After creating the AD user account representing the managed DHCP Server, you can further edit the account’s properties.
To set the user account options:
- Navigate to the user account properties and verify that the account information that you entered is correct.
- Select the Account tab.
In the Account options field, select the encryption type
for this account if you want to use a specific type of encryption algorithm.
This is optional.
Note: The encryption type under Account options should match one of the Address Manager and DNS/DHCP Server GSS-TSIG supported encryption types.Note: The Address Manager and DNS/DHCP Server supported encryption types for GSS-TSIG are:
- AES-128 CTS mode with 96-bit SHA-1 HMAC (only for Windows 2008 server and 2008 R2)
- AES-256 CTS mode with 96-bit SHA-1 HMAC (only for Windows 2008 server and 2008 R2)
- ArcFour with HMAC/md5
- DES cbc mode with RSA-MD5
- DES cbc mode with CRC-32