• Active Directory

The Delegation tab, which is used in Allow Kerberos constrained delegation in a single domain setup, is not available.

• You need to run the commands with administrative permissions. Open PowerShell via Run as administrator.

• You need to be logged in as a domain administrator on a domain controller.

• User logon name: srv-airlock-kerberos
• SPN: http/airlock-gateway-production

0. Test execution and verification:
1. Run the following commands:
copy



setspn -L srv-airlock-kerberos

1. The output shows that the SPN http/airlock-gateway-production is registered to the system user.

• In case of failure:
• If no SPN is registered, follow along Enable Kerberos constrained delegation for the system user
• Verify the domain functional level

• Enable Kerberos constrained delegation for the system user
• KB - Verify the domain and forest functional level