www.BlackViper.com: Windows 7 Services 411 - IKE and AuthIP IPsec Keying Modules

IKE and AuthIP IPsec Keying Modules

Default Description:

The IKEEXT service hosts the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) keying modules. These keying modules are used for authentication and key exchange in Internet Protocol security (IPsec). Stopping or disabling the IKEEXT service will disable IKE and AuthIP key exchange with peer computers. IPsec is typically configured to use IKE or AuthIP; therefore, stopping or disabling the IKEEXT service might result in an IPsec failure and might compromise the security of the system. It is strongly recommended that you have the IKEEXT service running.

Additional Information:

If you use an external hardware firewall/gateway/router between your computer and the internet, do not use IPsec (VPN tunneling, etc) and Internet Connection Sharing (ICS), then this service and the following group of services can be disabled:

• Base Filtering Engine
• IKE and AuthIPsec Keying Modules
• Internet Connection Sharing (ICS)
• IPsec Policy Agent
• Routing and Remote Access
• Windows Firewall

I highly recommend that you do not disable the Windows Firewall unless you use a different software firewall or external hardware solution, but the services listed above are all involved with each other.

Additional Reading:

• ICS: http://en.wikipedia.org/wiki/Internet_Connection_Sharing
• IKE: http://en.wikipedia.org/wiki/IKE
• IPsec: http://en.wikipedia.org/wiki/IPsec
• VPN: http://en.wikipedia.org/wiki/Virtual_private_network

Discussion Topic Link:

Windows 7 Services Forum

Defaults Startup Type:

Windows 7 Starter: Manual
Windows 7 Home Basic: Manual
Windows 7 Home Premium: Manual
Windows 7 Professional: Manual
Windows 7 Ultimate: Manual
Windows 7 Enterprise: Manual

Other Settings:

Safe Setting: Manual

Service Names:

Service Name (registry): IKEEXT

Display Name: IKE and AuthIP IPsec Keying Modules

Default Path and Command Line Options:

C:\Windows\system32\svchost.exe -k netsvcs

Log On As:

Account: Local System account

Dependencies:

What service IKE and AuthIP IPsec Keying Modules needs to function properly:

• Base Filtering Engine (S, HB, HP, P, U, E)
  • Remote Procedure Call (RPC) (S, HB, HP, P, U, E)
    • DCOM Server Process Launcher (S, HB, HP, P, U, E)
    • RPC Endpoint Mapper (S, HB, HP, P, U, E)

What other service require IKE and AuthIP IPsec Keying Modules to function properly:

• None (S, HB, HP, P, U, E)

Registry Settings (.reg):

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IKEEXT]
"DisplayName"="@%SystemRoot%\\system32\\ikeext.dll,-501"
"ImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"Description"="@%SystemRoot%\\system32\\ikeext.dll,-502"
"ObjectName"="LocalSystem"
"ErrorControl"=dword:00000001
"Start"=dword:00000003
"Type"=dword:00000020
"DependOnService"=hex(7):42,00,46,00,45,00,00,00,00,00
"ServiceSidType"=dword:00000001
"RequiredPrivileges"=hex(7):53,00,65,00,41,00,75,00,64,00,69,00,74,00,50,00,72,\
00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,49,00,6d,00,\
70,00,65,00,72,00,73,00,6f,00,6e,00,61,00,74,00,65,00,50,00,72,00,69,00,76,\
00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,54,00,63,00,62,00,50,00,\
72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,00,00,53,00,65,00,44,00,65,\
00,62,00,75,00,67,00,50,00,72,00,69,00,76,00,69,00,6c,00,65,00,67,00,65,00,\
00,00,00,00
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\
00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00,00,00,00,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IKEEXT\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
69,00,6b,00,65,00,65,00,78,00,74,00,2e,00,64,00,6c,00,6c,00,00,00
"ServiceDllUnloadOnStop"=dword:00000001
"ServiceMain"="IkeServiceMain"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IKEEXT\TriggerInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IKEEXT\TriggerInfo\0]
"Type"=dword:00000004
"Action"=dword:00000001
"GUID"=hex:07,9e,56,b7,21,84,e0,4e,ad,10,86,91,5a,fd,ad,09
"Data0"=hex:35,00,30,00,30,00,00,00,55,00,44,00,50,00,00,00,25,00,77,00,69,00,\
6e,00,64,00,69,00,72,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,\
00,32,00,5c,00,73,00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,\
65,00,00,00,49,00,4b,00,45,00,45,00,58,00,54,00,00,00,00,00
"DataType0"=dword:00000002