Control Compliance Suite (CCS)
The CCS SPN utility comprises several helpful tools for diagnosing and repairing SPN configuration errors. The 'Add SPN' tool automates the creation of the require SPNs for the Control Compliance Suite.
The CCS SPN Utility can be found in the following directory:
<installation directory>\Program Files (x86)\Symantec\CCS\Reporting and Analytics\Application Server\CCSSPNUtil.exe
The following window will open;
NOTE: Depending on your environment, Domain Administrator privileges may need to be used when adding SPN. Also in large environments, the utility may take a long time to bring back results when scanning for SPNs or duplicate SPNs.
SetSpn -L <ccs_service_account>
Set up an SPN with the NetBIOS name and the fully qualified domain name (FQDN) of the domain user account in whose context the application pool executes. SPN can be set up from the Application Server or the DC. You must associate an SPN to a single user account.
Execute the following commands to set up an SPN:
SetSpn -A Symantec.CSM.AppServer/appserver_machine.hostname DomainName\ccs_service_account
SetSpn -A Symantec.CSM.AppServer/appserver_machine.fqdn DomainName\ccs_service_account
SetSpn -A Symantec.CSM.DSS/dss_machine.hostname DomainName\ccs_service_account
SetSpn -A Symantec.CSM.DSS/dss_machine.fqdn DomainName\ccs_service_account
appserver_machine.hostname: The NetBIOS name of the computer where the Application Server is installed.
DomainName/ccs_service_account: The domain name of the Application Server service account.
dss_machine.hostname: The NetBIOS name of the computer where the Directory Service is installed. (Directory Service is installed on the Application Server)
dss_machine.fqdn: The fully qualified domain name of the Directory Service computer. (Directory Service is installed on the Application Server)