SQL Server Kerberos Authentication

[barryla]

I would like to know if the following would be possible.

We have > 500 MS SQL Instances that we want to monitor on Dynatrace.
We would like to use Kerberos authentication to connect to the instances.
We want to create a new domain account for the connection from Dynatrace ActiveGate to the SQL Instances.
We don't want to use the SQL Service Account for the monitoring.
How do we register the new domain account to allow us to communicate from the ActiveGate to the SQL Instance?

What setspn configuration do we need to allow for the communication?

[p_devulapalli]

@barryla Kerberos authentication is already supported for MS SQL extensions , you should be able to configure it when adding endpoints in extension 

https://docs.dynatrace.com/docs/shortlink/extend-microsoft-sql#define-endpoints

https://docs.dynatrace.com/docs/ingest-from/extensions20/data-sources/sql/microsoft-sql-monitoring#a...

"authentication": {
   "scheme": "kerberos",
   "username": "username",
   "password": "password",
   "realm": "realm",
   "kdc": "kdc"
}

[barryla]

Thank you p_devulapalli but the documentation is not complete on the requirements for Kerberos on what is needed. As mentioned in my post, I do not want to use the SQL Service Account but want to use a new domain account for the monitoring.

I need to see where it says how to configure the SPN configurations for the domain account to connect to the SQL instance.