Unable to delete Azure VPN gateway

Question

Unable to delete Azure VPN gateway

rwh202 20

Since removing the basic IP address from our basic VPN gateway, it has been borked.

I've been able to set up a shiny new Standard VPN on a different VNET, so not interested in fixing it but I need to delete the old gateway - this fails in the portal, and azure CLI with no helpful message or log:

Error code: ResourceOperationFailure
Message: The resource operation completed with terminal provisioning state 'Failed'.

Tried the proposed solution here, but no option to delete:

https://learn.microsoft.com/en-us/answers/questions/1285753/cannot-delete-a-virtual-network-gateway

It needs a backend kick please.

Vallepu Venkateswarlu 10,595 Reputation points Microsoft External Staff Moderator

2026-06-11T16:07:37.33+00:00
Hi @ rwh202,

Welcome to Microsoft Q&A Platform.

It looks like your old VPN gateway is stuck in a terminal ‘Failed’ provisioning state, so every delete call just errors out with ResourceOperationFailure. When that happens, the gateway can’t clean itself up and has to be force-deleted or “unstuck” first.

Remove all gateway dependencies in the right order

Go to your VPN gateway in the Azure portal > Connections, and delete every connection.

Delete any associated Local Network Gateways.

Delete the Public IP(s) tied to that gateway.

Finally, go back to the VPN gateway blade and click Delete again (or run az network vpn-gateway delete --name <gatewayName> --resource-group <rg>).

Restore a healthy provisioning state manually

Sometimes doing a GET/SET (or Update) write operation “wakes up” the resource and flips it back to Succeeded, letting you delete it.

In PowerShell:

Get-AzVpnGateway -Name <gatewayName> -ResourceGroupName <rg> | Update-AzVpnGateway

If the above steps did not help resolve your issue, please feel free to share the details in a private message so we can proceed with further troubleshooting over a Teams call. I am happy to connect with you on Teams to investigate and resolve the issue.

References: Cannot delete a Virtual Network Gateway
Delete a virtual network gateway using the portal
Troubleshoot Azure Microsoft.Network failed provisioning state

Please "upvote" if the information helped you. This will help us and others in the community as well.
rwh202 20 Reputation points

2026-06-11T16:33:59.22+00:00
Just to clarify, this is an Azure 'Virtual network gateway' not a 'VPN gateway' - my mistake.

However, I've completed the above steps modified to suit, with no change to the failed state, so deletion still not possible.

Get-AzVirtualnetworkgateway -Name <gatewayname> -ResourceGroupName <rg> | Set-AzVirtualNetworkGateway
Vallepu Venkateswarlu 10,595 Reputation points Microsoft External Staff Moderator

2026-06-11T16:52:02.29+00:00

Please share the results of the Get and Set commands with me via private message.

Additionally, please raise a support request using the link shared in the private message. Once we receive the requested information, we will review it and coordinate with the backend team for further investigation.

Answer accepted by question author

Vallepu Venkateswarlu 10,595 Microsoft External Staff Moderator

Hi @ rwh202,

As discussed, the backend team has confirmed that the stuck operation has been cleared. Please proceed with deleting the VPN Gateway.

As per your confirmation, the VPN Gateway has now been successfully deleted.

Since the issue has been resolved, please let us know if you need any further assistance.

Pleaseand “up-vote” wherever the information provided helps you, **this can be beneficial to other community members.

0 comments

2 additional answers

Your answer

Vallepu Venkateswarlu 10,595 Reputation points Microsoft External Staff Moderator

2026-06-11T16:07:37.33+00:00

Hi @ rwh202,

Welcome to Microsoft Q&A Platform.

It looks like your old VPN gateway is stuck in a terminal ‘Failed’ provisioning state, so every delete call just errors out with ResourceOperationFailure. When that happens, the gateway can’t clean itself up and has to be force-deleted or “unstuck” first.

Remove all gateway dependencies in the right order

Go to your VPN gateway in the Azure portal > Connections, and delete every connection.

Delete any associated Local Network Gateways.

Delete the Public IP(s) tied to that gateway.

Finally, go back to the VPN gateway blade and click Delete again (or run az network vpn-gateway delete --name <gatewayName> --resource-group <rg>).

Restore a healthy provisioning state manually

Sometimes doing a GET/SET (or Update) write operation “wakes up” the resource and flips it back to Succeeded, letting you delete it.

In PowerShell:

Get-AzVpnGateway -Name <gatewayName> -ResourceGroupName <rg> | Update-AzVpnGateway

If the above steps did not help resolve your issue, please feel free to share the details in a private message so we can proceed with further troubleshooting over a Teams call. I am happy to connect with you on Teams to investigate and resolve the issue.

References: Cannot delete a Virtual Network Gateway
Delete a virtual network gateway using the portal
Troubleshoot Azure Microsoft.Network failed provisioning state

Please "upvote" if the information helped you. This will help us and others in the community as well.
rwh202 20 Reputation points

2026-06-11T16:33:59.22+00:00

Just to clarify, this is an Azure 'Virtual network gateway' not a 'VPN gateway' - my mistake.

However, I've completed the above steps modified to suit, with no change to the failed state, so deletion still not possible.

Get-AzVirtualnetworkgateway -Name <gatewayname> -ResourceGroupName <rg> | Set-AzVirtualNetworkGateway
Vallepu Venkateswarlu 10,595 Reputation points Microsoft External Staff Moderator

2026-06-11T16:52:02.29+00:00

Please share the results of the Get and Set commands with me via private message.

Additionally, please raise a support request using the link shared in the private message. Once we receive the requested information, we will review it and coordinate with the backend team for further investigation.

Answer 1

Brian Betsill 20

I had this same issue and found that it was due to the P2S connection had an outdated root cert on file. I deleted the outdated cert and it let me remove the basic IP address.

rwh202 20 Reputation points

2026-06-25T08:00:45.55+00:00

That may have been my underlying issue that caused everything to get stuck, but subsequently deleting the certs didn't get me any further and required a back end purge.

Answer 2

Hello @rwh202,

Thank you for reaching out Q&A forum.

When you encounter a ResourceOperationFailure error with a terminal provisioning state of ‘Failed’ while trying to delete a VPN gateway in Azure, it typically indicates that there are issues with the resource that prevent it from being deleted. Here are some steps you can take to resolve this:

Check Dependencies: Ensure that there are no existing connections or dependencies tied to the VPN gateway. You may need to remove any connections to the virtual network gateway before attempting to delete it.
Use PowerShell or Azure CLI: If the Azure portal is not allowing you to delete the gateway, you can try using PowerShell or Azure CLI commands to force the deletion. The command to delete a site-to-site VPN gateway using PowerShell is:
```
   Remove-AzVirtualNetworkGateway -Name "YourGatewayName" -ResourceGroupName "YourResourceGroupName"
```
Make sure to replace YourGatewayName and YourResourceGroupName with your actual gateway and resource group names.
Check for Locks: Verify if there are any resource locks applied to the VPN gateway that might be preventing its deletion. You can check this in the Azure portal under the resource’s settings.

If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.