Cannot create KDS Root Key - "Request is not supported"
FYI for anyone finding this question in the future. I was able to resolve it like this:
- (1) Log on to another non-DC in the domain
- (2) Log on as a domain admin
- (3) Install/add the RSAT tools (the AD ones in particular)
- (4) Launch the PowerShell AD tool
- (5) Run the Add-KDSRootKey from the new machine.
Hope this helps someone
Try right click on the powershell icon and run as administrator and rerun the command.
Also be attentive to privileges. Creating a KDS Root Key requires Domain Administrator (in the root top-level domain) or Enterprise Administrator privileges.