Can't login in to Aria Products on SSO authentication windows/kerberos is not working
search cancel

Can't login in to Aria Products on SSO authentication windows/kerberos is not working

book

Article ID: 411320

calendar_today

Updated On:

Products

VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

  • SSO authentication for Windows/Kerberos stopped working in VMware Identity Manager 3.3.7 after applying VMware Identity Manager 3.3.7 patch CSP-97577 and also VMware Aria Suite Lifecycle 8.18 Patch 3 using the steps in the following kb CSP-97577: Patch instructions to upgrade platform components in VMware Identity Manager 3.3.7 and also kb VMware Aria Suite Lifecycle 8.18 Patch 3 Installation Runbook

  • VMware Identity Manager  /opt/vmware/workspace/horizon/connector.log  shows the exception below: 
    2025-09-15T13:37:55,076 INFO : com.vmware.horizon.adapters.kerberosAdapter.KerberosIdpAdapter - Kerberos authentication failure: null
    2025-09-15T13:37:55,076 INFO : com.vmware.horizon.adapters.kerberosAdapter.KerberosIdpAdapter - Cause: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)

Environment

 VMware Identity Manager 3.3.7

Resolution

In the Active Directory,  perform the steps below:

NOTE: 
Update the commands from the PowerShell window.

Backups/snapshots on Windows are required before trying the steps below: 

  1. The Encryption was not set properly (get the current state)
    Get-ADComputer "<Computer-object>" -Properties msDS-SupportedEncryptionTypes

  2. Update correctly with the below command 
    Set-ADComputer "<Computer-object>" -Replace @{'msDS-SupportedEncryptionTypes'=24}