Event viewer message.

  • Thread starter Thread starter Kerodo
  • Start date Start date
K

Kerodo

I just did a fresh Win2k install here and saw this in my App Event
Viewer. Anyone know what this means?

"The IP Security policy for ISAKMP/Oakley specified an encryption
algorithm that is invalid due to export cryptography restrictions. All
3DES encryption used by ISAKMP/Oakley is weakened to standard DES
encyption. Generally, this is benign. ISAKMP/Oakley will still be able
to negotiate IP security parameters, and protect that negotiation with
DES encryption. This should only be of concern if you demand that the
ISAKMP/Oakley negotiation be protected with 3DES encryption. If this is
the case, please contact your network administrator."
 
I just did a fresh Win2k install here and saw this in my App Event
Viewer. Anyone know what this means?

"The IP Security policy for ISAKMP/Oakley specified an encryption
algorithm that is invalid due to export cryptography restrictions. All
3DES encryption used by ISAKMP/Oakley is weakened to standard DES
encyption. Generally, this is benign. ISAKMP/Oakley will still be able
to negotiate IP security parameters, and protect that negotiation with
DES encryption. This should only be of concern if you demand that the
ISAKMP/Oakley negotiation be protected with 3DES encryption. If this is
the case, please contact your network administrator."
Click to expand...
I would think it's for an IPsec VPN solution. IPsec is on the Win 2K, XP
and 2K3 O/S(s). If you don't have an IPsec VPN solution active on your
machine, then you need not worry about the message. IPsec has to be started
and a policy active for it to mean anything to you.

Duane :)
 
Kerodo said:
I just did a fresh Win2k install here and saw this in my App Event
Viewer. Anyone know what this means?
Click to expand...

Microsoft, in their infinite wisdom, have decided to ship 3DES
separately from the OS. They have since come to their senses and
included it with XP Home, XP Pro, and 2003 Server.

http://www.microsoft.com/windows2000/downloads/recommended/encryption/
http://www.wired.com/news/technology/0,1282,36336,00.html
http://www.microsoft.com/resources/documentation/windows/xp/all/reskit/en-us/prnb_efs_cbhn.asp
(or http://snipurl.com/ah02)

-Gary
 
[email protected] said:
Microsoft, in their infinite wisdom, have decided to ship 3DES
separately from the OS. They have since come to their senses and
included it with XP Home, XP Pro, and 2003 Server.

http://www.microsoft.com/windows2000/downloads/recommended/encryption/
http://www.wired.com/news/technology/0,1282,36336,00.html
http://www.microsoft.com/resources/documentation/windows/xp/all/reskit/en-us/prnb_efs_cbhn.asp
(or http://snipurl.com/ah02)
Click to expand...

Ok, thanks for the info...
 
I would think it's for an IPsec VPN solution. IPsec is on the Win 2K, XP
and 2K3 O/S(s). If you don't have an IPsec VPN solution active on your
machine, then you need not worry about the message. IPsec has to be started
and a policy active for it to mean anything to you.
Click to expand...

Thanks Duane...
 
Back
Top