IBM Support

Users are unable to login to TM1 Web or Planning Analytics Spreadsheet Services on Windows 10 or Windows 11 using Kerberos Single Sign On when Credential Guard is enabled

Troubleshooting


Problem

Users cannot login to TM1 Web or Planning Analytics Spreadsheet Services on Windows 10 or Windows 11 using Kerberos Single Sign On (SSO) when Credential Guard is enabled.  
Windows 11 22H2 enables Credential Guard by default.

Cause

Credential Guard blocks Java from accessing credentials.  The current version of Java used by TM1 Web and Planning Analytics Spreadsheet Services,  Java 8, is impacted.

Resolving The Problem

There is no workaround but to disable Credential Guard. Refer to below link for details.

Java Defect - Credential Guard forbids the unconstrained Kerberos delegation

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSCTEW","label":"IBM Planning Analytics Local"},"ARM Category":[{"code":"a8m3p000000PC7XAAW","label":"Planning Analytics-\u003EWeb PASS Contributor Application"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
20 March 2023

UID

ibm16964138