Configuring Windows workstations

To configure your client workstations, set the Kerberos realm and the Kerberos server.

After you have created a host principal for your Windows workstation on the Kerberos server in IBM® i PASE, you need to configure the client workstations. You need to make this client part of a workgroup by setting the Kerberos realm and Kerberos server on the workstation. You also need to set a password that will be associated with the workstation. To configure the workstations, complete these steps:

Note: User names, host names, and passwords are used for example purposes only.

From a command prompt on the Windows workstation, enter:

C:> ksetup /setdomain REALM.NAME.COM
C:> ksetup /addkdc REALM.NAME.COM kdc1.hostname.com

For example, the administrator for MyCo, Inc entered the following:

C:> ksetup /setdomain MYCO.COM
C:> ksetup /addkdc MYCO.COM kdc1.myco.com

Set the local machine account password by entering this at the Windows workstation command prompt:
```
C:> ksetup /setmachpassword password
```
This password must match the password used when you created the host principal, pc1.myco.com. For example, the user for MyCo, Inc entered the following:
```
C:> ksetup /setmachpassword secret1
```
Map the Kerberos user to a local user by entering this at the Windows workstation command prompt:
```
C:> ksetup /mapuser jonesm@MYCO.COM maryjones
```
Restart the computer for the changes to take effect.

Optionally, you can configure a secondary Kerberos server that you can use as a backup server if your primary Kerberos server goes down or if it is too busy to handle requests. See Configuring a secondary Kerberos server for detailed instructions.