Windows AFS setup

OpenAFS 1.7 on WinXP,  Win7, and Win8
Download and Install Kerberos
  1. Download and install Kerberos for Windows here.  
  2. Choose the "Typical" installation button.
  3. If "Close Running Processes" appears with AFS Credentials Manager listed, open Task Manager and end process afscreds.exe .
Configure Kerberos

Start Network Identity Manager from the Start Menu. 

When started it appears as an icon at the bottom right of your screen in the system tray (by the clock). The icon looks like a white box or a shadow of a person.  

Click on the new system tray icon to open Network Identity Manager

Select View->All Identities.


  1. If your AFS username appears, select your identity. Then go to Options->Identities and select your identity in the left column. Skip to step 3.
  2. If your AFS username does not appear select Options->Identities, (General Tab) Add new Identity... . Type in your AFS username and PHYSICS.WISC.EDU (not for the realm. Click OK. Select your identity in the left column Then go to Options->Identities and select your identity from the left column.

  1. On the General Tab check "Always show in credentials list."
  2. Disable Kerberos v4 by selecting "Plug-ins" in the left column, "Krb4Cred" in the central list, then Disable near bottom, Yes, OK.

  1. Exit Identity Manager: File-> Exit.
  2. Start Identity Manager:  Find it in your Start menu, click on it.  Then find it again in the system tray.
  3. If your identity still does not appear continue to install AFS.  After finishing the AFS install contact
  4. If you've already installed AFS, skip to Obtain AFS Token below.
Download AFS

Download current AFS 1.7x from
Two downloads for 64-bit... a 64-bit MSI installer and a 32-bit MSI tools installer

One download for 32-bit

Install & Configure AFS

After running the installer, choose "Custom"
Be sure "Authentication for AFS" will be installed.
Be sure "Client configuration tool" will be installed. (Control Panel applet)

Choose New Settings.
 default cell:
 Integrated login        disabled
 afs crypt security      enabled
 freelance mode          enabled
 lookup cells in DNS     enabled

 "Start AFS Credentials at Startup" : do not check. (If checked will open an AFS credentials prompt upon login. This is redundant with Network Identity Manager.)
All the rest should be checked except "Show credentials window on startup".

There is a Control Panel applet that can be used to change default cell after installation.

Map useful folders to drive letters.  Do not use OpenAFS context menus which claim to map a folder to a drive letter. Instead use Window's standard tool: Instructions here

Obtain AFS token
  1. Open the Network Identity Manager window again.
  2. Right-click on your identity name "Obtain New Credentials". Enter password and click OK.
    Verify that you are able to access AFS.

Now that Network Identity Manager is set up it should start when the computer starts.  You can then logon by following the previous two steps.
If this is not working for you, please send an email to

Accessing AFS folders

Open a Windows Explorer window.
In the address bar place this text:
and push "Enter".

©2013 Board of Regents of the University of Wisconsin System