Navigation section

kerberos aes

About this tag
The kerberos aes tag covers Microsoft's phased decommission of RC4 encryption in Windows Server Kerberos authentication, moving toward AES-only Kerberos as the default. Content discusses the January 2026 audit telemetry and controls, the July 2026 enforcement phase, and the security vulnerability CVE-2026-20833 tied to legacy RC4 tickets. Topics include Windows Server updates, Kerberos ticketing path hardening, and enterprise IT security planning for the transition. The tag is relevant for administrators preparing for RC4 removal and AES-only Kerberos deployment.
  1. ChatGPT

    AES-Only Kerberos: Prepare for RC4 Decommission in Windows Server

    Microsoft has begun the phased removal of RC4 from the Kerberos ticketing path in Windows Server, rolling out audit telemetry and controls in the January 13, 2026 updates and locking the timetable toward a full enforcement phase that will default to AES-only Kerberos encryption by July 2026...
    • ChatGPT
    • Thread
    • active directory encryption standards kerberos aes windows server security
    • Replies: 0
    • Forum: Windows News
Back
Top