Console Authentication - LDAP or LDAPS

[ismithDXC]

Can someone please confirm if authentication to the console is done via LDAP or LDAPS when WINDOWS authentication is set via the Sever Settings? Only the hostname for the domain controller is required when entering any information. We are currently still using ePO 5.3.1

[cdinet]

We currently use ldap for that.

[ismithDXC]

Hi,

Thanks for  your reply.

If it is only set for LDAP then will we all be negatively affected by the following Microsoft proposal to harden LDAP in a new security updated released in March 2020

https://support.microsoft.com/en-us/help/4520412/2020-ldap-channel-binding-and-ldap-signing-requirem... 

[cdinet · Accepted solution]

I believe the only way it would really affect epo is when using a registered ldap server.  You can set it to use ssl for ldaps.  That registered server, however, is not what is used for epo login authentication.  I really don't believe that should affect how logins are authenticated.  Refer to KB92298.

[ismithDXC]

Thanks for confirming via the KB article.

https://kc.mcafee.com/agent/index?page=content&id=KB92298&actp=null&viewlocale=en_US&showDraft=false...  

[cdinet]

Glad to assist!