diff --git a/kcm/events.c b/kcm/events.c
index b41602482..eec76181e 100644
--- a/kcm/events.c
+++ b/kcm/events.c
@@ -334,6 +334,9 @@ kcm_fire_event(krb5_context context,
 	break;
     case KCM_EVENT_RENEW_CREDS:
 	ret = kcm_ccache_refresh(context, event->ccache, &credp);
+	if (ret == KRB5KRB_AP_ERR_TKT_EXPIRED) {
+	    ret = kcm_ccache_acquire(context, event->ccache, &credp);
+	}
 	oneshot = 0;
 	break;
     case KCM_EVENT_DESTROY_CREDS: