This message was deleted.
# citrix-vads
Slackbot
02/28/2022, 7:19 AMThis message was deleted.
j
Julian Mooren
02/28/2022, 10:37 AMThe Domain Controller cert is needed to support Smart Card Logon. Check your previous certificate it should have "Smart Card Logon" under the Enhanced Key Usage. Without FAS is not working
d
Dennis Hirsch
02/28/2022, 10:41 AMOnly "Domain Controller" certs were installed when I started troubleshooting the issue. That's why I'm wondering how it ever worked. No revoked certs or similiar, the only change was Windows Updates.
j
Julian Mooren
02/28/2022, 10:42 AMFrom a technical point it should not work ⤴️
d
Dennis Hirsch
02/28/2022, 10:43 AMSaw it with my own eyes 😄 But yeah, I agree with you 100%
j
Julian Mooren
02/28/2022, 12:11 PMWas the DC certificate issued lately? Maybe someone used the superseeding function of previous enrolled certificates. Just a guess
c
c4rm0
02/28/2022, 12:26 PMThe Kerberos authentication template also works for FAS so maybe the DC was using a cert from that template instead of the domain controller cert template
d
Dennis Hirsch
02/28/2022, 3:20 PMNot lately issued. Will check the exact issurance.
6 Views