Search the VMware Knowledge Base (KB)
View by Article ID

The Use Windows session authentication feature in the VMware vRealize Automation login screen fails when using a DNS CNAME Alias for the Identity Appliance (2090617)

  • 1 Ratings

Symptoms

  • Cannot use the Use Windows session authentication feature in the VMware vRealize Automation (formerly known as vCloud Automation Center) login screen
  • The Use Windows session authentication feature in the VMware vRealize Automation login screen fails
  • During log in into VMware vRealize Automation, when you click Use Windows session authentication and then click login, the attempt fails
  • You see error similar to:

    Windows Session Authentication login has failed as a result of an error caused by the VMware Client Integration Plug-in

  • This issue occurs when a CNAME Alias is used for the VMware vRealize Automation (formerly known as vCloud Automation Center) Identity Appliance in DNS.

Cause

This issue occurs because the Client Integration plug-in passes the Service Principal Name (SPN) to the Security Support Provider Interface (SSPI) to resolve for the Identity Appliance. The SPN is based on the information in the URL for the browser. SSPI attempts to resolve the SPN based on the CNAME and cannot resolve the SPN.

Resolution

To work around this issue, add an SPN that resolves to the SPN for the VMware vRealize Automation (formerly known as vCloud Automation Center) Identity Appliance.

To add an SPN that resolves to the SPN for the VMware vRealize Automation Identity Appliance:
  1. Open a command prompt as an Administrator and run this command:

    setspn -S HTTP/cnamefqdn computeraccountname

  2. You can verify the setting with this command:
setspn -L computeraccountname

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 1 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 1 Ratings
Actions
KB: