Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How can I change the authentication method used for IPSec by a policy?
John Savill
April 9, 2000
1 Min Read
A. By default IPSec will use Kerberos V5 protocol for itsauthentication method however there are other options:
Windows 2000 Kerberos V5 protocol (the default)
Use a certificate from a selected certificate authority
Use a predefined string (a preshared key)
To modify an existing IPSec policy start the IP Security Policy MMC snap-inas seen in the previous FAQ and perform the following:
Right click on the policy and select Properties from the context menu
Select one of the security rules you wish to change the authentication method for and click Edit
Click here to view imageSelect the 'Authentication Methods' tab. The current authentication method will be shown, e.g. Kerberosby default. Select it and click Edit
Select the preferred authentication method
Click Apply then Close
Close all dialogs
If the change was made on a domain Group Policy Object to force the change totake effect:
C:> secedit /refreshpolicy machine_policy
About the Author(s)
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
.jpg?width=700&auto=webp&quality=80&disable=upscale)
