We have been using Hello for Business for over a year now. This morning, I come in and have users that are no longer able to login via PIN or FaceID. On review, I can see that our certificate (PKI) renewed. Everything states that the certificates are valid. For the life of me, I cannot seem to figure out why after a renewal, this would break. Any ideas? The date on the certificate for Kerberos, and DC Authentication are both dated today with 1YR expiration (2019 Aug) Desktops all have valid certificates. Root certificate is valid and does not expire for like 30 years. I even delete the DC, Kerberos certifcates, and reissued them. Found an article about changing the RSA and merging the three certificates into one (Domain Controller Authentication (Kerberos)) and superseded the prior three. Verified that all DCs had the new certificate. Still same error on DCs. Please help!