Where is the Service Principal Name (SPN) Utility for CCS located?
search cancel

Where is the Service Principal Name (SPN) Utility for CCS located?

book

Article ID: 152568

calendar_today

Updated On:

Products

Control Compliance Suite Control Compliance Suite Standards Server

Issue/Introduction

Control Compliance Suite (CCS)

The CCS SPN utility comprises several helpful tools for diagnosing and repairing SPN configuration errors. The 'Add SPN' tool automates the creation of the require SPNs for the Control Compliance Suite.

 

Environment

CCS 12.6.X

Resolution

The CCS SPN Utility can be found in the following directory:

<installation directory>\Program Files (x86)\Symantec\CCS\Reporting and Analytics\Application Server\CCSSPNUtil.exe

The following window will open;


NOTE: Depending on your environment, Domain Administrator privileges may need to be used when adding SPN.  Also in large environments, the utility may take a long time to bring back results when scanning for SPNs or duplicate SPNs.

Additional Information

How to list the SPNs to check to see if they are set for the CCS Service account using a command prompt:

SetSpn -L <ccs_service_account>

 

How to set SPNs via the command prompt:

Set up an SPN with the NetBIOS name and the fully qualified domain name (FQDN) of the domain user account in whose context the application pool executes. SPN can be set up from the Application Server or the DC. You must associate an SPN to a single user account.
Execute the following commands to set up an SPN:

SetSpn -A Symantec.CSM.AppServer/appserver_machine.hostname DomainName/ccs_service_account

SetSpn -A Symantec.CSM.AppServer/appserver_machine.fqdn DomainName/ccs_service_account

SetSpn -A Symantec.CSM.DSS/dss_machine.hostname DomainName/ccs_service_account

SetSpn -A Symantec.CSM.DSS/dss_machine.fqdn DomainName/ccs_service_account



Legend for the commands above:

  • appserver_machine.hostname: The NetBIOS name of the computer where the Application Server is installed.

  • DomainName/ccs_service_account: The domain name of the Application Server service account.

  • dss_machine.hostname: The NetBIOS name of the computer where the Directory Service is installed. (Directory Service is installed on the Application Server)

  • dss_machine.fqdn: The fully qualified domain name of the Directory Service computer.  (Directory Service is installed on the Application Server)