Users Guide

Logging in to CMC as a Local User, Active Directory

User, or LDAP User

To log in to CMC, you must have a CMC account with the Log In to CMC privilege. The default CMC user name is root, and the password

is calvin. The root account is the default administrative account that ships with CMC.

NOTE:

• For added security, it is strongly recommended that you change the default password of the root account during initial set up.

• When Certicate Validation is enabled, FQDN of the system should be provided. If certicate validation is enabled and IP address is

provided for the Domain Controller, then the login is not successful.

CMC does not support extended ASCII characters, such as ß, å, é, ü, or other characters used primarily in non-English languages.

To log in as a local user, Active Directory user, or LDAP user.

1 In the Username eld, type your user name:

• CMC user name: <user name>

• Active Directory user name: <domain>\<user name>, <domain>/<user name> or <user>@<domain>.

• LDAP user name: <user name>

NOTE: This eld is case-sensitive.

2 In the Password eld, type the user password.

NOTE

: For Active Directory user, the Username eld is case-sensitive.

3 From the drop-down menu of the Domain eld, select the required domain.

4 Optionally, select a session timeout. This is the duration for which you can stay logged in with no activity before you are automatically

logged out. The default value is the Web Service Idle Timeout.

5 Click OK.

You are logged into CMC with the required user privileges.

You cannot log in to the Web interface with dierent user names in multiple browser windows on a single workstation.

NOTE

: If LDAP authentication is enabled and you attempt logging into CMC using the local credentials, the credentials are rst

checked in the LDAP server and then in CMC.

Logging in to CMC Using a Smart Card

To use this feature, you must have an Enterprise License. You can log in to CMC using a smart card. Smart cards provide Two Factor

Authentication (TFA) that provide two-layers of security:

• Physical smart card device.

• Secret code such as a password or PIN.

Users must verify their credentials using the smart card and the PIN.

NOTE

: You cannot use the IP address to log in to CMC using the Smart Card login. Kerberos validates your credentials based on

the Fully Qualied Domain Name (FQDN).

Before you log in as an Active Directory user using a Smart Card, make sure to:

• Upload a Trusted Certicate Authority (CA) certicate (CA-signed Active Directory certicate) to CMC

• Congure the DNS server.

• Enable Active Directory login.

• Enable Smart Card login.

Logging in to CMC