AD Kerberos Password Reset

[ITGURU]

As per security recommendations, I have reset the AD Kerberos password ONCE as recommended to allow it to sync through for x number of hours before changing again.

I was looking for the change in the event log, but have however got event 42 and the below

 

The Kerberos Key Distribution Center lacks strong keys for account krbtgt.You must update the password of this account to prevent use of insecure cryptography.

I've already updated the password once, so what do i need to do , as understand resetting twice in succession can break things before it syncs through the network devices.

 

thanks.

[ITGURU]

Answered by own question I think as related to when the password was last reset. Did in a test environment, but then realised the error has been showing before the password change today so was there before the change.

In my production environment I'm not seeing this event, so should be ok to change.