Design a site like this with
Get started

How to resolve Kerberos Contrained Delegation Error (KCD)

Workspace ONE Certificate Based Authentication with On Premise Exchange Server might not work as expected.

The easiest way to check the configuration, is to use the VMware-KCD-Client tool, under the SEG for Windows installation folder or on UAG – depending on your setup.

If you are encountering the following error while testing with the tool, it might be related to a missing patch on your Domain Controllers.

“ERROR: KRB5Client::constrained_delegate failed, error( – KRB5Client: gss_init_sec_context: Message stream modified
and minor code -1765328343″

Here are the links for the related patch:

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019



Posted in:

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: