> Source: [sk1000098](https://support.checkpoint.com/results/sk/sk1000098)

# sk1000098 - Capsule Connect Fails to Establish Remote Access VPN when Data Integrity Uses SHA-384 or Higher

| Property | Value |
|----------|-------|
| Solution ID | sk1000098 |
| Date Created | 2026-09-02 |
| Last Modified | 2026-09-07 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Android, iOS |

## Symptoms

- * Capsule Connect users cannot establish Remote Access Virtual Private Network (VPN) connections when Data Integrity algorithm is set to SHA-384 or higher.
* Capsule Connect application displays this error message:  

> ```
> The client does not support the data integrity algorithm.
> ```

* Capsule Connect client logs show error code `905`:

> ```text
> 905: The client does not support the data integrity algorithm.
> ```

* Capsule Connect plugin logs show Key Management Protocol (KMP) and connection iteration failures:

> ```text
> ccc_iter failed: The client does not support the data integrity algorithm (905).
> ```

* When IPsec Data Integrity is set to SHA-384 or a stronger algorithm, Capsule Connect does not start VPN negotiation traffic to the Security Gateway.

<!-- -->

## Cause

This behavior is by design. Capsule Connect does not support SHA-384 or stronger Data Integrity algorithms for IPsec VPN.

As a result, Capsule Connect raises error code `905` and does not send VPN negotiation traffic to the Security Gateway.

## Solution

Capsule Connect does not currently support SHA-384 or stronger Data Integrity algorithms.  

To enable this feature, submit an [Request for Enhancement (RFE)](https://support.checkpoint.com/results/sk/sk71840).

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content