Set Up Kerberos Version 5 to Use AES 256 Bit Encryption

From version 6.5 SP1 HF1 onwards, you can set up Kerberos version 5 to use Advanced Encryption Standard (AES) 256 bit encryption in order to enhance the Kerberos v5 authentication usability.

You can only set up Kerberos AES 256 bit encryption if the target systems use the following operating systems:

 Supported Operating System RiskVision Client RiskVision Server Kerberos Key Distribution Center (KDC)
Windows 7

Windows 2008 or later

Windows 2008 R2 Server or later

To enable Kerberos AES 256 bit encryption in RiskVision: 

The Windows administrator and RiskVision administrator must perform the following tasks. 

  1. Generate the Service Principal Name (SPN) and Keytab file. 
  2. Configure the RiskVision Server to use Kerberos AES 256 bit encryption. 
  3. Configure the browsers for Kerberos authentication.