Symptom
Crypto ipsec policy installation fails.
If GETVPN is used the following log message may be seen:
%GDOI-5-GM_FAILED_TO_INSTALL_POLICIES: FAILED: Installation of Reg/Rekey policies from KS x.x.x.x for group & gm identity y.y.y.y
Conditions
C11xx platforms running 17.x with IPsec.
The issue may appear after removing/adding a crypto map multiple times or multiple interface flaps (which cause a VPN tunnel flap as well).
Workaround
Reload the affected router.
Further Problem Description
The problem is not GetVPN specific.
