You can use System Manager to enable Kerberos and edit a Kerberos configuration associated with a Storage Virtual Machine (SVM). This enables the SVM to use Kerberos security services for NFS.
One data LIF is used by the Service Principal Name (SPN) for both the UNIX and CIFS-related Kerberos traffic. The other data LIF is used for accessing non-Kerberos traffic.
If you are using Microsoft Active Directory Kerberos, the first 15 characters of any SPNs used in the domain must be unique. Microsoft Active Directory has a limitation for SPNs of 15 characters maximum and does not allow duplicate SPNs.