“The encryption type requested is not supported by the KDC” when the user tries to reset

In this case, the error can be resolved in one of two ways.

1. Enable AES 128-bit and/or AES 256-bit encryption for the SQL Reporting Services service account
2. Configure the Network security: Configure encryption types allowed for Kerberos policy setting on the reporting point server to include the RC4_HMAC_MD5 encryption type

Steps to configure the policy setting Network security: Configure encryption types allowed for Kerberos

Method 1 – Local Security Policy

1. On the affected server, open an elevated command prompt
2. Type SECPOL and hit Enter
3. In the Local Security Policy management console, expand Local Policies and click on Security Options
4. Scroll down in the left-hand pane until you find the setting Network security: Configure encryption types allowed for Kerberos
5. Right-click this setting and select Properties
6. In the Local Security Settings tab, check the box next to RC4_HMAC_MD5 , AES128_HMAC_SHA1 , AES256_HMAC_SHA1 , and Future encryption types
7. Click OK

Method 2 – Group Policy Object (GPO)

1. Open the Group Policy Management console and edit a new or existing GPO
2. In the Group Policy Management Editor , expand Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options
3. Right-click on Network security: Configure encryption types allowed for Kerberos and click Properties
4. On the Security Policy Setting tab, check the box to Define these policy settings
5. Check the box next to RC4_HMAC_MD5 , AES128_HMAC_SHA1 , AES256_HMAC_SHA1 , and Future encryption types
6. Click OK

If this is for the specific service account, for example, an SQL Service account.

Steps to enable AES encryption for the SQL Reporting Services service account

1. Open Active Directory Users and Computers
2. Browse to the user account used by SQL Reporting Services on the affected server
3. Right-click the user account and select Properties
4. Click on the Account tab
5. Under Account options , check the box next to one or both of the following:
   1. This account supports Kerberos AES 128 bit encryption
   2. This account supports Kerberos AES 256 bit encryption
6. Click OK

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/sccm-quot-the-encryption-type-requested-is-not-supported-by-the/ba-p/570914

https://learn.microsoft.com/en-us/archive/blogs/openspecification/windows-configurations-for-kerberos-supported-encryption-type

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-configure-encryption-types-allowed-for-kerberos