News, tips, advice, support for Windows, Office, PCs & more
Home icon Home icon Home icon Email icon RSS icon

We're community supported and proud of it!

  • KB5005408 – Smart card authentication might cause print and scan failures

    Home Forums AskWoody support Windows Windows 10 KB5005408 – Smart card authentication might cause print and scan failures

    • This topic has 3 replies, 4 voices, and was last updated 2 months ago.
    Viewing 2 reply threads
    • Author
      Posts
      • #2379676
        Alex5723
        AskWoody Plus

        https://support.microsoft.com/en-us/topic/kb5005408-smart-card-authentication-might-cause-print-and-scan-failures-514f0bc5-ecde-4e5e-8c5a-2a776d7fb89a

        Symptoms

        Printing and scanning might fail when these devices use smart card (PIV) authentication.

        Cause
        On July 13, 2021, Microsoft released hardening changes for CVE-2021-33764. This might cause this issue when you install updates released July 13, 2021 or later on a domain controller (DC). The affected devices are smart card authenticating printers, scanners, and multifunction devices that don’t support DH or advertise support for des-ede3-cbc (“triple DES”) during the Kerberos AS request. Per section 3.2.1 of RFC 4556 spec, for this key exchange to work, the client has to both support and notify the key distribution center (KDC) of their support for des-ede3-cbc (“triple DES”). Clients who initiate Kerberos PKINIT with key-exchange in encryption mode but neither support nor tell the KDC that they support des-ede3-cbc (“triple DES”), will be rejected. ..

        Note Devices that are affected when using smart card (PIV) authentication should work as expected when using username and password authentication…

      • #2379684
        Susan Bradley
        Manager

        Not seen it reported by anyone, so I don’t think many hit this issue other than Enteprises.

        Susan Bradley Patch Lady

      • #2380329
        EP
        AskWoody_MVP

        Microsoft has just issued some out-of-band fixes for this problem this Tue. July 27 only for certain Windows versions:

        KB5005394 for Windows 10 version 1809 / LTSC 2019:
        https://support.microsoft.com/help/5005394

        KB5005392 for Windows 7 SP1 / Server 2008 R2 SP1 :
        https://support.microsoft.com/help/5005392

        KB5005390 for Windows Server 2008 SP2:
        https://support.microsoft.com/help/5005390

        more to come either later today or later in the week

        note: these updates are only available from MS Update Catalog

    Viewing 2 reply threads

    Please follow the -Lounge Rules- no personal attacks, no swearing, no politics or religion.

    Reply To: KB5005408 – Smart card authentication might cause print and scan failures

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.