Screens and Tabs › Tabs › Endpoint Account Management Tabs › Account Management Screens › Kerberos › Endpoint Custom Settings Tab

Endpoint Custom Settings Tab

Use this tab to specify the supported encryption type and salt pairs for the endpoint.

The fields in this tab are listed below:

Supported Encryption Type and Salt Pairs List Box

When acquiring a directory for the first time, this list is pre-populated with the following six items:

• aes128-cts-hmac-sha1-96:normal
• arcfour-hmac-md5:normal
• arcfour-hmac-md5-exp:normal
• des-cbc-crc:normal
• des-cbc-md5:normal
• des3-cbc-sha1:normal

You can also manually add the type and pairs here and they will be made available at the Principal and Account Template property sheets. Once the pairs have been added, you can select a pair to be removed or edited.

To remove an encryption type and salt pair from this list box, select the encryption type and salt pairs and click the down arrow (Delete).

Supported Encryption Type and Salt Pairs

Specifies the supported encryption type and salt pairs to be added for this endpoint. To add an encryption type and salt pair, type the encryption type and salt pair in this field and click the up arrow (Add).

Disable Principal Will Set "ALLOW TIX" to False

When checked, specifies that the DISALLOW_ALL_TIX flag is set when the principal is disabled. This results in the suspended principal’s ALLOW TIX check box on the Account Properties Tab to be unchecked.

Disable Principal Will Expire the Principal

When checked, specifies that the expiration date is set to a date in the past so that the principal is disabled.