[cifs-protocol] Timer events in MS-BKRP - when should we roll over keys?

Andrew Bartlett abartlet at samba.org
Mon Feb 9 20:50:08 MST 2015

MS-BKRP has no timer events in MS-BKRP 3.1.4, but I wonder:  When does
windows roll over these keys, and what policy or other configuration is
used to control this?

I'm assuming the ClientWrap certificate needs to be rolled over one a
year, as it has a 365 day lifetime.


Andrew Bartlett
Andrew Bartlett
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

More information about the cifs-protocol mailing list