Keytab Generator Config Change

On Wednesday, January 6, during the ITS Maintenance Window (5:00 – 7:00 a.m.), configuration of the Kerberos Keytab Service Principal and Keytab Generator (Keytab Generator) will be changed to enable or prefer AES encryption types over DES and 3DES. In addition, the “oracle” type service principal will be introduced in the Server Keytabs feature.

Personal Keytabs created after the change will have the new AES encryption types, which may be used once clients and the server are able to support them.

A brief, few seconds-long outage is anticipated while the work is being completed.

The change is being tracked in Service Now as CHG0034612.

More information: Keytab Generator Config Change

Story added 17. December 2015, content source with full text you can find at link above.