| Previous | Next |
| SEC_E_MULTIPLE_ACCOUNTS | SEC_E_CERT_WRONG_USAGE |
SEC_E_NO_KERB_KEY
SEC_E_NO_KERB_KEY signals this condition: Kerberos could not find the key material needed for the requested authentication operation. The account or KDC could not obtain a usable Kerberos key for the request. This can be caused by account-key, replication, encryption-type, or service-identity inconsistencies.
What to check
- Identify the user, computer, or service account whose key was required.
- Check domain-controller events and directory replication health before resetting accounts or passwords.
- Compare the service SPN and account identity to ensure the ticket is being requested for the intended principal.
Microsoft: Kerberos authentication troubleshooting
Looking for a different code? Search another status or error code.