Event ID 18 — Privilege Attribute Certificate Configuration

  • Article

Applies To: Windows Server 2008 R2

The Kerberos Privilege Attribute Certificate (PAC) contains all of the group memberships for the security principal requesting access to a resource. This certificate is transferred to the client by using the Key Distribution Center (KDC).

Event Details

Product: Windows Operating System
ID: 18
Source: Microsoft-Windows-Kerberos-Key-Distribution-Center
Version: 6.1
Symbolic Name: KDCEVENT_PAC_VERIFICATION_FAILURE
Message: During TGS processing, the KDC was unable to verify the signature on the PAC from %1. This indicates the PAC was modified.

Resolve

This is a normal condition. No further action is required.

Privilege Attribute Certificate Configuration

Core Security