The SQL Server Network Interface library could not register the Service Principal Name (SPN) for the SQL Server service

 

ERROR:

The SQL Server Network Interface library could not register the Service Principal Name (SPN) for the SQL Server service. Error: 0x2098, state: 15. Failure to register an SPN may cause integrated authentication to fall back to NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies.

EXPLANATION:

You receive this error because you are trying to make an SPN record from Active Directory when the SQL Server service that is running with a Windows Domain account does not have the necessary privileges.

SOLUTION:

First, I recommend that you make sure that the connection you make to the server is NTLM or KERBEROS; you can see it by running the following code on the corresponding server:

If the result returned is KERBEROS, it means that SPN records are already present in the related server in Active Directory; if the returned result is NTLM, then the SPN record is not available.

In this case, you can create SPN records according to your company organization, you can also ask the system administrators to do so.

Ekrem Önsoy
Author: Ekrem Önsoy

The original article was written in Turkish by Ekrem Önsoy and translated to English by dbtut with the consent of the author. The copyright of the article belongs to the author. The author shall not be liable in any way for any defect caused by translation.

Leave a Reply

Your email address will not be published. Required fields are marked *