Check the authentication key versions on both ends of the trust:

1. Ensure that the same authentication key version is configured on both the trusted and trusting domains.
2. Verify that the same authentication key is used in the external trust.
3. To confirm that the trust root domains are set up correctly, run the following command:Ktpass -princ realms@domain.tld -mapuser user@replacedomain.tld -pass password -ptype KRB5_NT_PRINCIPAL +out secret.keytab
4. To force the trust to update from the existing authentication key, run the following command:netdom trust trusts.domain.tld /quarantine:no /passwordt:password
5. Restart the Kerberos Key Distribution Center service.
6. Reboot both the trusting and trusted domains.
7. Verify that the updated authentication information is synchronized across both domains.