Administration Guide > Configuring Kerberos Single Sign-On > About Kerberos Authentication and TDV > SQL Server Data Sources and Kerberos
 
SQL Server Data Sources and Kerberos
If a SQL Server data source has been configured with Kerberos for introspection, the data source must also be configured with fixed credentials. Otherwise, introspection, reintrospection, and add/remove resources functions either do not work or they exhibit unexpected behavior, such as previously introspected tables being dropped upon reintrospection.
If you are using Kerberos for introspection, you must configure the data source with fixed credentials. Fixed credentials are the only ones used for introspection. The user account that is to be used for the fixed credentials must adhere to user account specifications; for example, the user account must be a service account:
Password does not expire
No preauthentication is required
AES256 encryption (not DES encryption)