> Source: [sk178069](https://support.checkpoint.com/results/sk/sk178069)

# sk178069 - Changing encryption methods (ciphers) for accessing SmartConsole using Active Directory Authentication  

| Property | Value |
|----------|-------|
| Solution ID | sk178069 |
| Date Created | 2022-02-24 |
| Last Modified | 2022-04-24 |
| Technical Level | General |
| Products | Security Management Server, Multi-Domain Security Management Server |
| Versions | R81.10 (EOS), R81 (EOS), R81 (EOS), R81.10 (EOS) |
| OS | Gaia |

## Symptoms

- After disabling RC4 or other ciphers on the Active Directory (the encryption types which are allowed for Kerberos), the user can no longer access SmartConsole with Active Directory authentication.

## Cause

By design, RC4 is configured as the default cipher for Kerberos on the management server.

## Solution

To edit the default ciphers, do these steps:  

1. On the management server, go to:  
   `$FWDIR/conf/`  

2. Save a copy of the `krb5.conf `file.   

3. Edit the `krb5.conf` file:  
   Replace the value of `default_tgs_enctypes` to be one of the values in `default_tkt_enctypes` (the row above it), based on the encryption type you want to use:  
   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1645709464470/1202202241547541.png)  

4. On the Active Directory, make sure you select the same encryption you selected for `default_tgs_enctypes`  
   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/NEW_SK_NOID1645709464470/2202202241548292.png)  

5. Restart the services on the management server (`cpstop;cpstart`).

**Note -**If after restarting the services, the issue is not resolved, reboot the device.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content