Users Guide

Yes. The CMC’s Active Directory querying algorithm supports multiple trees in a single forest.
Does the login to CMC using Active Directory work in mixed mode (that is, the domain controllers in the forest run
different operating systems, such as Microsoft Windows 2000 or Windows Server 2003)?
Yes. In mixed mode, all objects used by the CMC querying process (among user, RAC Device Object, and Association Object)
must be in the same domain.
The Dell-extended Active Directory Users and Computers Snap-In checks the mode and limits users in order to create objects
across domains, if in a mixed mode.
Does using CMC with Active Directory support multiple domain environments?
Yes. The domain forest function level must be in Native mode or Windows 2003 mode. In addition, the groups among
Association Object, RAC user objects, and RAC Device Objects (including Association Object) must be universal groups.
Can these Dell-extended objects (Dell Association Object, Dell RAC Device, and Dell Privilege Object) be in different
domains?
The Association Object and the Privilege Object must be in the same domain. The Dell-extended Active Directory Users and
Computers Snap-In allows to create these two objects in the same domain only. Other objects can be in different domains.
Are there any restrictions on Domain Controller SSL configuration?
Yes. All SSL certificates for Active Directory servers in the forest must be signed by the same root certificate authority-signed
certificate, because CMC only allows upload of one trusted certificate authority-signed SSL certificate.
The Web interface does not launch after a new RAC certificate is created and uploaded.
If Microsoft Certificate Services is used to generate the RAC certificate, the User Certificate option may have been used
instead of Web Certificate, when creating the certificate.
To recover, generate a CSR, create a new Web certificate from Microsoft Certificate Services, and then upload it by running
the following RACADM commands:
racadm sslcsrgen [-g] [-f {filename}]
racadm sslcertupload -t 1 -f {web_sslcert}
IOM
After a configuration change, sometimes CMC displays the IP address as 0.0.0.0.
Click the Refresh icon to see if the IP address is set correctly on the switch. If an error is made in setting the IP/mask/
gateway, the switch does not set the IP address and returns a 0.0.0.0 in all fields.
Common errors are:
● Setting the out-of-band IP address to be the same as, or on the same network as, the in-band management IP address.
● Entering an invalid subnet mask.
● Setting the default gateway to an address that is not on a network, which is directly connected to the switch.
Event and error messages
After you downgrade the CMC firmware from the latest CMC version to earlier versions, why does the Chassis Log
displays the following message for some of the logs?
USR8513 - MessageID missing from message registry.
What you see is a new message introduced in the current firmware that older firmware cannot interpret. For more information
about the message ID, see the Event and Error Messages Reference Guide under OpenManage Software at www.dell.com/
openmanagemanuals.
158
Frequently asked questions