ERROR: "A call to SSPI failed, see inner exception" (4299026)

ERROR: "A call to SSPI failed, see inner exception"

When attempting to view the properties of a Managed host the following error message will be displayed:

“Document (managed_host_name) could not be opened!”
“A call to SSPI failed, see inner exception”
“A call to SSPI failed, see inner exception”
“A call to SSPI failed, see inner exception”
“The target principal name is incorrect”

This error can occur if the “Log On As” setting for the "One Identity Manager Data Governance Service" was changed.

To resolve this error, use the following steps:

1. Log into the Managed Host that the error is displayed for.

2. Open and view the properties for the "One Identity Manager Data Governance Service".

3. Select the “Log On” tab of the server properties, and document the current configuration (this is needed in case the change does not fix the issue, and a rollback to previous account is needed).

4. Check the option to use “Local System account”, and click “Ok”.

5. Restart the Quest One Identity Manager Data Governance Service.

6. Try to view the properties of the Managed Host and see if the same error occurs.

The full error message: Exception: [1025314] Document (managed_host_name) could not be opened! [Quest.Titan.Common.Exceptions.FaultTranslationException] A call to SSPI failed, see inner exception. [System.ServiceModel.Security.SecurityNegotiationException] A call to SSPI failed, see inner exception. [System.Security.Authentication.AuthenticationException] A call to SSPI failed, see inner exception. [System.ComponentModel.Win32Exception] The target principal name is incorrect at VI.DialogEngine.DialogEngine.OpenTask(IEditorTask task, OpenDocumentOptions options) at VI.DialogEngine.EditorHostColleague.OpenTask(IEditorTask task, EditorHost host) at VI.MVC.DocumentEditor.Initialize(IEditorTask task) at VI.DialogEngine.Editors.SnapInControlEditor.SnapInControlEditor.OnInitialize(IEditorTask task) at VI.DialogEngine.Editors.Base.DialogSheetEditor.OnActivateSnapIn(Object snapIn, IDocument document, IEditorTask task) at VI.Controls.ActivatorComponent.set_DbObject(ISingleDbObject value) at VI.Controls.ActivatorComponent.OnActivating(EventArgs e) at VI.Quest.Titan.Client.Manager.Forms.LocalManagedHostForm.MainActivator_OnActivating(Object sender, EventArgs e) at VI.Quest.Titan.Client.Manager.Forms.DataRootsHelpers.PopulateDataRootsTree(TreeListControl dataRootsTree, IConnection connection, ISingleDbObject dbObject, Boolean isSharePoint) at VI.Quest.Titan.Client.Manager.Forms.DataRootsHelpers.LoadDataRootsFromQ1IMDb(IConnection connection, ISingleDbObject dbObject, Boolean isSharePoint) at Quest.Titan.Client.Concrete.Wcf.ManagedHosts.GetManagedHost(String managedHostId) ------- at Quest.Titan.Server.Contracts.Faults.ExceptionFaultTranslator.MapExceptionFromFault(Exception incomingException) Exception rethrown at [0]: at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message) at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)