User's Manual

244 Using the CMC With Microsoft Active Directory
Enabling Smart Card Authentication
1 Navigate to Chassis Management Controller Network Security tab →
Active Directory subtab and select Configure Active Directory .
2 On the Active Directory Configuration and Management page, select:
• Smart Card — this option requires inserting a Smart Card into reader
and entering the PIN number.
NOTE: All command line out-of-band interfaces including secure shell (SSH),
Telnet, Serial, and remote RACADM remain unchanged for this option.
3 Scroll to the bottom of the page and click Apply .
You can test the Active Directory using Kerberos authentication by using the
CLI command testfeature.
Ty p e :
testfeature -f adkrb -u <
user >@< domain >
where user is a valid Active Directory user account.
A command success indicates that the CMC is able to acquire Kerberos
credentials and access the user's Active Directory account. If the command is
not successful, resolve the error and repeat the command. For more
information, see the Chassis Management Controller Administrator Reference
Guide.
Configuring the Browser For Smart Card Login
Mozilla Firefox
CMC 2.10 does not support Smart Card login through the Firefox browser.
Internet Explorer
Ensure that the Internet Browser is configured to download Active-X plug-ins.
Logging into the CMC Using Smart Card
NOTE: You cannot use the IP address to log into the Single Sign-On or
Smart Card login. Kerberos validates your credentials against the Fully
Qualified Domain Name (FQDN).
1 Log into the client system using your network account.
2 Access the CMC Web page using