| Previous | Next |
| SEC_E_KDC_UNABLE_TO_REFER | SEC_E_UNSUPPORTED_PREAUTH |
SEC_E_KDC_UNKNOWN_ETYPE
SEC_E_KDC_UNKNOWN_ETYPE signals this condition: The KDC does not support the encryption type requested for the Kerberos exchange. The client requested an encryption type that the KDC cannot use for this principal or policy. The failure is an encryption-type compatibility issue, not necessarily an invalid account password.
What to check
- Compare supported encryption types on the client, domain controller, and relevant service account.
- Check KDC events to identify the principal and encryption type that was rejected.
- Resolve version and policy compatibility without enabling deprecated cryptography as a quick workaround.
Microsoft: Kerberos authentication troubleshooting
Looking for a different code? Search another status or error code.