KB-8152: Kerberos Armoring support for Windows Server 2012
Applies to: DirectControl Suite 2017 (5.4.0) and above on all supported platforms
Question: Does Centrify Direct Control support Kerberos Armoring and if so what options?
Answer: Suite 2017 now supports the Flexible Authentication Secure Tunneling (FAST, aka Kerberos armoring) feature in Windows Server 2012 and above for the following options: (1) Not supported, (2) Supported and (3) Always provide claims.
Note: We do not support option (4) Fail unarmored auth request (AS-REQ).