Better crypto for AD SSO?

[Bjorn_Jonsson]

Hi,

Is it possible to use a modern crypto when you configure Active Directory SSO?

From the drop-down list I can choose the following:

RC4-HMAC-NT

DES-CBC-MD5

DES-CBC-CRC

I'm using management version R80.10 and gateway version R77.30.

[G_W_Albrecht]

The Drop-Down list you cite is for the Kerberos Ticketing. Kerberos 4 only supports DES, Win200 only RC4 or DES. I know that the MIT implementation can use DES, 3DES, AES and RC4, but CP only has RC4 or DES. I would suggest to use Web form (HTML) based SSO instead.

[cstueckrath · Accepted solution]

sk111945

[G_W_Albrecht]

Wow, this will add two AES cyphers by a HF 😉

[Bjorn_Jonsson]

Thanks!