Re: Windows 2003 Kerberos error Event ID #8

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 02/23/05


Date: Tue, 22 Feb 2005 19:06:17 -0600

The link below is for general kerberos troubleshooting but the problem seems
to be related to the smart card. Possibly the certificate has expired, was
revoked, or the private key is corrupted. In if this is happening with all
smart card users then there is a problem with wrong certificate type or
inability to locate the CRL or CA certificate, etc. Check Event Viewer on
both computers for any helpful info. --- Steve

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx

"Kerberos Error #8" <Kerberos Error #8 @discussions.microsoft.com> wrote in
message news:06B784D8-1AE7-4D46-85A9-A96606DF585B@microsoft.com...
>I am getting the following message "The Domain Controller rejected the
>client
> certificate used for smartcard logon. The error data contains the
> information returned from the certificate validation process." The error
> data bytes are 13 20 09 80.
> Where can I find out what the error data bytes mean



Relevant Pages

  • RE: Problems enabling smart card login on windows 2000
    ... Bad Certificate; ... Troubleshooting Windows 2000 PKI Deployment and Smart Card Logon ... | - Installing a Windows 2000 Server as a Domain Controller ...
    (microsoft.public.win2000.security)
  • Re: question about private certificate stored on smart card
    ... >> With Windows 2003 CA there is an option to archive user's private key. ... >> Archival is done automatically when certificate is issued. ... >> able to find out there are no smart card CSP available today that would ... > The software does allow recovery of smart card encryption certificates. ...
    (microsoft.public.win2000.security)
  • Re: Importing a Symmetric Key into the Microsoft Base Smart Card C
    ... On the Internet Accounts dialog box, click the Add button and select ... address stated in the e-mail certificate. ... account and click the Properties button. ... Outlook Express will ask you to insert your smart card. ...
    (microsoft.public.platformsdk.security)
  • Disable smart card authentication on Windows2000 Professional!
    ... to disable MS smart card authentication function in my ... To enable smart card or other certificate authentication ... certificate authority for your server certificate must be ...
    (microsoft.public.win2000.security)
  • Re: question about private certificate stored on smart card
    ... With Windows 2003 CA there is an option to archive user's private key. ... Archival is done automatically when certificate is issued. ... able to find out there are no smart card CSP available today that would ... that would enable users file encryption on a hard drive and later import it ...
    (microsoft.public.win2000.security)