{"id":10216,"date":"2025-03-01T07:02:02","date_gmt":"2025-02-28T22:02:02","guid":{"rendered":"https:\/\/m365jp.net\/?p=10216"},"modified":"2025-03-01T07:11:06","modified_gmt":"2025-02-28T22:11:06","slug":"mc1020176-prepare-for-removal-of-des-in-kerberos-for-windows-server-and-client","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-03-01-mc1020176-prepare-for-removal-of-des-in-kerberos-for-windows-server-and-client","title":{"rendered":"MC1020176 | Prepare for removal of DES in Kerberos for Windows Server and client"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC1020176 | Prepare for removal of DES in Kerberos for Windows Server and client<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n
Classification<\/th>\nstayInformed<\/td>\n<\/tr>\n
Last Updated<\/th>\n02\/28\/2025 21:59:19<\/td>\n<\/tr>\n
Start Time<\/th>\n02\/28\/2025 21:59:18<\/td>\n<\/tr>\n
End Time<\/th>\n02\/28\/2026 21:59:18<\/td>\n<\/tr>\n
Message Content<\/th>\n\n
Prepare for removal of Data Encryption Standard (DES) in Kerberos for Windows Server 2025 and Windows 11, version 24H2. While it\u2019s an optional component that isn\u2019t installed by default, it\u2019s important to detect and disable your DES use to avoid potential disruption before taking the September 2025 security update. Consider adopting the Advanced Encryption Standard (AES) algorithm as a stronger encryption method.  <\/div>\n
 <\/div>\n
When will this happen:<\/b> <\/div>\n
    \n
  • September 2025: DES in Kerberos will be removed from Windows Server 2025 and Windows 11, version 24H2. <\/li>\n
  • Alternative solutions are available to you today. <\/li>\n<\/ul>\n
     <\/div>\n
    How this will affect your organization:<\/b> <\/div>\n
    Once DES in Kerberos is removed, it will no longer be supported as an encryption cipher in any function of Kerberos in Windows Sever 2025 and later or in Windows 11, version 24H2. Legacy scenarios using DES on these two versions will stop working until you make configuration changes to Kerberos-related application and network security. DES will not be removed from earlier Windows versions. <\/div>\n
     <\/div>\n
    What you need to do to prepare:<\/b> <\/div>\n
    First, detect any use of DES in Kerberos within your network, identify apps that are using DES, and reconfigure them to use a stronger cipher. Ultimately, you\u2019ll need to disable DES before taking the September 2025 Windows security update. Finally, identify apps and callers negotiating DES and upgrade to a more secure encryption cipher, such as Advanced Encryption Standard (AES) algorithm. <\/div>\n
     <\/div>\n
    Additional information:<\/b> <\/div>\n
    Learn more and follow recommended guidance to detect and disable DES usage in Removal of DES in Kerberos for Windows Server and client<\/a>.<\/div>\n<\/td>\n<\/tr>\n
Machine Translation<\/th>\n\n
Windows Server 2025 \u304a\u3088\u3073 Windows 11 \u30d0\u30fc\u30b8\u30e7\u30f3 24H2 \u306e Kerberos \u3067\u306e\u30c7\u30fc\u30bf\u6697\u53f7\u5316\u6a19\u6e96 (DES) \u306e\u524a\u9664\u3092\u6e96\u5099\u3057\u307e\u3059\u3002\u3053\u308c\u306f\u65e2\u5b9a\u3067\u306f\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3055\u308c\u306a\u3044\u30aa\u30d7\u30b7\u30e7\u30f3\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3067\u3059\u304c\u30012025 \u5e74 9 \u6708\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3059\u308b\u524d\u306b\u3001\u6f5c\u5728\u7684\u306a\u4e2d\u65ad\u3092\u907f\u3051\u308b\u305f\u3081\u306b DES \u306e\u4f7f\u7528\u3092\u691c\u51fa\u3057\u3066\u7121\u52b9\u306b\u3059\u308b\u3053\u3068\u304c\u91cd\u8981\u3067\u3059\u3002\u3088\u308a\u5f37\u529b\u306a\u6697\u53f7\u5316\u65b9\u5f0f\u3068\u3057\u3066\u3001Advanced Encryption Standard (AES) \u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u306e\u63a1\u7528\u3092\u691c\u8a0e\u3057\u3066\u304f\u3060\u3055\u3044\u3002  <\/div>\n
 <\/div>\n
\u3053\u308c\u306f\u3044\u3064\u884c\u308f\u308c\u307e\u3059\u304b:<\/b> <\/div>\n