In this scenario, an Informatica domain named InfaDomain runs on a Windows network that uses Kerberos authentication.

The Informatica domain consists of the following nodes:

The Informatica domain nodes run within a Windows domain named example.com, and belong to a Kerberos realm named EXAMPLE.COM. The Windows domain uses Microsoft Active Directory Domain Services (AD DS) as the principal database.

You can enable Kerberos at the node level, or at the process level. Kerberos enabled at the process level provides the highest level of security, but might be difficult to manage in an Informatica domain that contains many nodes or has many services. In this scenario, you enable Kerberos at the node level.