The Key Distribution Center (KDC) cannot find a suitable certificate to use for smart card logons, or the KDC certificate could not be verified. Smart card logon may not function correctly if this problem is not resolved. To correct this problem, either verify the existing KDC certificate using certutil.exe or enroll for a new KDC certificate.
This error seems to be logged when no domain controller certificate has been created on a Windows 2008 domain controller.
See the additional links for more information on how to resolve this error.