Servers

    Microsoft® Kerberos Configuration Manager for SQL Server®

    Language:
    English
    Microsoft Kerberos Configuration Manager for SQL Server is a diagnostic tool that helps troubleshoot Kerberos related connectivity issues with SQL Server, SQL Server Reporting Services, and SQL Server Analysis Services.
    • Note:There are multiple files available for this download.Once you click on the "Download" button, you will be prompted to select the files you need.
      Version:

      v3

      File Name:

      ENU\x64\KerberosConfigMgr.msi

      ENU\x86\KerberosConfigMgr.msi

      Date Published:

      6/3/2014

      File Size:

      764 KB

      765 KB

        Kerberos authentication provides a highly secure method to authenticate client and server entities (security principals) on a network. To use Kerberos authentication with SQL Server, a Service Principal Name (SPN) must be registered with Active Directory, which plays the role of the Key Distribution Center in a Windows domain. In addition, many customers also enable delegation for multi-tier applications using SQL Server. In such a setup, it may be difficult to troubleshoot the connectivity problems with SQL Server when Kerberos authentication fails.

        The Kerberos Configuration Manager for SQL Server is a diagnostic tool that helps troubleshoot Kerberos related connectivity issues with SQL Server, SQL Server Reporting Services, and SQL Server Analysis Services. It can perform the following functions:
        • Gather information on OS and Microsoft SQL Server instances installed on a server.
        • Report on all SPN and delegation configurations on the server.
        • Identify potential problems in SPNs and delegations.
        • Fix potential SPN problems.
    • System Requirements
      Supported Operating System

      Windows 7, Windows 8, Windows Server 2003 Service Pack 2, Windows Server 2008, Windows Server 2008 R2 SP1, Windows Server 2012

        • Supported SQL Server versions: SQL Server 2008 and later.
        • SQL Server Reporting Services 2012 in SharePoint mode is not supported.
        • The following are required on the machine where the Kerberos Configuration Manager for SQL Server is launched:
          • .Net framework 4.0 or higher.
      • To Install:
        1. Download the 32bit or 64bit version of the Kerberos Configuration Manager installer that matches your computer’s OS architecture.
        2. Click Open to start the installation immediately or click Save to save the installation .msi file to disk and install it later.
        3. Accept the license term of this tool.
        4. Click Next to complete the installation.
        5. By default, this application is installed under %SystemDrive%:\Program Files\Microsoft\Kerberos Configuration Manager for SQL Server.


        To Launch the Tool:
        1. After the installation is complete successfully, double click the KerberosConfigMgr.exe to launch the application.
        2. To troubleshoot connectivity issue with SQL Server, connect to the target computer with a domain user account that has user permission to that computer.
        3. To troubleshoot connectivity issue with SQL Reporting Services, connect to the target computer with a domain user account that has administrative permission to that computer.

        To Generate SPN List from Command Line:
        1. Go to command line. (NOTE: To troubleshoot connectivity issue with SQL Reporting Services, launch command line window as administrator)
        2. Switch to the folder where KerberosConfigMgr.exe is.
        3. Type KerberosConfigMgr.exe -q -l
        4. For more command line option, type KerberosConfigMgr.exe -h

        To Save a Server’s Kerberos Configuration Information:
        1. Connect to the target windows server.
        2. Click on Save button on the toolbar.
        3. Specify the location where you want the file to be saved at. It can be on a local drive or network share.
        4. The file will be saved as .XML format.

        To View a Server’s Kerberos Configuration Information from Saved File:
        1. Click on the Load button on the toolbar.
        2. Open the XML file generated by Kerberos Configuration Manager.

        To Generate a Script to Fix SPN from Command Line:
        1. Click on the Generate button for the SPN entry.
        2. The generated script can be used by a user who has privilege to fix the SPN on the server.

        To See the Log Files for this Tool:
        1. 1. By default, one log file is generated, each time the application is run, in the user’s application data folder: %APPDATA%\Microsoft\KerberosConfigMgr

        To Get Help:
        Option 1: Hover the mouse cursor over the command for tooltip.
        Option 2: Run KerberosConfigMgr.exe –h from command line.
        Option 3: Click the Help button in the toolbar.

    Popular downloads

    Loading your results, please wait...

    Free PC updates

    • Security patches
    • Software updates
    • Service packs
    • Hardware drivers

    Microsoft suggests

    Download a free trial of Windows Server 2012 R2.
    Windows Server 2012 R2 free trial
    Experience the new and enhanced capabilities.
    Free trial