Skip Navigation

Create Service Principal Names

  1. Create a Service Principle Name (SPN) for each web application that needs to be shared as follows:
    setspn –S HTTP/SPHOST:PORT <
    domain
    >\AppPoolUser setspn –S HTTP/SPHOST.FQDN:PORT <
    domain
    >\AppPoolUser setspn –S HTTP/SPHOST <
    domain
    >\AppPoolUser setspn –S HTTP/SPHOST.FQDN <
    domain
    >\AppPoolUser
    If the port is a default port, such as 80 or 443, omit the commands that include port above.
    Some of the lines only require a host name while others require a fully qualified host name. If the application pool identity is for a built-in user such as Network Service, then specify the host name as shown below instead of <
    domain
    >\AppPoolUser.
    setspn –S HTTP/SPHOST:PORT <
    domain
    >\SPHOST setspn –S HTTP/SPHOST.FQDN:PORT <
    domain
    >\SPHOST setspn –S HTTP/SPHOST <
    domain
    >\SPHOST setspn –S HTTP/SPHOST.FQDN <
    domain
    >\SPHOST
    If you use SSL, the SPN must refer to HTTP instead of HTTPS.