I don't use Kerberos Auth in my SP farm. I have a user that is trying to create a SQL Connection in Dashboard Designer. He tried the Per-User identity option, but received an error about PerfPoint not being configured. After researching it, it seems that Kerberos is required when trying to use the Per-User identity, due to double-hop authentication not working with NTLM. This user needs to use his own AD account to access a remote SQL DB, as the data is sensitive. Using the unattended account requires that the account is assigned read access to this DB, which can't be done due to security reasons, and i assume that anyone using PerfPoint and the Unattended Account in future would also have access to this sensitive data.
Is my only option to set up Kerberos on the Farm?