000029794 - RSA Archer: Severe Error in '/' Application - The target principal name is incorrect, cannot generate SSPI context

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Apr 26, 2019
Version 4Show Document
  • View in full screen mode

Article Content

Article Number000029794
Applies ToRSA Product Set: RSA Archer
RSA Product/Service Type: RSA Archer
RSA Version/Condition: All
IssueWhen opening the Archer UI, the webpage fails to load with the Severe Error in '/' Application, The target principal name is incorrect. Cannot generate SSPI Context. SQL statement: usp_get_ldap_config_list:
Severe Error

CauseThe error will occur if the Archer Application Pool, Process Model Identity has changed, but IIS has not been updated to reflect this. This can be found within IIS by checking the Application Pools and opening the Advanced Settings:
Process Model Identity 

If IIS has been reset or restarted without updating the Process Model Identity, the original error no longer appears but is replaced by Service Unavailable, HTTP Error 503. The service is unavailable:
Service Unavailable

When checking the Application Pools within IIS, the Archer instance will now be in a stopped state.
  1. Open IIS and click the Application Pools within the tree panel
  2. Right click on the Archer Application Pool and select Advanced Settings... or find the link on the right:


  3. Edit the Identity field to set the new Process Model Identity Username/Password:


  4. Click OK to save and exit
  5. Make sure the Archer Application Pool has a Status of Started (Right click and select Start if it is not)
  6. Open a command prompt and run: iisreset