diff --git a/lib/krb5/verify_krb5_conf.c b/lib/krb5/verify_krb5_conf.c
index eb3d718ca..3dad6ddcf 100644
--- a/lib/krb5/verify_krb5_conf.c
+++ b/lib/krb5/verify_krb5_conf.c
@@ -535,6 +535,9 @@ struct entry kdc_entries[] = {
     { "v4-realm", krb5_config_string, NULL, 0 },
     { "enable-digest", krb5_config_string, check_boolean, 0 },
     { "digests_allowed", krb5_config_string, NULL, 0 },
+    { "require_initial_kca_tickets", krb5_config_string, check_boolean, 0 },
+    { "kx509_include_pkinit_san", krb5_config_string, check_boolean, 0 },
+    { "kx509_ca", krb5_config_string, NULL, 0 },
     { NULL, 0, NULL, 0 }
 };