Question:
When I try to run the Spitfire Configuration Tool (ICTool.exe), I get a ‘Cannot generate SSPI context‘ error message. What is it and how do I fix it?
Answer:
Security Support Provider Interface (SSPI) permits a computer that is running a Windows operating system to securely delegate a user security token from one computer to another over any transport layer that can transmit raw bytes of data. When the ‘Cannot generate SSPI context‘ error message is displayed, your network connection to the SQL Server is not accepting your Windows authentication.
Items to check:
- On the SQL Server Properties dialog, check the Authentication mode on the Security tab; it should be set to the SQL Server and Windows option.
- In SQL Client Network Utility (Start | Programs | SQL Server | Client Network Utility), check the Enabled Protocols on the General tab. Usually TCP/IP and Named Pipes are enabled. The protocol at the top of the enabled list is the default. Try switching the order of the protocols.
- In the SQL Client Network Utility, check the Alias tab to see if your SQL Server has an alias or if it is being redirected with an alias.
- Check Microsoft Knowledge Base Article ID 811889 for a complete list of troubleshooting steps to fix the ‘Cannot generate SSPI context‘ error message. http://support.microsoft.com/?id=811889
Additional Comments:
Spitfire connects to the SQL Server using standard .NET protocols.
KBA-01141; Last updated: November 11, 2016 at 8:05 am;
Keywords: SQL Server 2000 authentication