Error Code Portal
MicrosoftWindows Win32Error code

8589

ERROR_DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REF

Alternative forms: 0x0000218D · 0x218D · ERROR_DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REF · 0x8007218D

What does this code mean?

Code 8589 · An issue reported by Windows Win32.

Official explanation · Original text

The DS cannot derive a service principal name (SPN) with which to mutually authenticate the target server because the corresponding server object in the local DS database has no serverReference attribute.

Troubleshooting and diagnostic links

First check that the document's product, version, and environment match your situation.

Source and terms of use

System Error Codes (8200-8999) (WinError.h) ↗

Creator: Microsoft and MicrosoftDocs contributors
License: Creative Commons Attribution 4.0 International
Checked on: 2026-11-12

Modifications: Extracted numeric codes, symbolic names and English message text; converted Markdown/HTML to plain text and normalized whitespace; added Korean product context, namespace labels, status classification and separately labeled official links. No machine translation of message text.

Source details · Original licenses and notices