2.1 Transport

This protocol uses the Remote Procedure Call (RPC) over TCP. It also uses RPC dynamic endpoints, as specified in [C706] chapters 6, 7, 8, 9, 10, 11, 12, 13, and 14.

This RPC protocol MUST use Security Support Provider Interface (SSPI) security by using packet privacy protection level (RPC_C_PROTECT_LEVEL_PKT_PRIVACY) and GSS negotiate authentication (RPC_C_AUTHN_GSS_NEGOTIATE), which negotiates between Kerberos Protocol Extensions, as specified in [MS-KILE], and NT LAN Manager (NTLM) Authentication Protocol, as specified in [MS-NLMP] authentication.

This protocol MUST use the following interface identifier as specified in [C706] section 3.1.9:

The server MUST register this interface identifier with the RPC run-time during server initialization as specified in section 3.1.3. The client MUST use this interface identifier when binding to the RPC server as specified in section 3.2.3.