Enabling 128-bit Encryption for Routing and Remote Access

Last reviewed: December 4, 1997
Article ID: Q169895

The information in this article applies to:

Microsoft Windows NT Server version 4.0 with Service Pack 3

SUMMARY

If you upgrade a Remote Access Service (RAS) server that uses 128-bit encryption to Routing and Remote Access Service, you will have only 40-bit demand-dial and RAS encryption. The following information explains how to restore 128-bit encryption with Routing and Remote Access Service.

MORE INFORMATION

If you have the North American version of Windows NT Server version 4.0 Service Pack 3 it is possible to enable strong encryption (128-bit) for Routing and Remote Access Services.

Use the following steps to determine which version of encryption that is actually installed:

Start Windows NT Explorer and find the %Systemroot%\System32\Drivers directory.
Right-click on the file Ndiswan.sys, point to Properties, and then click.
Click the Version tab from the Properties sheet and look at the Description field.
The Description of the 40-bit version is:
```
      MS WAN Wrapper Network Driver (Export Version)
```
The Description of the 128-bit version is:
```
      MS WAN Wrapper Network Driver (Domestic Use Only)
```

To allow for the use of strong encryption in Routing and Remote Access:

Apply the North American version of Service Pack 3.
Install Routing and Remote Access Services.
In the %SystemRoot%\System32\Drivers directory, rename the 40-bit Ndiswan.sys file to Ndiswan.old.
Copy the 128-bit Ndiswan.sys file from the North American Service Pack 3 to the %SystemRoot%\System32\Drivers directory.
Restart your computer.

For more information about how to obtain the North American version of Microsoft Windows NT Server version 4.0 Service Pack 3, please see the following article in the Microsoft Knowledge Base:

   ARTICLE-ID: Q169296
   TITLE     : How to obtain the 128-bit version of WinNT 4.0
               Service Pack

NOTE: If you install a network adapter or service after you have installed Routing and Remote Access Service, and if the adapter or service requires you to reinstall Service Pack 3, you must then update Routing and Remote Access Service. To update Routing and Remote Access, go to Control Panel, Network, Services, select Routing and Remote Access, and then click Update. Type the path to the Routing and Remote Access files. When you do this you will have to re-copy the 128-bit version of Ndiswan.sys from the service pack.

For additional information, please see the following article(s) in the Microsoft Knowledge Base:

   ARTICLE-ID: Q174474
   TITLE     : Installing RRAS Disables 128-bit RAS Encryption

Additional reference words: rras
Keywords : NTRAS ntrouter ntsecurity NTSrv kbnetwork
Version : 4.0
Platform : winnt

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: December 4, 1997
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.