KDC Hangs On Startup?

[zeveck]

I am running Windows 2003 Server SP3 as a DC with DNS/WINS and Microsoft Exchange Server 2003 SP1. I recently also made it an Enterprise Root Certificate Authority.

On startup I now get:

=====================
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7022
Date: 6/10/2005
Time: 11:05:42 AM
User: N/A
Computer: JOHANN
Description:
The Kerberos Key Distribution Center service hung on starting.

For more information, see Help and Support Center at
[URL unfurl="true"]http://go.microsoft.com/fwlink/events.asp.[/URL]
==========================================

However, once I actually get into Windows netdiag /test:kerberos /v does not indicate any errors. I have found other threads basically saying "ignore it", but that isn't really an option here...warnings that occur every time the computer boots are bad.

 

[ADB100]

I get this as well. I also get a warning about the KDC Certificate that seems to follow it:

Event Type: Warning
Event Source: KDC
Event Category: None
Event ID: 20
Date: 10/06/2005
Time: 15:28:56
User: N/A
Computer: PROLIANT-ML370
Description:
The currently selected KDC certificate was once valid, but now is invalid and no suitable replacement was found. Smartcard logon may not function correctly if this problem is not remedied. Have the system administrator check on the state of the domain's public key infrastructure. The chain status is in the error data.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Data:
0000: 00 00 00 00 00 00 00 00 ........
0008: 00 00 00 00 00 00 00 00 ........

Restarting the KDC service also generates the above warning unless the Certificate Authority server is online so I think this might be related. I haven't looked into any deeper as the server is working perfectly except for this irritating Error and Warning.

Andy