Overview
The error "The encryption type requested is not supported by the KDC" occurs during the installation of FogBugz On-Premises when the installer attempts to use RC4_HMAC_MD5 encryption, which is not supported by the customer's domain controller configured for AES128/AES256 only. This issue arises from a mismatch in supported Kerberos encryption types between the domain controller and the service account used for installation. The solution involves temporarily enabling RC4_HMAC_MD5 on the server during installation.
Solution
Follow these steps to resolve the error:
-
Open Local Security Policy:
- Access the Local Security Policy on the FogBugz server.
-
Navigate to Security Options:
- Go to Security Settings → Local Policies → Security Options.
-
Configure Encryption Types:
- Find the policy "Network security: Configure encryption types allowed for Kerberos."
- Ensure RC4_HMAC_MD5 is checked. AES128/AES256 can remain enabled.
-
Apply Changes and Reboot:
- Apply the changes.
- Reboot the server if prompted.
-
Re-run the Installer:
- Proceed with the FogBugz installation.
-
Post-Installation:
- Once installation is complete, disable RC4_HMAC_MD5 again as it is not needed post-installation.
Note: This encryption type is only required during the installation process and does not affect FogBugz functionality afterward.
Frequently Asked Questions
- 1. How do I know if this error applies to my situation?
- You will see the error message "The encryption type requested is not supported by the KDC" during the installation of FogBugz On-Premises if your domain controller supports only AES128/AES256 encryption types.
- 2. What should I do if the error persists after enabling RC4_HMAC_MD5?
- Ensure that the Local Security Policy changes have been applied correctly and that the server has been rebooted if prompted. If the issue persists, verify that the FogBugz installer is being run with the correct permissions and settings.
- 3. Can I disable RC4_HMAC_MD5 after installation?
- Yes, RC4_HMAC_MD5 is only needed during the installation process. Once FogBugz is installed, you can safely disable this encryption type as it is not used by FogBugz post-installation.
Priyanka Bhotika
Comments