Released: Kerberos Configuration Manager for SQL Server

Kerberos Configuration Manager for SQL Server (KerberosConfigMgr) was released on May 15th 2013, and is available for download at the Microsoft Download Center at https://www.microsoft.com/en-us/download/details.aspx?id=39046.

This diagnostic tool can help to troubleshoot Kerberos-related configuration issues with SQL Server, which is very exciting for us because Kerberos authentication plays a critical role in many BI-related authentication and delegation scenarios, such as to enable multi-tier BI solutions to access external data sources securely on behalf of the user. To enable end-to-end delegation all the way from the client through the middle-tier components to the external data sources, a Service Principal Name (SPN) must be registered within Active Directory Domain Services (AD DS) for each SharePoint service account, and then Kerberos Constrained Delegation (KCD) must be configured, which can be quite challenging in enterprise environments with complex AD topologies.

Even though SharePoint shared services, such as Excel Services, Performance Point Services, and SQL Server Reporting Services, can use the EffectiveUserName connection string property of Analysis Services for per-user authentication and eliminate in this way the need to configure KCD between SharePoint shared services and Analysis Services, KCD is still a requirement if Analysis Services is supposed to access further data sources, such as SQL Server databases on behalf of the user. One example is Analysis Services running in PowerPivot mode performing data refresh for an interactive user. Another example is Analysis Services running in Tabular mode hosting a data model with DirectQuery enabled.

KerberosConfigMgr can perform the following functions:

  • Gather information on OS and Microsoft SQL Server instances installed on a server.
  • Report on all SPN and delegation configurations on the server.
  • Identify potential problems in SPNs and delegations.
  • Fix potential SPN problems.

For more information about KerberosConfigMgr, visit the Microsoft Download Center.