Unable to save the CRM Records- Showing Error- Target Principal is incorrect.

(2) Share

Report

Posted on by JiniFrancis

Hi ,

When saving records in Dynamics CRM, we encounter the error A call to SSPI failed. The target principal name is incorrect.

This occurs only when the CRM services are running on our second application server (sccvmcrm02). If we stop services on that node, the issue disappears.

Please help to resolve.

Thanks and Regards

Categories:

Microsoft Dynamics CRM

I have the same question (0)

All responses (1)

Answers (1)

Verified answer

Muhammad Shahzad Sh... 2,606 Most Valuable Professional on at

Like (1)

Report
Copy link

Link copied!

1. Check SPN Configuration
Run the following command on a domain controller or elevated PowerShell:

setspn -Q http/<crmservername>

Make sure SPNs exist for both CRM servers (e.g., sccvmcrm01, sccvmcrm02) under the CRM App Pool identity (usually a domain service account).
Example SPNs to verify/set:

setspn -S HTTP/yourcrm.domain.com domain\crmserviceaccount
setspn -S HTTP/sccvmcrm02.domain.com domain\crmserviceaccount

2. Use HOSTNAME in Binding or Use DNS CNAME
Ensure CRM is accessed via a DNS alias (e.g., crm.domain.com) and both app servers are configured behind a load balancer or NLB using that alias.

3. Enable or Validate Kernel Mode Authentication
On the CRM website in IIS:
Open Authentication > Windows Authentication > Advanced Settings.
Either:
Disable Kernel Mode Authentication, OR
Ensure SPNs are correctly configured for Kernel Mode.

4. Recycle App Pool / Restart IIS
After changes, run:

iisreset

Was this reply helpful? Yes No