Policy Server Guides › Policy Design Guide › SiteMinder Kerberos Authentication › How To Configure SiteMinder Kerberos Authentication › Kerberos Authentication Configuration at the Windows Workstation

Kerberos Authentication Configuration at the Windows Workstation

To support Kerberos authentication, several Internet Explorer settings are required, and the workstation host is added to the KDC domain.

Important! If the KDC is deployed on UNIX, be sure to perform the additional required configuration on the workstation using the Ksetup utility.

To configure the Windows workstation to support Kerberos authentication

1. Add the host for the Windows workstation to the KDC domain.
2. Log in to the host using user account created on the KDC.
3. Configure Internet Explorer to pass credentials automatically:
   1. Initiate an instance of the IE web browser.
   2. Select the Internet options menu.
   3. Select the Security tab.
   4. Select Local intranet tab.
   5. Click Sites and select all three checkboxes.
   6. Select the Advanced tab and add http://*.domain.com to local intranet zone.
   7. Select the Custom level tab under security settings and select Automatic logon only in intranet zone under the User Authentication tab.
   8. Select the Advanced tab from Internet options and select the Enable Integrated Windows authentication (requires restart) option.
   9. Close the browser.