Windows Hello For Business Uses Smart Card Based Authentication For Many Operations.

The key distribution center (kdc) cannot find a suitable certificate to use for smart card logons, or the kdc certificate could not be verified. My windows hello isnt allowing me to log in due to it not being able to validate my credentials. Also in the settings it says windows hello is blocking.

Smart Card Logon May Not Function Correctly If This Problem Is Not Resolved.

The ca certificates have all be added to the ntauth store. Smart card logon may not function correctly if this problem is not resolved. It is important that you enroll all your domain controllers with the correct kdc.

Why Did We Go With The Former Model Is A Long Story And Definitely Beyond The Scope Of This Particular Post So I’ll Leave It For Another Day.

The root is in the trusted root certificate store. The 2 intermediate ca's are in the intermediate ca store. There is additional information in the system event log.

I Have Validated That The Certificates Installed Meet The Requriements Set Forth In The Link That You Provided.

But i am able to log in with my password. The key distribution center (kdc) cannot find a suitable certificate to use for smart card logons, or the kdc certificate could not be verified. Certificate could not be validated.

The Crl For The Smart Card Could Not Be Downloaded From The Address Specified By The Certificate Crl Distribution Point.

But till date i have not received any resolution. The smart card certificate could not be built using certificates in the computer’s intermediate and trusted root certificate stores. To correct this problem, either verify the existing kdc certificate using certutil.exe or enroll for a new kdc certificate.