How to configure vCenter to use AES encryption instead of RC4 when communicating with Active Directory

Products

• VMware vCenter Server

Issue/Introduction

• It has been noticed that RC4 encryption is being used for communication between a vCenter and Active Directory.
• The requirement is to ensure that AES encryption is used for all communication between a vCenter and Active Directory.

Environment

VMware vCenter Server

Resolution

• RC4 will be used if the identity source is configured using 'Integrated Windows Authentication'.
• The solution is to configure the identity source to use Active Directory over LDAP with a certificate. This will result in a LDAPS (Secure LDAP) being used, which makes use of the AES protocol.
• Refer to the tech documentation for detailed steps on how to configure an identify source and the KB316596.

Additional Information

• Please be aware that 'Integrated Windows Authentication' is deprecated and will be removed in the next major release after vSphere 8.0 Update 3 as announced in the release notes.