE debug.
2026-01-20 05:45:00.856557 ike V=root:0:site1:934: generate DH public value request pending 2026-01-20 05:45:00.923568 ike V=root:0:site1:934: compute DH shared secret request pending
Change the IPsec VPN tunnel PSK secret to have at least 14 characters to fix the IPsec VPN tunnels that are down.
Starting on FortiOS v7.6.1 with FIPS enabled, the IPsec VPN PSK secret needs to be at least 14 characters. This also affects dialup IPsec tunnel.
How to change the PSK secret on an IPsec VPN tunnel via CLI:
config vpn ipsec phase1-interface |
