SOMIS News & Updates:

Zimbra users may use the webmail site (Zimbra - log in with your PennKey) with full functionality. We expect to have restored all clients including mobile phones by tomorrow morning.
Many machines at the School of Medicine have been compromised by a new type of virus that presents itself as an actual anti-virus product while a user is browsing the internet. If you experience anything remotely similar to this virus description, or are concerned about any suspicious activity on your computer, please contact your LSP immediately. For more information, please visit the following link.
Zimbra users are reporting an increase in spear-phishing attempts. Penn computer administrators will NEVER ask you for your password at any time via any medium. For more information about phishing, please see the following link.

Home > Services > Email Services > Set up Kerberos on a Windows XP computer

Set up Kerberos on a Windows XP computer

This guide will help you set up Kerberos for use with Enhanced Security email accounts at Penn.

Download and install the Network Identity Manager

If you do not already have the latest version of the MIT Kerberos Network Identity Manager, you may download it from Penn's Supported Computing Products web site at: http://www.upenn.edu/computing/product in the "Security Applications" section. When you have finished downloading the installer, double-click on it to install the software.

Launch the Kerberos Network Identity Manager application

After you have successfully installed the Kerberos software, it will be available in your "Start" menu. Look for it in the "All Programs" section, then in the "Kerberos for Windows 3.2.2" directory.

Get a new ticket by clicking on the Kerberos Network Identity Manager in your System Tray

The empty Network Identity Manager box that resides in the lower right corner of your screen (the "System Tray") will bring up a Kerberos window when you click on it. Click on the first icon in the upper left corner of the Network Identity Manger window to bring up a password dialog box. Enter your PennKey and PennKey password then click "Ok" to get a new Kerberos ticket.

ON Campus: You are ready to begin using your Kerberos/Email software

If you are on campus, you are ready to begin using Kerberos. You can see whether you have a ticket or not if the Ticket Manager in your System Tray (lower right corner) has a green-tinted silhouette in it. If the silhouette is not present or has a red tint, you will need to renew your Kerberos credentials. If you are not on campus or behind a firewall, please see the additional steps below.

OFF Campus: IMPORTANT additional settings

If you are connecting from anywhere outside of Penn's campus, or from behind a firewall on Penn's campus, you will need to make one small change to the Kerberos configuration file before you begin. Open your hard drive and find the C:\WINDOWS directory. Open the WINDOWS directory and look for the krb5.ini file. If you start typing "krb5" in this window you should be brought to the file immediately.

Open the krb5.ini file in Notepad by double-clicking on it

Once the file is open in Notepad, change the line "noaddresses = false" to "noaddresses = true". Save your changes to this file in Notepad and close it. Next, Restart your computer and you will be ready to begin using Kerberos with your supported email program.