KDC Event 20

[Kelly Uehling]

We've recently upgraded one of our W2K DCs to W2K3 and we are now
getting a KDC EventID 20 every 10 hours. What's up with that?

Full Error:

Type: Warning
Source: KDC
Category: None
Event ID: 20

The currently selected KDC certificate was once valid, but now is
invalid and no suitable replacement was found. Smartcard logon may not
function correctly if this problem is not remedied. Have the system
administrator check on the state of the domain's public key
infrastructure. The chain status is in the error data.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

TIA,
Kelly

 

[Benoit Boudeville [Exchange MVP]]

what about regenerating a valid certificate for the upgraded DC ?

 

[Fred Yarbrough]

Us too! I have a call into Microsoft on this issue. They first suggested
to set the RPC Locator service to Automatic and then start it. They also
suggested to restart the Net Logon service after this change was made.
Seems that upgrading to W2K3 changes the RPC Locator service startup for
some reason. This did not resolve our problem though. They are still
investigating the issue.

Thanks,
Fred