• Article

Step 3. Configure Kerberos on the Service Account

Microsoft Office Communications Server 2007 and Microsoft Office Communications Server 2007 R2 will reach end of support on January 9, 2018. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.

For administrators to access the Management Console, you must configure the service account used by Web Components Server to use Kerberos authentication. When the service account is configured to use Kerberos, it automatically prompts the administrator for a user name and password and enabled them to access the site (if authorized).

To configure Kerberos on the Service Account

  1. Download SetSPN_Setup.exe from the following location: https://r.office.microsoft.com/r/rlidOCS?clid=1033&p1=setspn.

  2. Double-click SETSPN_Setup.exe.

  3. Navigate to the directory where SETSPN is installed. If you install it from the location in step 1, the directory is <drive letter>:\Program Files\Resource Kit.

  4. Open a command prompt, and then type the following command.

    setspn -A HTTP/[FQDN] [Domain]\<service account used by Web Components (default name is RTCComponentService)>

    You should receive output similar to the following.

    Registering ServicePrincipalNames for CN=Admin,OU=Users,OU=all users,DC=corp,DC=contoso, DC=com
HTTP/server1.corp.contoso.com
Updated object

  5. Restart the IIS.

  6. Open the following URLs to ensure that connectivity to the Management Console works:

    • https://<FQDN of your Web Components Server or Standard Edition Server>/RequestHandler/ucdevice.upx

    • https:// <FQDN of your Web Components Server or Standard Edition Server>/MgmtConsole/ApprovalProcess.aspx