Start a Conversation

Unsolved

This post is more than 5 years old

2190

February 11th, 2016 09:00

Isilon OneFS does not support using AES-256

All,

We are going to use Isilon 7.2.1.1 and I came to know it Isilon does not support AES-256 encryption when kerberos security is enabled.

At customer site, we are setting up PHD 3.0.1 with Isilon 7.2.1.1. Local KDC with cross trust realm to corporate AD will be done on PHD side. KRB tickets generated by AD kerberos are always 256 and customer is not willing to change encryption level as it is considered security threat.

Isilon will be pointing to same local KDC..

can somebody please confirm that?

130 Posts

February 12th, 2016 09:00

Hello,

AES 256 is not supported by Isilon. Please see our compatibility guide for this information:

https://support.emc.com/docu44518_Isilon-Supportability-and-Compatibility-Guide.pdf?language=en_US

(Page 16)

This link DOES require a login to EMC Online Support.

254 Posts

February 12th, 2016 11:00

For AD servers, I'm reasonably sure support was added in 8.0.

No Events found!

Top