Hello,
It has been brought to my attention that the user that runs the BES Server plugin service has two SPN values.
iem /“SERVER NAME”
iem /“SERVER NAME FQDN”
Can I delete these SPNs? And if I do, what will happen?
TIA!
Those are used by the account that runs the BESRootServer service to provide for Kerberos logins for Console users.
The “Use Windows Credentials” option for Console login relies on these Kerberos SPN mappings
I don’t use Windows Credentials for the console.
So it’s safe to delete those SPNs?
Thanks!
As long as nobody is using Windows Credentials or any Kerberized service, you can.
The product installer will likely recreate them when you upgrade though. Why are you concerned with removing them, if I may ask?