The affected devices are smart card authenticating printers, scanners, and multifunction devices that don’t support either Diffie-Hellman (DH) for key-exchange during PKINIT Kerberos authentication or don’t advertise support for des-ede3-cbc ("triple DES”) during the Kerberos AS request.

The affected devices are smart card authenticating printers, scanners, and multifunction devices that don’t support either Diffie-Hellman (DH) for key-exchange during PKINIT Kerberos authentication or don’t advertise support for des-ede3-cbc ("triple DES”) during the Kerberos AS request.

To work around this problem, remove and then re-insert the smart card. Or, restart the Smart Card service. To restart the Smart Card service, follow these steps: Click Start, type services.msc in the search box, and then press Enter. Right-click the Smart Card service, and then click Stop.

Để cho phép xác thực smartcard trong Outlook 2016, cài đặt 7 ngày 2016, Cập Nhật cho Outlook 2016 (KB3115147), và sau đó làm theo các bước sau.