Skip to content

Commit 8df8ab9

Browse files
authored
Update Rename-NetIPsecRule.md
Updating the details in -KeyModule parameter to reflect changes in the code for how this value is set, and set this information to be consistent across all the relevant documentation pages that reference it.
1 parent e237b6a commit 8df8ab9

File tree

1 file changed

+6
-9
lines changed

1 file changed

+6
-9
lines changed

docset/winserver2022-ps/netsecurity/Rename-NetIPsecRule.md

Lines changed: 6 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -630,15 +630,12 @@ Accept wildcard characters: False
630630
Specifies that matching IPsec rules of the indicated key module are renamed.
631631
This parameter specifies which keying modules to negotiate.
632632
The acceptable values for this parameter are: Default, AuthIP, IKEv1, or IKEv2.
633-
-- Default: Equivalent to both IKEv1 and AuthIP.
634-
Required in order for the rule to be applied to computers running Windows versions prior to nextref_server_7.
635-
---- There are authentication and cryptographic methods that are only compatible with certain keying modules.
636-
This is a very advanced setting intended only for specific interoperability scenarios.
637-
Overriding this parameter value may result in traffic being sent in plain-text if the authorization and cryptographic settings are not supported by the keying modules there.
633+
- Default: KeyModule is set based on the authentication method. As of Win11 24H2 and Server 2025, the Default is equivalent to both IKEv1 and IKEv2, and only sets AuthIP if the authentication method(s) require it. In previous releases, Default is equivalent to both IKEv1 and AuthIP. Required in order for the rule to be applied to computers running Windows versions prior to Server 2008.
638634
- AuthIP: Supported with phase 2 authentication.
639-
- IKEv1: Supported with pre-shared key (PSK), Certificates, and Kerberos.
640-
- IKEv2: Not supported with Kerberos, PSK, or NTLM.
641-
Windows versions prior to Windows Server 2012 only support the Default configuration.
635+
- IKEv1: Supported with pre-shared key (PSK), Certificates, and Kerberos. Supported with phase 1 authentication only.
636+
- IKEv2: Not supported with Kerberos, PSK, or NTLM. Supported with phase 1 authentication only.
637+
638+
The default value is Default. There are authentication and cryptographic methods that are only compatible with certain keying modules. This is a very advanced setting intended only for specific interoperability scenarios. Overriding this parameter value may result in traffic being sent in plain-text if the authorization and cryptographic settings are not supported by the keying modules. Windows versions prior to Windows Server 2012 only support the Default configuration.
642639
643640
```yaml
644641
Type: KeyModule[]
@@ -648,7 +645,7 @@ Accepted values: Default, IKEv1, AuthIP, IKEv2
648645

649646
Required: False
650647
Position: Named
651-
Default value: None
648+
Default value: Default
652649
Accept pipeline input: False
653650
Accept wildcard characters: False
654651
```

0 commit comments

Comments
 (0)