How to check the latest value of the Key Version Number (KVNO)
To find the KVNO using PowerShell for a particular computer object run
$ get-adcomputer <hostname> -property msDS-KeyVersionNumber
From a Linux computer with SAS installed the KVNO can be found by running an LDAP search.
# /opt/quest/bin/vastool -u host/ search '(&(objectCategory=computer)(cn=<hostname>))' msDS-KeyVersionNumber
To view KVNO in the default host.keytab file
# /opt/quest/bin/vastool ktutil list
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center