Users Guide

4. Optionally, select a session timeout. This is the duration for which you can stay logged in with no

activity before you are automatically logged out. The default value is the Web Service Idle Timeout.

5. Click OK.

You are logged into CMC with the required user privileges.

You cannot log in to the Web interface with different user names in multiple browser windows on a

single workstation.

Logging in to CMC Using a Smart Card

To use this feature, you must have an Enterprise License. You can log in to CMC using a smart card.

Smart cards provide Two Factor Authentication (TFA) that provide two-layers of security:

• Physical smart card device.

• Secret code such as a password or PIN.

Users must verify their credentials using the smart card and the PIN.

NOTE: You cannot use the IP address to log in to CMC using the Smart Card login. Kerberos

validates your credentials based on the Fully Qualified Domain Name (FQDN).

Before you log in as an Active Directory user using a Smart Card, make sure to:

• Upload a Trusted Certificate Authority (CA) certificate (CA-signed Active Directory certificate) to CMC

• Configure the DNS server.

• Enable Active Directory login.

• Enable Smart Card login.

To log in to CMC as an Active Directory user using a smart card:

1. Log in to CMC using the link https://<cmcname.domain-name>.

The CMC Login page is displayed asking you to insert a smart card.

NOTE: If you changed the default HTTPS port number (port 80), access the CMC web page

using <cmcname.domain-name>:<port number>, where cmcname is the CMC host name

for CMC, domain-name is the domain name, and port number is the HTTPS port number.

2. Insert the smart card and click Login.

The PIN dialog box is displayed.

3. Type the PIN and click Submit.

NOTE: If the smart card user is present in Active Directory, an Active Directory password is not

required. Else, you have to log in by using an appropriate username and password.

You are logged in to CMC with your Active Directory credentials.

Logging Into CMC Using Single Sign-on

When Single Sign-On (SSO) is enabled, you can log in to CMC without providing your domain user

authentication credentials, such as user name and password. To use this feature, you must have an

Enterprise License.

NOTE: You cannot use the IP address to log in to the SSO. Kerberos validates your credentials

against the Fully Qualified Domain Name (FQDN).