When you try to install System Center 2012 Virtual Machine Manager (VMM 2012 R2 or VMM 2012), the installation fails and you receive an error message that resembles the following:
Virtual Machine Manager cannot process the request because an error occurred while authenticating Server-SCVMM-001.Contoso.com. Possible causes are:
1) The specified user name or password are not valid.
2) The Service Principal Name (SPN) for the remote computer name and port does not exist.
3) The client and remote computers are in different domains and there is not a two-way full trust between the two domains.
Log in by using an account on the same domain as the VMM management server, or by using an account on a domain that has a two-way full trust with the domain of the VMM management server, and then try the operation again. If this does not work, purge the Kerberos tickets on the VMM management server by using kerbtray.exe, available at http://www.microsoft.com/en-us/download/details.aspx?id=17657. Then, reset the SPN for Server-SCVMM-001.Contoso.com by using setspn.exe. If this still does not fix the problem, make Server-SCVMM-001.Contoso.com a member of a workgroup instead of a domain, restart the computer, rejoin the domain, and then try the operation again.
For all the details and a resolution, please see the following:
J.C. Hornbeck | Solution Asset PM | Microsoft GBS Management and Security Division
System Center All Up: http://blogs.technet.com/b/systemcenter/
System Center – Configuration Manager Support Team blog: http://blogs.technet.com/configurationmgr/
System Center – Data Protection Manager Team blog: http://blogs.technet.com/dpm/
System Center – Orchestrator Support Team blog: http://blogs.technet.com/b/orchestrator/
System Center – Operations Manager Team blog: http://blogs.technet.com/momteam/
System Center – Service Manager Team blog: http://blogs.technet.com/b/servicemanager
System Center – Virtual Machine Manager Team blog: http://blogs.technet.com/scvmm
The Forefront Endpoint Protection blog : http://blogs.technet.com/b/clientsecurity/
The Forefront Identity Manager blog : http://blogs.msdn.com/b/ms-identity-support/
The Forefront TMG blog: http://blogs.technet.com/b/isablog/
The Forefront UAG blog: http://blogs.technet.com/b/edgeaccessblog/