Troubleshooting SSPI handshake error

I have seen lots of questions floating in the msdn forums about SSPI Handshake error, the main question is around error code 0x80090311 which is indicative of the authentication failure error. Apart from this, there are many other reasons for SSPI Handshake error to appear in error logs.

What is SSPI ?

SSPI is an abbreviation Security Support Provider Interface, is an API that sends data back and forth until the security provider is satisfied. That means, when a user tries to connect to a SQL Server machine using Windows Authentication, as soon as user clicks login but a security token has been generated for that particular client and is sent to the AD/Authority system to validate the token once it has been authenticated successfully it allows user to login and access the system. Here is the link for further reading on SSPI

In some cases this failed and there could be multiple reasons for this, they could be anything, including:

1. A domain controller has been rebooted
2. Server could have some issues with trust relationship with AD
3. Service Principle Name (SPN) is not configured correctly, refer this link  for how to register SPN

How to Troubleshoot this issue?

Microsoft has made a KB article on how to troubleshoot SSPI Error available to fix this issue. However, I would like to give you some more links for reference:

• How to enable Kerberos event logging
• Technet thread -1
• MSDN Thread – 1
• MSDN Thread – 2
• MSDN Thread – 3
• MSDN Thread – 4
• MSDN Thread – 5

Hope this helps.

SQL Server Database Consulting Services

Ready to future-proof your SQL Server investment?