Choosing a Login Name Type

Currently, CipherTrust Transparent Encryption authenticates users with a User Principal Name (UPN). In Windows Active Directory, a UPN is the name of a system user. It is written in an email address format, for example: john.doe@domain.com.

The Security Account Manager (SAM) is a Windows database that stores user accounts and security descriptors for users on the local computer. The SAM Account Name is used to support clients and servers running earlier versions of the operating system, such as Windows NT 4.0, Windows 95, Windows 98, and LAN Manager.

Previously, CipherTrust Transparent Encryption only supported the UPN. Now, you can choose which login name you want your users to use. However, you must choose SAM Account Name or UPN. You cannot use both. By default UPN support is enabled on a host.

CipherTrust Transparent Encryption provides the following voradmin commands to change the Windows registry entries.

To enable SAM support:

1. Type the following command:

   voradmin config usernamesupport samAccountName
   

2. Reboot the system for the changes to take affect.

To enable UPN support:

1. Type the following command:

   voradmin config usernamesupport userPrincipalName
   

2. Reboot the system for the changes to take affect.

To get a status of the current support:

1. Type the following command:

   voradmin config usernamesupport getCurrentNameSupport
   

2. Reboot the system for the changes to take affect.