Unable to sign into Microsoft Outlook

Question

I keep getting the error AADSTS5000611: Symmetric Key Derivation Function version 'KDFV1' is invalid. but I have updated my windows to 22h2 already

Answer 1

Hi @Beron Jeff, 

Welcome to the Microsoft Q&A forum. 

Thank you for updating your device and letting me know what you have tried so far. Based on the details you shared, I understand you cannot sign in to Microsoft Outlook and you keep seeing the error AADSTS5000611 stating Symmetric Key Derivation Function version KDFV1 is invalid even though your computer is already on Windows 10 version 22H2.  

This error occurs when a device attempts to authenticate with Microsoft Entra using the older KDFv1 algorithm, which Microsoft removed for security reasons. Devices must have the July 2021 security changes or be on Windows builds released after that date, otherwise the service blocks the attempt and shows sign in error code 5000611. You can review the details in Microsoft’s official guidance here: Security update to remove support for KDFv1 algorithm for authentication. The article also notes that this error and code appear in Entra sign in logs when the device still presents KDFv1.  

Please follow the steps below in order on the same device where you are signing in. This approach fits your situation and is designed to get you back into Outlook as quickly as possible. 

1/ To ensure compatibility with Microsoft 365, your device needs the latest Windows updates.  

• Open Settings then Windows Update then select Check for updates and install everything offered, including optional quality updates. 
• After the installs complete, restart the device then run Windows Update again until no further updates are offered. 
• If upgrading to a newer version is not possible, make sure all available security patches for your current version are installed. 

2/ Update Office 

• For the best authentication compatibility, use Microsoft 365 Apps for enterprise or at least Office 2019 or Office 2021. 
• If you are currently on Office 2016, consider moving to a newer Office release to ensure modern authentication methods work as expected. 
• Reference: End of support for Office 2016 and Office 2019 - Microsoft Support 

3/ Check disk space  

• Open Settings then System then Storage. 
• If free space is low, remove unused apps, large temporary files, or move personal files to OneDrive or an external drive. 
• Lack of space can stop critical updates from installing successfully. 

4/ If the issue persists, reset the PC and upgrade to Windows 11 

• Back up important files first. 
• Use Settings then System then Recovery then Reset this PC, choose Keep my files, complete setup, then run Windows Update and upgrade to Windows 11 if the device is eligible. 
• After Windows is fully current, sign in to Outlook again. 
• Reference: Download Windows 11 

5/ Contact IT administrator:  

Since your account is managed by your organization, please contact your IT administrator to review your permissions and policies. If the issue persists after these checks, ask your IT administrator to submit a support request directly to Microsoft Support team.       

They can raise a support ticket by visiting: Get support - Microsoft 365 admin | Microsoft Learn 

As community moderators, we appreciate your understanding that our access to internal development details is limited. Our primary role is to guide users toward the appropriate resources and support channels. While we may not have visibility into deeper backend analysis, we’ll continue doing our best to support you within the scope of our responsibilities.     

I hope this information is helpful. Please follow these steps and let me know if it works for you. If you have any updates regarding the issue, please feel free to share them with me.       

Thank you for your patience and your understanding. I look forward to continuing the conversation. 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment”.    

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. 

Answer 2

computer is already updated but still gets errors

Answer 3

The error message you are encountering, AADSTS5000611, indicates that your device is attempting to use the deprecated Key Derivation Function version 1 (KDFv1) for authentication. Even though you have updated to Windows 22H2, it is essential to ensure that your device has the latest security updates applied.

Microsoft has removed support for KDFv1, and devices that have not received the necessary updates will not be able to authenticate with Microsoft Entra, which affects services like Outlook. To resolve this issue, you should:

1. Check for Updates: Ensure that your Windows device is fully updated with the latest security patches beyond just the version update.
2. Monitor Authentication Failures: If you continue to experience issues, check the Microsoft Entra sign-in logs for the specific error code to identify any further actions needed.
3. User Communication: If you are part of an organization, inform your IT department about the issue so they can assist with ensuring all devices are compliant with the latest security requirements.