How to Configure Viewpoint to use Kerberos on Windows 10

 

Viewpoint itself does not require any configuration to use Kerberos - all configuration needs to be done through ACS and the Windows Application Package.

NOTES:

• All scenarios listed below assume that the IBM i is already configured to use Kerberos. This document does not discuss how to do that. If there are any questions on that configuration please contact IBM.
• This is valid only for Host Mode - it is not supported in Repository Mode.

Scenario #1: New Viewpoint installation OR adding a new IBMi connection to Viewpoint

1. Install ACS and the Windows Application Package (IBM).
2. Open ACS.
3. Select System Configurations (under the Management heading).
4. Select New.
5. On the General tab - enter the IBMi name or IP address and a Description.
6. On the Connection tab - click on Use kerberos authentication; do no prompt.
7. Click OK.
8. Click Close.
9. Select File.
10. Select Copy Connection.
11. Find the system name/IP address in the IBM i Access Client Solutions column and use the highlight it.
12. Use the arrow pointing to the right to copy it to the IBM i Access (Windows) column.
13. Click Close.

Scenario #2: Changing an existing connection to now use Kerberos

1. Open ACS.
2. Select File.
3. Select Copy Connection.
4. Find the name/IP address of the IBMi system in the IBM i Access (Windows) column.
5. Use the X to delete the connection entry.
6. Click Close.
7. Select System Configurations (under the Management heading).
8. Find the existing connection entry and double click.
9. On the Connection tab - click on Use kerberos authentication; do no prompt.
10. Click OK.
11. Click Close.
12. Select File.
13. Select Copy Connection.
14. Find the system name/IP address in the IBM i Access Client Solutions column and use the highlight it.
15. Use the arrow pointing to the right to copy it to the IBM i Access (Windows) column.
16. Click Close.

Notes

• If Windows App Package is installed but ACS is not you can set the connection to use Kerberos by doing Windows command:

  C:\Program Files (x86)\IBM\Client Access\cwbcfg /host <name or IP> /uid *KERBEROS

• To verify KERBEROS is set as the Signon Mode:

  REGEDIT
  \HKEY_CURRENT_USER\Software\IBM\Client Access Express\CurrentVersion\Environments\My Connections\<system name or IP>\Communication
  Signon Mode should = 4