Windows AFS setup
OpenAFS 1.7 on WinXP, Win7, and Win8
Download and Install Kerberos
- Download and install Kerberos for Windows here.
- Choose the "Typical" installation button.
- If "Close Running Processes" appears with AFS Credentials Manager listed, open Task Manager and end process afscreds.exe .
Start Network Identity Manager from the Start Menu.
When started it appears as an icon at the bottom right of your screen in the system tray (by the clock). The icon looks like a white box or a shadow of a person.
Click on the new system tray icon to open Network Identity Manager
Select View->All Identities.
- If your AFS username appears, select your identity. Then go to Options->Identities and select your identity in the left column. Skip to step 3.
- If your AFS username does not appear select Options->Identities, (General Tab) Add new Identity... . Type in your AFS username and PHYSICS.WISC.EDU (not physics.wisc.edu) for the realm. Click OK. Select your identity in the left column Then go to Options->Identities and select your identity from the left column.
- On the General Tab check "Always show in credentials list."
- Disable Kerberos v4 by selecting "Plug-ins" in the left column, "Krb4Cred" in the central list, then Disable near bottom, Yes, OK.
- Exit Identity Manager: File-> Exit.
- Start Identity Manager: Find it in your Start menu, click on it. Then find it again in the system tray.
- If your identity still does not appear continue to install AFS. After finishing the AFS install contact
- If you've already installed AFS, skip to Obtain AFS Token below.
Download current AFS 1.7x from http://openafs.org/windows.html
Two downloads for 64-bit... a 64-bit MSI installer and a 32-bit MSI tools installer
One download for 32-bit
Install & Configure AFS
After running the installer, choose "Custom"
Be sure "Authentication for AFS" will be installed.
Be sure "Client configuration tool" will be installed. (Control Panel applet)
Choose New Settings.
default cell: physics.wisc.edu
Integrated login disabled
afs crypt security enabled
freelance mode enabled
lookup cells in DNS enabled
"Start AFS Credentials at Startup" : do not check. (If checked will open an AFS credentials prompt upon login. This is redundant with Network Identity Manager.)
All the rest should be checked except "Show credentials window on startup".
There is a Control Panel applet that can be used to change default cell after installation.
Map useful folders to drive letters. Do not use OpenAFS context menus which claim to map a folder to a drive letter. Instead use Window's standard tool: Instructions here
Obtain AFS token
- Open the Network Identity Manager window again.
- Right-click on your identity name "Obtain New Credentials". Enter password and click OK.
Verify that you are able to access AFS.
Now that Network Identity Manager is set up it should start when the computer starts. You can then logon by following the previous two steps.
If this is not working for you, please send an email to
Accessing AFS folders
Open a Windows Explorer window.
In the address bar place this text:
and push "Enter".