What you will see
"Decrypt integrity check failed" message displays when attempting to authenticate. This specific error instance relates to the erroneous use of an automatically generated krb5-affinity.conf located in the device's persistent memory.
Affected Products
Click
Properties
to see a full list of products affected by this issue.
Remedy
Clearing the kerb5 file and rebooting the device may work for a period of time; however, firmware LW63.TU.P687 or later,will permanently alter the way theprinter configures and retains its krb5-affinity.conf.
Please contact Lexmark Technical Support and reference KB article ID# SO8279 to inquire about obtaining this firmware.
Explanation
An automatically generated Kerberos configuration file (krb5-affinity.conf) in the printer is causing the device to erroneously use incorrect Domain Controllers when trying to authenticate. This file is separate from the Kerberos configuration file (krb5.conf) and should normally, and only, be created and used when the device is joined to an Active Directory. Instead of the printer using the specified domain controllers on the Smart Card Authentication client, it is using this krb5-affinity.conf populated in persistent memory.
Still need help?
If you need additional assistance, please close this window, go to your product's support page and locate
Get In Touch with Lexmark! for contact information.
NOTE: When calling for support, you will need to provide your printer model/machine type and serial number (SN). Please be near the products described in this article to expedite the support process and reduce call-back situations.
LEGACY ID: SO8279
Audience: Lexmark and Support Partners
This fix is found located in the latest update to xref_TE363_xref (March 2017)
The issue is referenced as Fix for an authentication error due to a decrypt integrity check failure.
LEGACY ID: SO8279