This message was deleted.

Also encountered this issue once. There was a difference between the registry keys for FAS on the vda's and fas servers plus storefront. So the reg keys for server 1 pointed to number 2 and vice versa, instead of server 1 to number 1

Once or twice I had a similar case where security restricted certain kerberos encryption types via gpo. https://www.ferroquesystems.com/resource/issue-citrix-fas-error-102-encryption-type-requested-is-not-supported-by-the-kdc/

I checked the reg keys and the FAS servers are correct, its a simple setup with a single FAS.