i don't think you need to run setspn for "host" principal Yes you need run when you want to "http" principal. microsoft provide some by default. s-