Configure Security Policy

This topic describes how to configure security policy setting associated to Kerberos authentication.

It is possible that you may not have access to your computer’s local security policy settings, if it is governed by a group policy (controlled by your domain administrator). In any case, make sure that these security options are enabled for your computer.

If your environment is not governed by a group policy, then follow these steps to configure local security policy:

  1. To access Local Security Policy, enter secpol.msc in Windows Run dialog and select OK.
  2. Navigate to Security Settings > Local Policies > Security Options.
  3. Double-click and open Network security: Configure encryption types allowed for Kerberos security policy setting.
  4. Select the valid encryption types that you want to use as shown in the figure. Ensure that the selection is same across all the participating nodes.
    Note: In our current documentation, we use AES256_HMAC_SHA1 encryption type in our example code to generate the keytab file.

    For more information refer to Microsoft documentation on security policy settings.