5.6

Table Of Contents
<AuthenticationTypes>
<RSWindowsBasic/>
</AuthenticationTypes>
...
</Authentication>
6. Save the configuration file.
7. Start the SSRS service.
What to do next
To authenticate VCM reports with Kerberos, see "Configure Kerberos Authentication" on page 107.
Configure Kerberos Authentication
The Kerberos network protocol uses secret-key cryptography to ensure security in your VCM
applications. To authenticate VCM Reports, you must use Basic Authentication with HTTPS or Kerberos
Authentication.
When you configure Kerberos Authentication in your three-tier split installation, configure it on the
database server and the Web server.
Prerequisites
n
Verify that your Windows Server 2008 R2 machine has Active Directory management tools installed. If
the tools are not installed, install them. See Microsoft TechNet online. This configuration requires an
Active Directory domain running at Windows Server 2003 or later domain functional level.
n
If SQL Server Reporting Services is running on a different Windows machine than the Web server in a
three-tier installation, verify that the Application Pool account is a local administrator.
Procedure
1. Log in to your Windows Server 2008 R2 machine as a user who has domain administrator privileges.
2. Start Active Directory Domain Services and select Active Directory Users and Computers.
3. Verify whether AD accounts exist in your domain for the SQLServer service and the VCM IIS
Application Pool.
4. If the accounts do not exist, create them.
a. Set the database account to be a local administrator on the database server.
b. Make the Application Pool account a local administrator on the Web server in a three-tier
installation.
5. Select the Computers container and locate the Web system.
a. Open the properties for Web system.
b. Click the Delegation tab.
c. Select Trust this computer for delegation to any service.
6. Open IIS manager and set the identity of the CMAppPool application pool to the IISaccount.
7. In Reporting Services Configuration Manager, configure the SQL Server Reporting Services service to
run as the IISApplication Pool account.
8. Change SQL Server to run as the SQLServerDomain account.
vCenter Configuration Manager Advanced Installation Guide
107
VMware, Inc.