Often overlooked during the installation of a Microsoft SQL Server is the creating of the required Service Principal Name(s) (SPN) to enable authentication through Kerberos. SCOM highlights this oversight nicely with this warning:
The solution is simple: create the SPNs. All the info you need is actually in the alert's description. Use the information to create the SPNs.
Log on to a domain controller or member with domain admin rights, then run these from a command prompt:
setspn -S MSSQLSvc/CLSQL01.contoso.com:MSSQL CONTOSO\s_clsql_sqlsrv_de setspn -S MSSQLSvc/CLSQL01.contoso.com:1433 CONTOSO\s_clsql_sqlsrv_de
Replace the SPN (first parameter) and service account (second parameter) accordingly. Note that setspn -S does not exist on pre-2008R2 systems. In this case, use setspn -A.
« ‹ | December 2024 | › » | ||||
Sun | Mon | Tue | Wed | Thu | Fri | Sat |
1 | 2 | 3 | 4 | 5 | 6 | 7 |
8 | 9 | 10 | 11 | 12 | 13 | 14 |
15 | 16 | 17 | 18 | 19 | 20 | 21 |
22 | 23 | 24 | 25 | 26 | 27 | 28 |
29 | 30 | 31 |