M365 Change Tracker

← All changes · entra

GA

Microsoft Entra Kerberos key rotation improved reliability for incoming trust referral flows

General availability of Microsoft Entra Kerberos key rotation improved reliability particularly for environments using incoming trust referral flows. Previously, authentication failures could occur during Kerberos key rotation if referral tickets were encrypted with a secondary key. The update enhances validation logic to attempt decryption with both primary and secondary Kerberos keys, improving resiliency during key rollover operations and reducing authentication disruption during rotation eve

Source last updated 2026-06-01

Affected: Microsoft Entra ID, Authentications (Logins)

Related changes

View at Microsoft →