I have run into this error an attempt was made to use smartcard logon, but the KDS is unable to use the PKINIT protocol because it is missing a suitable certificate. It appears that my domain controller certs have become corrupt. Not sure how though. I am thinking the only way to fix this is to apply for new certs and delete the old ones. Is this true? Is there another way to handle this problem?

Norman, As per me, your assumption is true ! Check this out... http://technet.microsoft.com/en-us/library/dd348640(WS.10).aspx Hope it helps. Thanks, Santosh (MCTS W2K8 AD and SCCM) “ To Infinity and Beyond… ”

Thanks for your reply. I was actually able to repair the certs using certutil -repairstore.