This section applies to preparing for installing distributed environments where Kerberos will be implemented. SetSPN.exe is a tool supplied along with the Windows Server 2008 operating system.

Set SPN

Configuring SPNs is an advanced task and should only be performed by an appropriately trained professional. The steps and configurations given in this help file are to be used as a guide - your system may require additional configuration due to different hardware and software compatibilities.

During the installation of K2 blackpearl, on a number of user page locations the Setup Manager will prompt the user to set an SPN. If this option is enabled, then the SPN for the Service instance will be created automatically during the installation process. Shown below is an example user page, where the use is prompted to enables “Set K2 Workspace SPN”.

When the K2 Setup Manager has been enabled by the user to set SPNs, the setup manager proceeds to set SPNs regardless of whether SPNs are already active. This may result in the creation of duplicate SPNs. The user can check if SPNs are already active by using the SetSPN.exe tool provided with Windows Server 2008. If an SPN already exist for the service instance, there would be no need to enable the option to automatically set SPNs. The K2 Analysis tool can also be used to detect errors such as duplicate SPN’s but this can only take place once K2 blackpearl is installed. By using the SetSPN tool before, duplicate SPNs can be detected beforehand. Example usage of the SetSPN commands:

While infrastructure changes are required by K2, each environment is different and has its peculiarities which must be taken into account. Modifying the infrastructure could have unforeseen results if the changes are not appropriately understood or managed. Given the broad spectrum of underlying infrastructure utilized, it is recommended that a panel or committee with appropriate skill in each area concerned be assembled to outline the underlying infrastructure changes and gauge the impact of the required changes.