This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 69%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
We instruct our Remote users to do a CTL-ALT-DEL / Change Password before their password expires... 99% of my group is on WIN10 and the process works fine minus a few hiccups. The same process in WIN11 seems to work but the next day they try to login, VPN fails - can't connect to site. We did lots of troubleshooting but in the end, users had to come onsite log into the local network. I deleted the old VPN cert then upload a new copy from AD using "Manage User Certificates". all was fine after that... Again, only an issue on WIN11 Early adopters.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(54.400000000000006, 7.000000000000001%, 15%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERP%3C/text%3E%3C/svg%3E)
This is a known bug.
I put in a ticket to Microsoft.
A fix is coming eventually. No ETA
The password change prevents the system from accessing its own user cert store if it wasn't made on the same system.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi - any news on this topic from your side? We have that issue too under Windows 11 and it is a ShowStopper for us if each user needs to contact IT Support after doing normal windows password change..
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 15%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELL%3C/text%3E%3C/svg%3E)
Hi all,
Any updates from Microsoft on when the patch will come out for this issue?
This is stopping our Win11 rollout too.
Hi - I got the following answer from Microsoft:
I want to let you know that you are right and this is a bug concerning Windows 11 and the team of developers are working on it.In addition, I want to inform you that the July update will address this issue. > Bug# is 39451190
Thats great, thanks Lu-2598 for the update
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 68%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
Hi Lu, do you know if the July update resolves the certificate break after password change? If so, do you know the KB number?
Hi Lu-2598,
Did you eventually get a response from Microsoft if the July patches resolves the issue?
Thanks,
Lee
Lu-2598 replied outside this thread (scroll down) that July didn't fix the issue.
I've independently confirmed July does not fix the issue, either.
I may or may not have heard from MS ticket that this is another 3 months away, which is a reminder to put in as many tickets/Feedback/Insider bug reports as possible to get attention on this issue.
Hi - I am still waiting for response from Microsoft regarding this topic. As soon as I got feedback I let you know.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(316.8, 52%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EED%3C/text%3E%3C/svg%3E)
This is an enterprise breaking bug.
Why is this not listed on https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-21h2 ?
I tested already the July update from Tuesday and it did not solved the problem! I contacted again Microsoft to verify and asked them which patch is fixing this problem. As soon as I know I will write here.
A BIG THANK YOU LU!!!!
Do we know if the fix for VPN certificate issue has been resolved?
Hi - so I got the following information:
The technician/developer are still working at this topic. It seems not that easy to fix.
Next patch release is planned for September Patch day on second Tuesday. But I got told that it could also happen that it will take more time then it will come with November Patch Day.
Right on! thank you for the update @Anonymous
I can't believe Microsoft has not resolved this ongoing issues for the past 9 months. Hope this thread gets attention for the next patch Tuesday. I can't find anything out there to apply a temp certificate fix that won't break VPN.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 81%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Try run Windows Update and download and install all updates.
Check event viewer and see if there is any log files which might be related.
Open start and search for feedback and open the Feedback Hub app and report this issue and please share the steps to reproduce the problem.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 68%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELT%3C/text%3E%3C/svg%3E)
Hi @MXM
Thank you for your question and reaching out.
I can understand you are facing issue with connecting to VPN in Windows 11.
I will suggest you should check first KB5009566 if this KB is installed or not on Windows 11 and remove it as there are some know issue with KB related to VPN connections.
Hope this answers your question :)
--
--If the reply is helpful, please Upvote and Accept as answer--
I installed the latest patch from the Microsoft Update Catalog:
https://www.catalog.update.microsoft.com/Search.aspx?q=windows+11+cumulative+update
And my first test showed after installing update, restart - password change - several restart > it worked!
This is the patch which I installed:
2022-09 Cumulative Update for Windows 11 for x64-based Systems (KB5017328) Windows 11 Security Updates 9/13/2022 n/a 301.4 MB
I did this test only on one machine so far - so more test will see if it is really fixed. But you can test it too to verify.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 76%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
@Anonymous Thank you for all the updates. That's great news. We did the same test on 2 different laptops and are now having success after installing that same September patch.
Lu - thank you for the updates - I will test myself and will post if it worked. Fingers crossed!
Seems like the (KB5017328) did the trick! I think this will be our last discussion on this forum. Thank you all for all your follow-ups and keeping an eye on this fix.