| Previous | Next |
| STATUS_PKINIT_NAME_MISMATCH | STATUS_KDC_INVALID_REQUEST |
STATUS_SMARTCARD_LOGON_REQUIRED
The authentication method did not satisfy the logon requirement
STATUS_SMARTCARD_LOGON_REQUIRED means Windows reached an authentication path for which smart-card logon is mandatory, but the presented logon used another credential method. The account can exist and the password can even be correct; the failure is the required authentication mechanism.
What to check
- Confirm whether the account has the smart-card-required flag or whether effective domain policy requires smart-card interactive logon.
- Verify that the card is detected and that an appropriate logon certificate, private key, certificate chain, and KDC mapping are available.
- Record the logon type and authentication package, because service, network, and interactive logons do not all use smart cards in the same way.
Do not misdiagnose it
Resetting a password does not remove a smart-card requirement. If password logon is intentionally required, change the account or policy through the authorized administration path; otherwise repair the smart-card credential path.
References
Looking for a different code? Search another status or error code.