An administrator needs to create an Integrated Windows Authentication (IWA) Identity Source on a newly deployed vCenter Server Appliance (VCSA).
Which two actions will accomplish this? (Choose two.)
A.
Use a Service Principal Name (SPN) to configure the Identity Source.
B.
Use a Domain administrator to configure the Identity Source.
C.
Join the VCSA to Active Directory and configure the Identity Source with a Machine Account.
D.
Create a computer account in Active Directory for the VCSA and configure the Identity Source.
Explanation:
Using a machine account when configuring an Active Directory identity source for vCenter Server requires that the Windows system be joined to the domain. If the system is not joined to the domain, SSO cannot leverage the machine account to create the identity source and perform its function as the secure token service user.
To resolve this issue in VCVA 5.5, use only the Use SPN option.
Reference: http://kb.vmware.com/selfservice/microsites/search.do?
language=en_US&cmd=displayKC&externalId=2058919