Data Domain cannot be added to the domain using New Windows Server 2025

When attempting to join Active Directory (AD) machines that have been upgraded to Windows 2025, the following error can occur:
Failed to join the domain with the following error message:

*** ASN.1 failed call to system time library

This issue is a result of an upgrade to Windows 2025, which introduces specific changes not yet qualified for PowerProtect Data Domain (DD).
The failure occurs because the server’s Kerberos authentication mechanism fails when interfacing with Windows 2025.
The problem arises when the Kerberos Key Distribution Center Reply (KRB_KDC_REP) contains a KerberosTime date extending beyond the year 2038:
21000914024805Z  <<< September 14th, 2100
The time library call fails due to this timestamp, causing the authentication process to break down.

Resolution: This issue is fixed from the following Data Domain Operating System (DDOS) releases onwards:

• DDOS-8.4 onwards
• DDOS-8.3.1.10 Long-Term Support (LTS)
• DDOS-7.13.1.40 Long-Term Support (LTS) 

Workaround:

As a temporary measure, consider the following workarounds:

• Contact Microsoft Support to see if they can provide a fix or workaround for this specific issue.
• Delay Upgrade:
  Postpone upgrades to Windows 2025 for AD machines until the fix is available and tested.
• Use Compatible Versions:
  Continue using versions of Windows that are known to be compatible with the current PowerProtect DD configuration.