January 11th, 2016
Today's topics:
CLASSE Managed Windows Computers IE11 Update
- Is now approved for install during the next possible update window. For many computers, that will be tonight.
- Please see previous newsletters for details. This will not affect most CLASSE users as they use Firefox.
Security Enhancements affecting kerberos keytabs
On Tuesday 1/12 we will implement security enhancements to our Authentication
infrastructure (The AD Domain) by increasing the required encryption
types to AES256. At this time, we will also remove the link between CLASSE and the legacy LNS to increase security.
In general, there is nothing you need to do to prepare for this change. All of the back-end infrastructure work has been implemented and tested to make this a seamless change.
In very few cases, users have created kerberos keytabs to enable automatic logins to remote unix systems. If you have done this, you will need to recreate your key tab to use aes256-sha1 encryption. For instructions, please see
KerberosAutoLogin, and submit a
ServiceRequest for help.
General network and server maintenance will occur every Tuesday from 12:00 noon to 2:00 PM. The CLASSE-IT group will always announce any expected disruptions in our
NewsLetter and via
CLASSE-IT-NEWS-L, but with the size and complexity of our network there is always the potential for something to go wrong. We will do our best to contain all network maintenance and planned outages to Tuesdays from 12:00 noon to 2:00 PM.
Unless other arrangements have been made,
CLASSE-managed Windows systems may be updated and rebooted on Tuesday morning at 2:00 AM, so please avoid critical or lengthy operations at that time. For more details, please see
SystemExpectations.
Questions or problems? Submit a service request.
Other resources: