Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » KDC certificate
KDC certificate [message #156006] Tue, 09 June 2009 06:07 Go to next message
Kevin Gallagher  is currently offline Kevin Gallagher
Messages: 18
Registered: July 2009
Junior Member
I am getting the following warning. Is there a problem with my PKI and if so
what should I do?

"The currently selected KDC certificate was once valid, but now is invalid
and no suitable replacement was found. Smartcard logon may not function
correctly if this problem is not remedied. Have the system administrator
check on the state of the domain's public key infrastructure."
Re: KDC certificate [message #156009 is a reply to message #156006] Tue, 09 June 2009 07:00 Go to previous messageGo to next message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello Kevin,

Start here:
http://www.eventid.net/display.asp?eventid=20&eventno=33 96&source=KDC&phase=1

http://support.microsoft.com/kb/839880

You provided a bit less information, i assume it is a DC? Is it also CA,
if yes what kind of?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> The currently selected KDC certificate was once valid, but now is
> invalid and no suitable replacement was found
>
Re: KDC certificate [message #156012 is a reply to message #156009] Tue, 09 June 2009 07:42 Go to previous messageGo to next message
Kevin Gallagher  is currently offline Kevin Gallagher
Messages: 18
Registered: July 2009
Junior Member
Yes it is a Windows 2003 DC but not a CA.

"Meinolf Weber [MVP-DS]" wrote:

> Hello Kevin,
>
> Start here:
> http://www.eventid.net/display.asp?eventid=20&eventno=33 96&source=KDC&phase=1
>
> http://support.microsoft.com/kb/839880
>
> You provided a bit less information, i assume it is a DC? Is it also CA,
> if yes what kind of?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > The currently selected KDC certificate was once valid, but now is
> > invalid and no suitable replacement was found
> >
>
>
>
Re: KDC certificate [message #156015 is a reply to message #156012] Tue, 09 June 2009 08:18 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
I would suggest you repost in the security NewsGroup. You may get some
assistance in here but the PKI experts reside at:
microsoft.public.windows.server.security


--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Kevin Gallagher" <KevinGallagher@discussions.microsoft.com> wrote in
message news:4A700A97-9C41-4331-BDCB-C47900DDA86E@microsoft.com...
> Yes it is a Windows 2003 DC but not a CA.
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Kevin,
>>
>> Start here:
>> http://www.eventid.net/display.asp?eventid=20&eventno=33 96&source=KDC&phase=1
>>
>> http://support.microsoft.com/kb/839880
>>
>> You provided a bit less information, i assume it is a DC? Is it also CA,
>> if yes what kind of?
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>
>> > The currently selected KDC certificate was once valid, but now is
>> > invalid and no suitable replacement was found
>> >
>>
>>
>>
Re: KDC certificate [message #156029 is a reply to message #156006] Tue, 09 June 2009 11:28 Go to previous message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Hi
Have a look at this:
http://www.actividentity.com/support/kbase/cms/display_artic le.php?kbid=701

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"Kevin Gallagher" <KevinGallagher@discussions.microsoft.com> wrote in
message news:0B10119D-0BC3-4A6B-8E05-4796AF256498@microsoft.com...
>I am getting the following warning. Is there a problem with my PKI and if
>so
> what should I do?
>
> "The currently selected KDC certificate was once valid, but now is invalid
> and no suitable replacement was found. Smartcard logon may not function
> correctly if this problem is not remedied. Have the system administrator
> check on the state of the domain's public key infrastructure."
Previous Topic:AD Replication issues
Next Topic:Help moving a single user from a child to a parent domain
Goto Forum:
  


Current Time: Sat Oct 21 19:08:49 EDT 2017

Total time taken to generate the page: 0.03134 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software