Browser Kerberos Setup

Internet Explorer Configuration

Once you are able to log into the workstation with your kerberos key you are now able to use that ticket in Internet Explorer.

Login to the Windows machine using an account of your Kerberos realm (administrative domain)
In Internet Explorer, click Tools, and then click Internet Options.

• 1. Click the Security tab
• 2. Click Local intranet
• 3. Click Sites
• 4. Click Advanced
• 5. Add your domain to the list


• 1. Click the Security tab
• 2. Click Local intranet
• 3. Click Custom Level
• 4. Select Automatic logon only in Intranet zone


• Visit a kerberized web site using IE (You must use the fully-qualified Domain Name in the URL)
• You are all set.

Firefox Configuration

You can configure Firefox to use Kerberos for Single Sign-on. The following instructions will guide you in configuring your web browser
to send your Kerberos credentials to the appropriate Key Distribution Center which enables Single Sign-on.

• 1. In the address bar of Firefox, type about:config to display the list of current configuration options.
• 2. In the Filter field, type negotiate to restrict the list of options.
• 3. Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.
• 4. Enter the name of the domain against which you want to authenticate, for example, .example.com.


• You are all set.

Automatic Configuration of older versions

You can configure older versions of Firefox (up to version 14) using signed code. Use Firefox configuration page for newer versions.

• 1. Import CA certificate. Make sure you checked all three checkboxes.
• 2. Click on "Configure Browser" button below.