Installation for PowerCenter and Data Quality

Back Next

Network Security - Service Principal Level

After you specify the installation directory, you can configure security level.

If you enable Kerberos network authentication, the

Network Security - Service Principal Level

appears.

On the

Network Security - Service Principal Level

page, select the level at which to set the Kerberos service principals for the domain.

The following table describes the service principal levels that you can select:

Level	Description
Process Level	Configures the domain to use a unique service principal name (SPN) and keytab file for each node and each application service on a node. The number of SPNs and keytab files required for each node depends on the number of application service processes that run on the node. Use the process level option for domains that require a high level of security, such as productions domains.
Node Level	Configures the domain to share SPNs and keytab files on a node. This option requires one SPN and keytab file for the node and all application services that run on the node. It also requires a separate SPN and keytab file for all HTTP processes on the node. Use the node level option for domains that do not require a high level of security, such as test and development domains.