Users Guide

To ensure that the CSR matches the registered DNS CMC name:
1 In the left pane, click Chassis Overview.
2 Click Network.
The Network Conguration page appears.
3 Select the Register CMC on DNS option.
4 Type a CMC name in the DNS CMC Name eld.
5 Click Apply Changes.
Active Directory
Does Active Directory support CMC login across multiple trees?
Yes. The CMC’s Active Directory querying algorithm supports multiple trees in a single forest.
Does the login to CMC using Active Directory work in mixed mode (that is, the domain controllers in the forest run dierent
operating systems, such as Microsoft Windows 2000 or Windows Server 2003)?
Yes. In mixed mode, all objects used by the CMC querying process (among user, RAC Device Object, and Association Object) must be in
the same domain.
The Dell-extended Active Directory Users and Computers Snap-In checks the mode and limits users in order to create objects across
domains, if in a mixed mode.
Does using CMC with Active Directory support multiple domain environments?
Yes. The domain forest function level must be in Native mode or Windows 2003 mode. In addition, the groups among Association Object,
RAC user objects, and RAC Device Objects (including Association Object) must be universal groups.
Can these Dell-extended objects (Dell Association Object, Dell RAC Device, and Dell Privilege Object) be in dierent domains?
The Association Object and the Privilege Object must be in the same domain. The Dell-extended Active Directory Users and Computers
Snap-In allows to create these two objects in the same domain only. Other objects can be in dierent domains.
Are there any restrictions on Domain Controller SSL conguration?
Yes. All SSL certicates for Active Directory servers in the forest must be signed by the same root certicate authority-signed certicate,
because CMC only allows upload of one trusted certicate authority-signed SSL certicate.
The Web interface does not launch after a new RAC certicate is created and uploaded.
If Microsoft Certicate Services is used to generate the RAC certicate, the User Certicate option may have been used instead of Web
Certicate, when creating the certicate.
To recover, generate a CSR, create a new Web certicate from Microsoft Certicate Services, and then upload it by running the following
RACADM commands:
racadm sslcsrgen [-g] [-f {filename}]
racadm sslcertupload -t 1 -f {web_sslcert}
Frequently Asked Questions
235