Error message appears while navigating to the Policies Web Console
When you navigate to the Policies page in the Web console, the error message "Error in reading policy data" may appear for any of the following reasons:
SPNs are not configured correctly
IIS 7 computer is not set for delegation
HTTP SPN is set on IIS 7 computer that is already configured to be trusted for delegation.
HTTP SPN is not required on IIS 7 computers as the IIS 7 computers are configured for Kerberos authentication. However, you must set HTTP SPN on IIS 7 in the following cases:
IIS 7 is used with Kernel Mode Authentication disabled
IIS 7 is used with Kernel Mode Authentication enabled and the useAppPoolCredentials attribute set to TRUE.
If you have installed the CCS Directory Server and the CCS Application Server on separate computers, you must configure the IIS Server (CCS Application Server) and the Directory Support Service for constrained delegation. For more information on configuring constrained delegation, see the Symantec™ Control Compliance Suite Planning and Deployment Guide.
You must set HTTP SPN on Windows Server 2008 computers where the IIS Host Header and the CCS Application Server name are not same.