Unable to connect to server using Kerberos authentication

Problem

A DCOM error is observed after restarting the Enterprise Vault Admin Service.

Note: No loss in functionality is seen.

Error Message

Event ID:      4289
Task Category: Task Guardian
Level:         Warning
Computer:      ev01.ev.local
Description:
Unable to connect to server 'EV01.EV.LOCAL' using Kerberos authentication.
Reason: The RPC server is unavailable.  (0x800706ba)

The DCOM connection was attempted with:
CLSID: {F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A} (EnterpriseVault.DirectoryService.1)
Server name: EV01.EV.LOCAL
Server Principal Name: dcom/evserver01.ev.com

A Dtrace of the EVTaskGuardian process shows the below:

(EVTaskGuardian)    <5356>    EV:L    DirectoryConnection (DllGetClassObject) - RegKey UseLocalDirectory [False], SiteAlias [EV01]

(EVTaskGuardian)    <4640>    EV:M    {VaultCreateTrustedInstanceRequest::LogUntrustedConnection} Unable to make trusted (Kerberos) connection to server 'ev01.ev.local' [The RPC server is unavailable.  (0x800706ba)]. CLSID [{F4D3EB5B-C7C5-11D1-90DB-0000F879BE6A} (EnterpriseVault.DirectoryService.1)], Address [ev01.ev.local], Server Principal Name [dcom/evserver01.ev.com]
(EVTaskGuardian)    <4640>    EV:L    {VaultCreateTrustedInstanceRequest::CreateTrustedRemoteInstance} Connected to 'ev01.ev.local'. Authorization service [WinNT] Server Principal Name [dcom/evserver01.ev.com]

Note: Other Enterprise Vault processes such as EVMonitoring may also report DCOM warnings.

Cause

Kerberos authentication issue

Solution

Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.

Apply the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KVS\Enterprise Vault

• Create a new DWORD called UseLocalDirectory and set the value to 1.
• Restart the Enterprise Vault Admin Service to make the setting take effect.