Logging on to an ESX/ESXi host with Windows session credentials fails

Products

• VMware vSphere ESXi

Issue/Introduction

Symptoms:

• Logging on to an ESX/ESXi host with Active Directory credentials using the Use Windows session credentials option fails
• You see the error:
  
  Windows session credentials cannot be used to log into this server. Enter a username and password.
  
  
• Typing <domain>\<username> and your password manually works as expected
• The viclient.logs may contain messages similar to:

[viclient:QuickInf:P:14] <date_timestamp> serverPrincipal: host/<esx_ip>
[viclient:Error :P:14] <date_timestamp> VpxClient.SSPI.SSPIException: InitializeSecurityContext failed.. Error Code = '80090303'..

Environment

VMware ESX 4.1.x
VMware ESXi 4.1.x Embedded
VMware vSphere ESXi 5.5
VMware ESXi 4.1.x Installable
VMware vSphere ESXi 5.0
VMware vSphere ESXi 6.0

Resolution

This issue occurs if you try to connect to the ESX/ESXi host using its IP address and it is not in the reverse lookup zone of your DNS.

Either use a resolvable DNS name or create a Pointer/Reverse Lookup address record for your ESX/ESXi host.

Additional Information

0x80090303 is a Windows error code, meaning SEC_E_TARGET_UNKNOWN = "The specified target is unknown or unreachable".