Keytab Generator Config Change
On Wednesday, January 6, during the ITS Maintenance Window (5:00 – 7:00 a.m.), configuration of the Kerberos Keytab Service Principal and Keytab Generator (Keytab Generator) will be changed to enable or prefer AES encryption types over DES and 3DES. In addition, the “oracle” type service principal will be introduced in the Server Keytabs feature.
Personal Keytabs created after the change will have the new AES encryption types, which may be used once clients and the server are able to support them.
A brief, few seconds-long outage is anticipated while the work is being completed.
The change is being tracked in Service Now as CHG0034612.