{"id":519,"date":"2022-09-07T11:05:55","date_gmt":"2022-09-07T18:05:55","guid":{"rendered":"https:\/\/blog.iabsolute.com\/?p=519"},"modified":"2022-09-07T11:05:55","modified_gmt":"2022-09-07T18:05:55","slug":"event-id-29","status":"publish","type":"post","link":"https:\/\/blog.iabsolute.com\/?p=519","title":{"rendered":"Event ID – 29"},"content":{"rendered":"\n

According to Microsoft :<\/strong>
Cause<\/strong>
This event is logged when the Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified.
Resolution<\/strong>
Request a new domain controller certificate<\/strong>
Kerberos uses a domain controller certificate to ensure that the authentication information sent over the network is encrypted. If the certificate is missing or is no longer valid, you must delete the domain controller certificate and then request a new one.
To resolve this issue:
Delete the domain controller certificate that is no longer valid.
Request a new certificate.
To perform these procedures, you must be a member of the Domain Admins group, or you must have been delegated the appropriate authority.
Delete the domain controller certificate that is no longer valid<\/strong>
To delete the domain controller certificate that is no longer valid:
1.On the domain controller in which the issue is occurring, click\u00a0Start<\/strong>, and then click\u00a0Run<\/strong>.
2.Type\u00a0mmc.exe<\/strong>, and then press ENTER.
3.If the\u00a0User Account Control<\/strong>\u00a0dialog box appears, confirm that the action it displays is what you want, and then click\u00a0Continue<\/strong>.
4.Click\u00a0File<\/strong>, and then click\u00a0Add\/Remove Snap-in<\/strong>.
5.Click\u00a0Certificates<\/strong>, and then click\u00a0Add<\/strong>.
6.Click\u00a0Computer account<\/strong>, click\u00a0Next<\/strong>, and then click\u00a0Finish<\/strong>.
7.Click\u00a0OK<\/strong>\u00a0to open the Certificates snap-in.
8.Expand\u00a0Certificates (Local computer)<\/strong>, expand\u00a0Personal<\/strong>, and then click\u00a0Certificates<\/strong>.
9.Right-click the old domain controller certificate, and then click\u00a0Delete<\/strong>.
10.Click\u00a0Yes<\/strong>, confirming that you want to delete the certificate.
11.After the certificate is deleted, follow the procedure in the “Request a new certificate” section.
Request a new certificate<\/strong>
To request a new certificate:
1.Expand\u00a0Certificates (Local computer)<\/strong>, right-click\u00a0Personal<\/strong>, and then click\u00a0Request New Certificate<\/strong>.
2.Complete the appropriate information in the Certificate Enrollment Wizard for a domain controller certificate.
3.Close the Certificates snap-in.
Verify<\/strong>
To perform this procedure, you must be a member of the\u00a0Domain Admins<\/strong>\u00a0group, or you must have been delegated the appropriate authority.
To verify that the Kerberos Key Distribution Center (KDC) certificate is available and working properly:
1.Log on to a computer within your domain.
2.Click\u00a0Start<\/strong>, point to\u00a0All Programs<\/strong>, click\u00a0Accessories<\/strong>, right-click\u00a0Command Prompt<\/strong>, and then click\u00a0Run as administrator<\/strong>.
3.If the\u00a0User Account Control<\/strong>\u00a0dialog box appears, confirm that the action it displays is what you want, and then click\u00a0Continue<\/strong>.
4.At the command prompt, type\u00a0certutil -dcinfo verify<\/strong>, and then press ENTER.
5.If you receive a successful verification, the Kerberos KDC certificate is installed and operating correctly.<\/p>\n","protected":false},"excerpt":{"rendered":"

According to Microsoft :CauseThis event is logged when the Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified.ResolutionRequest a new domain controller certificateKerberos uses a domain … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-519","post","type-post","status-publish","format-standard","hentry","category-windows"],"_links":{"self":[{"href":"https:\/\/blog.iabsolute.com\/index.php?rest_route=\/wp\/v2\/posts\/519","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.iabsolute.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.iabsolute.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.iabsolute.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.iabsolute.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=519"}],"version-history":[{"count":1,"href":"https:\/\/blog.iabsolute.com\/index.php?rest_route=\/wp\/v2\/posts\/519\/revisions"}],"predecessor-version":[{"id":520,"href":"https:\/\/blog.iabsolute.com\/index.php?rest_route=\/wp\/v2\/posts\/519\/revisions\/520"}],"wp:attachment":[{"href":"https:\/\/blog.iabsolute.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=519"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.iabsolute.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=519"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.iabsolute.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=519"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}