9 окт. 2024 г. · The most apparent cause is expired CRL. This suggests that previous CRL was expired. Expired CRLs render the same error message (revocation is offline).

9 мая 2024 г. · The problem was the wrong "trust" setting. I had to install the updated Passport.admx file on the DC and then enable the Cloud Trust GPO setting.

6 апр. 2016 г. · We had the same issue and resolved it by re-issuing the domain controller certificates with the required KDC EKU.

4 февр. 2014 г. · When attempting to logon we get the following error message: "The Kerberos protocol encountered an error while validating the KDC certificate during smartcard ...

7 мар. 2020 г. · The domain controllers in the remote sites are unable to obtain a certificate using the template "Kerberos Authentication" (which recent DCs try to use when ...

26 июн. 2012 г. · We found CRL in certenroll folder were missing to validate revocation status from root CA. We copied CRL from Intermediate CA to Issuing Sub-CA ...

20 авг. 2014 г. · When we try to use certificates on computers that are not part of the domain, Windows complains that The revocation function was unable to check revocation.

6 июн. 2017 г. · I had a few RODCs and writeable DCs that were showing "Failed Requests" in the CA for their auto enrollment of the KerberosAuthentication Certificate.

21 июл. 2011 г. · Try certutil -pulse - this should check for templates the system has permission in, and enroll them. It should have no problem grabbing the certificate.

Windows 11 wireless clients get rejected by NPS due to untrusted certificate chain. Our customer has an 802.1X wireless network that's working fine for Windows ...