January 11th, 2016

Today's topics:

CLASSE Managed Windows Computers IE11 Update

• Is now approved for install during the next possible update window. For many computers, that will be tonight.
• Please see previous newsletters for details. This will not affect most CLASSE users as they use Firefox.

Security Enhancements affecting kerberos keytabs

On Tuesday 1/12 we will implement security enhancements to our Authentication infrastructure (The AD Domain) by increasing the required encryption types to AES256. At this time, we will also remove the link between CLASSE and the legacy LNS to increase security.

In general, there is nothing you need to do to prepare for this change. All of the back-end infrastructure work has been implemented and tested to make this a seamless change.

In very few cases, users have created kerberos keytabs to enable automatic logins to remote unix systems. If you have done this, you will need to recreate your key tab to use aes256-sha1 encryption. For instructions, please see KerberosAutoLogin, and submit a ServiceRequest for help.

---

General network and server maintenance will occur every Tuesday from 12:00 noon to 2:00 PM. The CLASSE-IT group will always announce any expected disruptions in our NewsLetter and via CLASSE-IT-NEWS-L, but with the size and complexity of our network there is always the potential for something to go wrong. We will do our best to contain all network maintenance and planned outages to Tuesdays from 12:00 noon to 2:00 PM.

Unless other arrangements have been made, CLASSE-managed Windows systems may be updated and rebooted on Tuesday morning at 2:00 AM, so please avoid critical or lengthy operations at that time. For more details, please see SystemExpectations.

---

Questions or problems? Submit a service request.

Other resources:

• CLASSE IT Home Page
• Previous newsletters

---