Frequently Asked Questions

With macOS 26 Tahoe, Apple has removed support for all Diffie-Hellman (DH) groups below group 14 in the built-in IKEv2 VPN client. This includes commonly used groups like DH Group 1, Group 2, and others up to Group 13, which were widely supported by older VPN gateways and firewall configurations.

These groups are now considered cryptographically weak and no longer meet Apple’s security standards. As a result, VPN connections using these groups will fail to negotiate, often with vague error messages such as “IKEv2 negotiation failed” or “No acceptable proposal found.”

VPN Tracker 365 continues to support legacy DH groups, including Group 2 and others, ensuring continued compatibility with existing VPN setups. You can reconnect without changing your VPN gateway by following this step-by-step guide.