You have installed a remote console on a Windows XP workstation and get the error "A security package specific error occurred" when you try to launch the console.
This error continues to appear even after applying CCS_Reporting&Analytics_v901_20507_2025164_QF.zip fix that was released to initially address this issue.
"A security package specific error occurred"
The Appserver service account has not been fully configured for "Constrained Delegation" in "Active Directory".
Verify that SPN's have been set for the Appserver, Directory server and HTTP services.
Verify that the Appserver service account has been trusted for delegation in AD. Within the "Delegation" tab in the AD user properties verify you have the following settings set:
- "Trust this user for delegation to specified services only"
- "Use any authentication protocol"
- Check the "Expanded" box
Click on "Add" and specify the name of the domain user account (service account) you used to configure the SPN's, then find the Symantec.CSM.DSS services from the list of SPN's and double click both Symantec.CSM.DSS SPN's, one will be the short name and one will be the FQDN, then hit ok. You should now see both services listed in the dialog box with the label of "Services to which this account can present delegated credentials."
You must also give the Appserver Service account the "Act as part of operating system" right in the Appserver servers's local security policy.
Restart the Appserver and Directory server services.
You should now be able to launch the remote console on the Windows XP workstation with out error.
CCS 9.0.1 PCU-2 / All in one or distributed install. Remote console installed on Windows XP Workstation.
Appserver is set to use "Constrained Delegation"
Imported Document ID: TECH147067
Subscribing will provide email updates when this Article is updated. Login is required.