| Previous | Next |
| SEC_E_WRONG_PRINCIPAL | SEC_E_UNTRUSTED_ROOT |
SEC_E_TIME_SKEW
SEC_E_TIME_SKEW means that the clocks used by the client and server differ beyond what the authentication protocol accepts. It is especially relevant to Kerberos, where time limits help prevent replay of authentication data.
What to check
- UTC time, date and time-zone configuration on both ends.
- Whether each machine is synchronizing with its intended time source.
- Virtual-machine pause, resume or snapshot events that can leave a guest clock behind.
What not to do
Do not increase protocol tolerances as the first response. Correct time synchronization, then repeat the authentication attempt and investigate remaining trust or principal errors separately.
Microsoft: SSPI Status Codes · TLS and Schannel Overview
Looking for a different code? Search another status or error code.