Highlighted

Isilon OneFS does not support using AES-256

All,

We are going to use Isilon 7.2.1.1 and I came to know it Isilon does not support AES-256 encryption when kerberos security is enabled.

At customer site, we are setting up PHD 3.0.1 with Isilon 7.2.1.1. Local KDC with cross trust realm to corporate AD will be done on PHD side. KRB tickets generated by AD kerberos are always 256 and customer is not willing to change encryption level as it is considered security threat.

Isilon will be pointing to same local KDC..

can somebody please confirm that?

0 Kudos
2 Replies
8 Krypton

Re: Isilon OneFS does not support using AES-256

Hello,

AES 256 is not supported by Isilon. Please see our compatibility guide for this information:

https://support.emc.com/docu44518_Isilon-Supportability-and-Compatibility-Guide.pdf?language=en_US

(Page 16)

This link DOES require a login to EMC Online Support.

0 Kudos
8 Krypton

Re: Isilon OneFS does not support using AES-256

For AD servers, I'm reasonably sure support was added in 8.0.