Owner's Manual

Using the CMC Web Interface 183
The following controls enable you to upload and download this certificate:
• Upload - Initiates the upload process for the certificate. This certificate,
which you obtain from Active Directory, grants access to CMC.
• Download - Initiates the download process. You are prompted for the
location to save the file. When you select this option and click
Next , a File
Download
dialog box appears. Use this dialog box to specify a location on
your management station or shared network for the server certificate.
NOTE: By default, CMC does not have a certificate authority-issued server
certificate for Active Directory. You must upload a current, certificate authority-
signed server certificate.
Kerberos Keytab
You can upload a Kerberos Keytab generated on the associated Active
Directory Server. You can generate the Kerberos Keytab from the Active
Directory Server by executing the ktpass.exe utility. This keytab establishes a
trust relationship between the Active Directory Server and CMC.
NOTE: CMC does not have a Kerberos Keytab for Active Directory. You must upload
a currently generated Kerberos Keytab. For more information, see "Configuring
Single Sign-On" on page 300.
The following actions are allowed:
• Browse - Opens a Browse dialog box, from which you select the server
certificate you want to upload.
• Upload - Initiates the upload process for the certificate using the file path
you specify.