I am receiving "cannot generate sspi" error when I try to connect a sql instance remotely. I suspected the issue might be with spn and verified that spn was registered properly on the service account(confirmed the same with AD team as well). Also tried to get the server removed from domain and rejoined. The issue still persists and issue started occurring all of sudden and there were no changes on the server (patching, reboot). Would appreciate if anyone can provide some lead to resolve this issue?

  • Does this happen for 1 login only?
    – sepupic
    Jul 24, 2017 at 8:13
  • what informaiton do you receive for setspn -l <your_sql_server> and setspn -l <your_SQL_Server_Service_Account>?
    – John K. N.
    Jul 24, 2017 at 12:15

1 Answer 1


Having no SPN does not cause this error. Having an invalid SPN does. It's not enough to make sure an SPN exists, you have to make sure it is owned by the SQL Server service account and that it is configured correctly.

Follow the advice I blogged here: http://sqlsoldier.net/wp/sqlserver/advanced-troubleshooting-week-at-sql-university-lesson-1

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.