Kerberos Encryption downgrade on delegation

Brass Contributor

Hi all,

we are facing a point on SQL-Servers when they are using Kerberos delegation and request a ticket, its requested as RC4. Are there any options or configurations where a SQL-Server can be hardened? Basically we want to remove the RC4 for SQL-Server for Kerberos tickets.

 

Regards

1 Reply

@m_krone try to change DefaultEncryptionType registry key, as reported in this article: https://support.microsoft.com/en-us/help/837361/kerberos-protocol-registry-entries-and-kdc-configura...