SCVMM: Service Principal Names (SPNs) Required for Proper SCVMM 2008 Functionality
SCVMM 2008, 2008 R2, as well as future versions of SCVMM rely on kerberos and kerberos delegation functionality for its security and authentication model. You may encounter various problems with SCVMM related to authentication and authorization if the underlying platform service principal names (SPNs) are not properly set.
For Virtual Console Support for Hyper-V Hosts (VMCONNECT.EXE) – This will be required on Hyper-V Hosts. Use the following command to set and verify SPNs.
setspn -s "Microsoft Virtual Console Service/HOSTNAME" computername setspn -s "Microsoft Virtual Console Service/hostname.fqdn.etc" computername
For P2V Support.
Use the following command to set and verify SPNs.
setspn -s "Microsoft Virtual System Migration Service/hostname.fqdn.etc" computername setspn -s "Microsoft Virtual System Migration Service/hostname" computername
For VS2005 Hosts and the VMRC utility
– This will be required on Virtual Server 2005 Hosts. Use the following command to set and verify SPNs.
setspn -s vmrc/hostname.fqdn.etc:5900 computername setspn -s vmrc/hostname:5900 computername setspn -s vssrvc/hostname.fqdn.etc computername setspn -s vssrvc/hostname computername
For RDP Support.
Use the following command to set and verify SPNs.
setspn -s TERMSRV/hostname.fqdn.etc computername setspn -s TERMSRV/hostname computername
For all Hosts.
Use the following command to set and verify SPNs.
setspn -s HOST/hostname computername setspn -s HOST/hostname.fqdn.etc computername
HTTP (may needed for authentication on SSP if VMM server is using Remote SQL.)
Use the following command to set and verify SPNs.
setspn -s HTTP/hostname.fqdn.etc computername setspn -s HTTP/hostname computername
SQL VMM Database
Depends on port and instance type:
Named Instance.
Use the following command to set and verify SPNs.
setspn -s MSSQLSvc/hostname.fqdn.etc:Port computername
setspn -s MSSQLSvc/hostname.fqdn.etc:InstanceName computername
Default Instance.
Use the following command to set and verify SPNs.
setspn -s MSSQLSvc/hostname:1433 computername setspn -s MSSQLSvc/hostname.fqdn.etc:1433 computername
Here are some links to some excellent articles: