Below are some troubleshooting steps for if you get into trouble with Kerberos:

Kerberos Check’s

All servers need to be within 5 mins

The DAC Connection only uses NTML authentication.

If the SQL instance is was working, but has since stopped. Check to see if its still using the same port.

Check setspn -l (see Looking for Kerberos SPNs Basics)

Check the Service Account in AD Users and Computers. If the delegation tab isn’t listed then the account doesn’t have any SPN’s against it.

Check the Service account is Trusted for delegation




Helpful links

Register a Service Principal Name for Kerberos Connections




Troubleshooting Kerberos Authentication problems


Manage Kerberos Authentication Issues in a Reporting Services Environment


Enable Kerberos Event Log:


Channel9 – Implementing Kerberos with PerformancePoint Services and Excel Services


Channel9 – Configuring Kerberos for Microsoft SharePoint 2010 BI in 7 Steps