Figure 7. 37 The storage objects for a virtual machine
You must set authentication to Use Kerberos Only. It will not work if you select Use
Any Authentication Protocol. It also won’t work if you use the Trust This Computer
For Delegation To Any Service (Kerberos Only) option. In my example configuration, I
have numerous Hyper-V hosts, and in Figure 7. 37 , the configuration for savdalhv 01 is
shown. It has been configured for constrained delegation to the Hyper-V hosts
savdalhv 02 and savldalhv 03 for cifs and migration, in addition to the file server
savdalfs 01 for cifs only. I would repeat this configuration on savdalhv 02 and
savdalhv 03 computer accounts, allowing delegation to the other hosts. I have cifs
enabled in addition to Microsoft Virtual System Migration Service for each Hyper-V
host in case virtual machines are using SMB storage that is being migrated, in which
case cifs is required.
Once the Kerberos delegation is configured, the Live Migration will be able to be
initiated from any remote Hyper-V Manager instance between trusted hosts.
Remember also that all hosts that are participating in the Live Migration must have