Kerberos SPN Generation Setup Tool – Common Tab

The last post “Kerberos SPN Generation Setup Tool – Documentation, Instructions” gave a review of where to find help basically in the form of “Online Documentation” and the “Instructions tab”.  This is a continuation of the series of blog posts “Kerberos SPN Generation Setup Tool” that describe how to use the Kerberos SPN Generation Setup Tool Beta for Kerberos Constrained Delegation with Microsoft BI tools.  This post covers the first Input section tab – the “Common tab”.  You can download the Kerberos SPN Generation Setup Tool Beta at .

Input Tabs

  • Common
  • SSRS 2005
  • SSRS 2008
  • SSAS 2008
  • PAS
  • PPS
  • MOSS 2007
  • Additional Accounts

Common Tab

This tab’s information is required to use the tool.

Required Fields (denoted by the color of the input fields)

  • NetBIOS Domain Name
  • Fully Qualified Domain Name
  • Path to SetSPN.exe on the Domain Controller


The tool was made so that the input part could be done while not logged into the domain.  If you are logged in however, there is a utility link on this tab that can gather the domain information and fill in the NetBIOS and FQDN for you.  Hey why type it in when you can hit a link!

If you don’t know this information, you can find it on your domain controller by referring to the Properties for Active Directory Domains and Trusts in Domain Name Server.  See the example below.


You will also need to find the path to SetSPN.exe on the domain controller.  Make sure to enter this path with a trailing “\”.

Standard items for input tabs

There are several items that help you complete the input for each section.  These include Messages and Navigation.


Data Entry Errors or Warnings: All errors and warnings must be cleared before the section is complete.  In other words, you have to complete the required fields in each section and resolve any errors or warnings in order to complete the section.

Data Entry Progress:  There is a traffic light symbol at the bottom of each input section.  When all required fields are completed successfully, the light will be green.  When completing a section, either fill in all of the required fields (and the appropriate optional fields) or delete the entries if you filled out the wrong section.  The tool will not generate SPNs with a section partially completed.

The traffic lights indicate the following:

  • Red – No Data Entered
  • Yellow – Partial Required Data Entered
  • Green – All Required Data Entered (the required data in the tab is complete)

Note that the “Main” tab uses the same “Traffic Light” symbols to keep track of which sections have been completed.


There is a link at the top of each input tab (usually cell B2) that says “Back to Main Tab”.  The main tab is the main navigation for the tool.  You can also use the spreadsheet tabs for navigation.  Either way allows you to easily navigate between the various sections of the spreadsheet.

For more information about the tool, read the tool overview “Kerberos SPN Generation Setup Tool”.  It is the online index of additional information about the Kerberos SPN Generation Setup Tool.

What additional features would you like to see in a Kerberos SPN setup tool?  Leave your suggestions below.

FUTURESULTS, LLC Blog and FUTURESULTS, LLC Website are both created by Robert Lambrecht.

This entry was posted in Kerberos, Microsoft BI, Microsoft BI - Security - Kerberos, Security and tagged , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , . Bookmark the permalink.

5 Responses to Kerberos SPN Generation Setup Tool – Common Tab

  1. Pingback: Kerberos SPN Generation Setup Tool | FUTURESULTS, LLC Blog

  2. Pingback: Kerberos SPN Generation Setup Tool – Generate SPNs | FUTURESULTS, LLC Blog

  3. Pingback: Kerberos SPN Generation Setup Tool – Delegation Process | FUTURESULTS, LLC Blog

  4. Pingback: Kerberos SPN Generation Setup Tool – SSAS 2008 | FUTURESULTS, LLC Blog

  5. Pingback: Kerberos SPN Generation Setup Tool – SSRS 2005 | FUTURESULTS, LLC Blog

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s