PASS NFS Gateway Upgrade to AES Encryption

Kerberos encryption used by nfs.pass.psu.edu will be upgraded to enable AES, on Wednesday, January 6, during the ITS Maintenance Window (5:00 – 7:00 a.m.). A short outage of a few minutes is anticipated to accommodate the work being completed.

As a result of the outage, users may need to re-authenticate to obtain a new service ticket in addition to remounting to nfs.pass.psu.edu.

Users who support aes256-cts or aes128-cts Kerberos encryption types with clients may start using AES instead of DES or 3DES for authentication (for sec=krb5, krb5i, krb5p), data integrity verification (krb5i and krb5p), and encryption (krb5p). Other users will not experience a change in workflow as a result of the upgrade.

The change is being tracked in Service Now as CHG0034685.

More information: PASS NFS Gateway Upgrade to AES Encryption