Owner's Manual

306 Using the CMC Directory Service
Enabling Smart Card Authentication
To enable Smart Card authentication:
1
Navigate to the User Authentication tab  Directory Services subtab.
Ensure that
Microsoft Active Directory Standard or Extended Schema is
selected.
2 In the Common Settings Section , select:
• Smart Card — this option requires that you insert a Smart Card into
reader and enter the PIN number.
NOTE: All command line out-of-band interfaces including secure shell (SSH),
Telnet, Serial, and remote RACADM remain unchanged for this option.
3 Scroll to the bottom of the page and click Apply .
You can test the Active Directory using Kerberos authentication by using the
CLI command testfeature.
Ty p e :
testfeature -f adkrb -u <user>@<domain>
where user is a valid Active Directory user account.
A command success indicates that CMC is able to acquire Kerberos
credentials and access the user's Active Directory account. If the command is
not successful, resolve the error and repeat the command. For more
information, see the RACADM command testfeature documentation.
Configuring the Browser For Smart Card Login
Mozilla Firefox
CMC 2.10 does not support Smart Card login through the Firefox browser.
Internet Explorer
Ensure that the Internet Browser is configured to download Active-X plug-ins.