"A security package specific error occurred" when launching a remote CCS console on Windows XP workstations

Products

• Control Compliance Suite Windows

Issue/Introduction

You have installed a remote console on a Windows XP  workstation and get the error "A security package specific error occurred" when you try to launch the console.

This error continues to appear even after applying CCS_Reporting&Analytics_v901_20507_2025164_QF.zip fix that was released to initially address this issue.

"A security package specific error occurred"

Cause

The Appserver service account has not been fully configured for "Constrained Delegation" in "Active Directory".

Resolution

Verify that SPN's have been set for the Appserver,  Directory server and HTTP services.

Verify that the Appserver service account has been trusted for delegation in AD. Within the "Delegation" tab in the AD user properties verify you have the following settings set:

- "Trust this user for delegation to specified services only"

- "Use any authentication protocol"

- Check the "Expanded" box

Click on "Add" and specify the name of the domain user account (service account)  you used to configure the SPN's, then find the Symantec.CSM.DSS services from the list of SPN's and double click both Symantec.CSM.DSS SPN's, one will be the short name and one will be the FQDN, then hit ok. You should now see both services  listed in the dialog box  with the label of "Services to which this account can present delegated credentials."

 

You must also give the Appserver Service account  the "Act as part of operating system" right in the Appserver servers's local security policy.

 

Restart the Appserver and Directory server services.

 

You should now be able to launch the remote console on the Windows XP workstation with out error.

 

Applies To

CCS  9.0.1 PCU-2 / All in one or distributed install. Remote console installed on Windows XP  Workstation.

Appserver is set to use "Constrained Delegation"