Explanation/Reference:
Explanation:
If you have decided to use Kerberos to authenticate live migration traffic, configure constrained delegation before you proceed to the rest of the steps.
To configure constrained delegation
Open the Active Directory Users and Computers snap-in. For example, to do this from Server Manager,

select the server if it not already selected. After the server is selected, click Tools, and then click Active Directory Users and Computers. This opens the Active Directory Users and Computers snap-in.
From the navigation pane, select the domain and double-click the Computers folder.

From the Computers folder, right-click the computer account of the source server and then click

Properties.
In the Properties dialog box, click the Delegation tab.

On the delegation tab, select Trust this computer for delegation to the specified services only. Under

that option, select Use Kerberos only.
Click Add.

Etc.
References: https://technet.microsoft.com/en-us/library/jj134199(v=ws.11).aspx