This error occurs when you setup a smart card login in Active Directory, the reason for this is that the Kerberos server certificate is missing
To enroll such certificate, open the DC, then enroll in local machine store a certificate from the "Domain Controller Authentication" template