thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

Ticket-Granting Ticket (TGT)

Kerberos ticket issued after initial authentication that is used to request service tickets.

Definition

The TGT is encrypted with the KDC's krbtgt key and contains the user's session key and authorization data. It typically lasts 10 hours in Active Directory and lets users obtain service tickets without re-entering credentials. Stolen TGTs can be replayed in pass-the-ticket attacks.

Example

klist on Windows displays the cached krbtgt TGT and service tickets for the logged-on user.

Exam tip

The TGT is presented to the TGS, not to the target service.

Related terms