Released: Microsoft Kerberos Configuration Manager for SQL Server v3.1

Published Mar 23 2019 03:37 PM 250 Views
Microsoft
First published on MSDN on Jan 31, 2017
We are pleased to announce the latest generally-available (GA) of Microsoft Kerberos Configuration Manager for SQL Server.

Get it here: Download Microsoft Kerberos Configuration Manager for SQL Server

Kerberos authentication provides a highly secure method to authenticate client and server entities (security principals) on a network. To use Kerberos authentication with SQL Server, a Service Principal Name (SPN) must be registered with Active Directory, which plays the role of the Key Distribution Center in a Windows domain. In addition, many customers also enable delegation for multi-tier applications using SQL Server. In such a setup, it may be difficult to troubleshoot the connectivity problems with SQL Server when Kerberos authentication fails.

The Kerberos Configuration Manager for SQL Server is a diagnostic tool that helps troubleshoot Kerberos related connectivity issues with SQL Server, SQL Server Reporting Services, and SQL Server Analysis Services. It can perform the following functions:

  • Gather information on OS and Microsoft SQL Server instances installed on a server.

  • Report on all SPN and delegation configurations on the server.

  • Identify potential problems in SPNs and delegations.

  • Fix potential SPN problems.


This release (v 3.1) adds support for SQL Server 2016.

Also, for reference, the Kerberos Configuration Manager for SQL Server creates a log file in %AppData%\Microsoft\KerberosConfigMgr .

Note : Microsoft Kerberos Configuration Manager for SQL Server requires a user with permission to connect to the WMI service on any machine its connecting to. For more information, refer to Securing a Remote WMI Connection .
%3CLINGO-SUB%20id%3D%22lingo-sub-385138%22%20slang%3D%22en-US%22%3EReleased%3A%20Microsoft%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%20v3.1%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-385138%22%20slang%3D%22en-US%22%3E%0A%20%26lt%3Bmeta%20http-equiv%3D%22Content-Type%22%20content%3D%22text%2Fhtml%3B%20charset%3DUTF-8%22%20%2F%26gt%3B%3CSTRONG%3EFirst%20published%20on%20MSDN%20on%20Jan%2031%2C%202017%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%20We%20are%20pleased%20to%20announce%20the%20latest%20generally-available%20(GA)%20of%20Microsoft%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server.%20%3CBR%20%2F%3E%3CBR%20%2F%3E%3CSTRONG%3EGet%20it%20here%3A%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D39046%22%20title%3D%22http%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D39046%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%20Download%20Microsoft%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%20%3C%2FA%3E%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20Kerberos%20authentication%20provides%20a%20highly%20secure%20method%20to%20authenticate%20client%20and%20server%20entities%20(security%20principals)%20on%20a%20network.%20To%20use%20Kerberos%20authentication%20with%20SQL%20Server%2C%20a%20Service%20Principal%20Name%20(SPN)%20must%20be%20registered%20with%20Active%20Directory%2C%20which%20plays%20the%20role%20of%20the%20Key%20Distribution%20Center%20in%20a%20Windows%20domain.%20In%20addition%2C%20many%20customers%20also%20enable%20delegation%20for%20multi-tier%20applications%20using%20SQL%20Server.%20In%20such%20a%20setup%2C%20it%20may%20be%20difficult%20to%20troubleshoot%20the%20connectivity%20problems%20with%20SQL%20Server%20when%20Kerberos%20authentication%20fails.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20The%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%20is%20a%20diagnostic%20tool%20that%20helps%20troubleshoot%20Kerberos%20related%20connectivity%20issues%20with%20SQL%20Server%2C%20SQL%20Server%20Reporting%20Services%2C%20and%20SQL%20Server%20Analysis%20Services.%20It%20can%20perform%20the%20following%20functions%3A%20%3CBR%20%2F%3E%3CUL%3E%3CBR%20%2F%3E%3CLI%3EGather%20information%20on%20OS%20and%20Microsoft%20SQL%20Server%20instances%20installed%20on%20a%20server.%3C%2FLI%3E%3CBR%20%2F%3E%3CLI%3EReport%20on%20all%20SPN%20and%20delegation%20configurations%20on%20the%20server.%3C%2FLI%3E%3CBR%20%2F%3E%3CLI%3EIdentify%20potential%20problems%20in%20SPNs%20and%20delegations.%3C%2FLI%3E%3CBR%20%2F%3E%3CLI%3EFix%20potential%20SPN%20problems.%3C%2FLI%3E%3CBR%20%2F%3E%3C%2FUL%3E%3CBR%20%2F%3E%20This%20release%20(v%203.1)%20adds%20support%20for%20SQL%20Server%202016.%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20Also%2C%20for%20reference%2C%20the%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%20creates%20a%20log%20file%20in%20%3CEM%3E%20%25AppData%25%5CMicrosoft%5CKerberosConfigMgr%20%3C%2FEM%3E%20.%20%3CSTRONG%3E%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%20%3CBR%20%2F%3E%20%3CSTRONG%3ENote%20%3C%2FSTRONG%3E%20%3A%20Microsoft%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server%20requires%20a%20user%20with%20permission%20to%20connect%20to%20the%20WMI%20service%20on%20any%20machine%20its%20connecting%20to.%20For%20more%20information%2C%20refer%20to%20Securing%20a%20Remote%20WMI%20Connection%20.%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-385138%22%20slang%3D%22en-US%22%3EFirst%20published%20on%20MSDN%20on%20Jan%2031%2C%202017%20We%20are%20pleased%20to%20announce%20the%20latest%20generally-available%20(GA)%20of%20Microsoft%20Kerberos%20Configuration%20Manager%20for%20SQL%20Server.%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-385138%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESQLReleases%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Version history
Last update:
‎Mar 23 2019 03:37 PM
Updated by: