SecurityKeyEntropyMode SecurityKeyEntropyMode SecurityKeyEntropyMode SecurityKeyEntropyMode Enum


Describes the source of entropy used for key generation.

public enum class SecurityKeyEntropyMode
public enum SecurityKeyEntropyMode
type SecurityKeyEntropyMode = 
Public Enum SecurityKeyEntropyMode


ClientEntropy ClientEntropy ClientEntropy ClientEntropy 0

The client provides the key used for the issued token.

CombinedEntropy CombinedEntropy CombinedEntropy CombinedEntropy 2

The client and server both provide entropy that is combined using the P-SHA1 function to derive the key of the issued token. Due to collision problems with SHA1, Microsoft recommends a security model based on SHA256 or better.

ServerEntropy ServerEntropy ServerEntropy ServerEntropy 1

The server provides the key for the issued token.


This mode describes how the client and server compute a shared symmetric key to use with a token issued by the server.

Applies to