Users Guide

NOTE: The cmcname.domainname.com must be in lowercase as required by RFC and the @REALM_NAME must be in
uppercase. In addition, CMC supports the DES-CBC-MD5 and AES256-SHA1 types of cryptography for Kerberos
authentication.
A keytab le is generated that must be uploaded to CMC.
NOTE: The keytab contains an encryption key and must be kept secure. For more information about the
ktpass
utility, see
the Microsoft website.
Conguring CMC for Active Directory schema
For information about conguring CMC for Active Directory standard schema, see Conguring Standard Schema Active Directory.
For information about conguring CMC for Extended Schema Active Directory, see Extended Schema Active Directory Overview.
Conguring browser for SSO login
Single Sign-On (SSO) is supported on Internet Explorer versions 6.0 and later, and Firefox versions 3.0 and later.
NOTE: The following instructions are applicable only if CMC uses Single Sign-On with Kerberos authentication.
Internet Explorer
To edit the exception list in Internet Explorer:
1 Start Internet Explorer.
2 Click Tools > Internet Options > Connections.
3 In the Local Area Network (LAN) settings section, click LAN Settings.
4 In the Proxy server section, select the Use a proxy server for your LAN (These settings will not apply to dial-up or VPN
connections)
option, and then click Advanced.
5 In the Exceptions section, add the addresses for CMCs and iDRACs on the management network to the semicolon-separated list. You
can use DNS names and wildcards in your entries.
Mozilla Firefox
To edit the exception list in Mozilla Firefox version 19.0:
1 Start Mozilla Firefox.
2 Click Tools > Options (for systems running on Windows), or click Edit > Preferences (for systems running on Linux).
3 Click Advanced, and then click the Network tab.
4 Click Settings.
5 Select Manual Proxy Conguration.
6 In the No Proxy for eld, type the addresses for CMCs and iDRACs on the management network to the comma-separated list. You
can use DNS names and wildcards in your entries.
Conguring browser for Smart Card login
Internet Explorer — Make sure that the Internet browser is congured to download Active-X plug-ins.
120
Conguring CMC for Single Sign-On or Smart Card login