5.8

Table Of Contents
<Authentication>
<AuthenticationTypes>
<RSWindowsNegotiate/>
<RSWindowsNTLM/>
</AuthenticationTypes>
...
</Authentication>
5. Replace any existing <AuthenticationTypes> parameters with one <RSWindowsBasic/>
parameter.
<Authentication>
<AuthenticationTypes>
<RSWindowsBasic/>
</AuthenticationTypes>
...
</Authentication>
6. Save and close rsreportserver.config.
7. Start the SSRS service.
What to do next
To authenticate VCM reports with Kerberos, see "Configure Kerberos Authentication" below.
Configure Kerberos Authentication
The Kerberos network protocol uses secret-key cryptography to ensure security in your VCM
applications. To authenticate VCM Reports, you must use Basic Authentication with HTTPS or Kerberos
Authentication.
When you configure Kerberos Authentication in your three-tier split installation, configure it on the
database server and the Web server.
Prerequisites
n Verify that your Windows Server 2008 R2, 2012, or 2012 R2 machine has Active Directory management
tools installed. If the tools are not installed, install them. See Microsoft TechNet online. This
configuration requires an Active Directory domain running at Windows Server 2003 or later domain
functional level.
n If SQL Server Reporting Services is running on a different Windows machine than the Web server in a
three-tier installation, verify that the Application Pool account is a local administrator.
Procedure
1. Log in to your Windows Server 2008 R2, 2012, or 2012 R2 machine as a user who has domain
administrator privileges.
2. Start Active Directory Domain Services and select Active Directory Users and Computers.
3. Verify whether AD accounts exist in your domain for the SQLServer service and the VCM IIS
Application Pool.
4. If the accounts do not exist, create them.
vRealize Configuration Manager Advanced Installation Guide
116
VMware, Inc.