Users Guide

Related Concepts
Configuring User Accounts and Privileges
Related Tasks
Accessing CMC Web Interface
Logging Into CMC Using Smart Card
You can log in to CMC using a smart card. Smart cards provide Two Factor Authentication (TFA) that
provide two-layers of security:
• Physical smart card device.
• Secret code such as a password or PIN.
Users must verify their credentials using the smart card and the PIN.
NOTE: You cannot use the IP address to log in to CMC using Smart Card login. Kerberos validates
your credentials based on the Fully Qualified Domain Name (FQDN).
Before you log in as a Active Directory user using Smart Card, make sure to:
• Upload a Trusted Certificate Authority (CA) certificate (CA-signed Active Directory certificate) to CMC.
• Configure the DNS server.
• Enable Active Directory login.
• Enable Smart Card login.
To log in to CMC as an Active Directory user using smart card:
1. Log in to CMC using the link https://<cmcname.domain-name>.
The CMC Login page is displayed prompting you to insert the smart card.
NOTE: If you changed the default HTTPS port number (port 80), access the CMC Web page
using <cmcname.domain-name>:<port number>, where cmcname is the CMC host name
for CMC, domain-name is the domain name, and port number is the HTTPS port number.
2. Insert the smart card and click Login.
The PIN pop-up is displayed.
3. Enter the PIN and click Submit.
NOTE: If the smart card user is present in Active Directory, an Active Directory password is not
required.
You are logged in to CMC with your Active Directory credentials.
Related Tasks
Configuring CMC SSO Or Smart Card Login For Active Directory Users
Logging Into CMC Using Single Sign-on
When Single Sign-On (SSO) is enabled, you can log in to CMC without entering your domain user
authentication credentials, such as user name and password.
NOTE: You cannot use the IP address to log into the Single Sign-On. Kerberos validates your
credentials against the FQDN.
45