cancel
Showing results for 
Search instead for 
Did you mean: 

Kerberos SSO cypher

guillaume.petit
New Contributor

Kerberos SSO cypher

Hello,

 

I have not found the settings for modifying the SSO Kerberos cypher protocol.

Kerberos support multiples cypher algorithms like :

  • AES256_CTS_HMAC_SHA1_96
  • AES256_CTS_HMAC_SHA1_96
  • RC4_HMAC
  • DES

But when the user wants to connect with an account member of the "Protected Users" Active Directory group he can't because the "Protected Users" group require the usage of AES cypher protocol for Kerberos exchange.
https://docs.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/prote...

 

So do you know a way to modify the Kerberos settings to support AES cypher in Pulse Secure platform?