Hi SaiSivaKumarDarapureddy-9902.
Welcome to Microsoft Q&A.
The "Cannot generate SSPI context" error is generated when SSPI uses Kerberos authentication to delegate over TCP/IP and Kerberos authentication cannot complete the necessary operations to successfully delegate the user security token to the destination computer that is running SQL Server.
What SQL Server service account are you using? If you run the SQL Server service under the LocalSystem account, the SPN is automatically registered and Kerberos authentication interacts successfully with the computer that is running SQL Server. However, if you run the SQL Server service under a domain account or under a local account, the attempt to create the SPN will fail in most cases because the domain account and the local account do not have the right to set their own SPNs. Please refer to this doc to check if SQL Server startup account has permission to register and modify SPN.
And if you are using Local System account, the middle server should be trusted for delegation in the active directory.
Please refer to Configure the Server to be Trusted for Delegation.
You can use Kerberos Configuration manager to help you troubleshooting SPN and delegation issues.
Please refer to this troubleshooting article to use the tool step by step or check this article to register SPN manually.
Best Regards,
Amelia
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.