Users Guide

Table Of Contents
Related tasks
Accessing CMC Web Interface on page 38
Logging Into CMC Using Smart Card
You can log in to CMC using a smart card. Smart cards provide Two Factor Authentication (TFA) that provide two-layers of
security:
Physical smart card device.
Secret code such as a password or PIN.
Users must verify their credentials using the smart card and the PIN.
NOTE: You cannot use the IP address to log in to CMC using Smart Card login. Kerberos validates your credentials based
on the Fully Qualified Domain Name (FQDN).
Before you log in as an Active Directory user using Smart Card, make sure to:
Upload a Trusted Certificate Authority (CA) certificate (CA-signed Active Directory certificate) to CMC.
Configure the DNS server.
Enable Active Directory login.
Enable Smart Card login.
To log in to CMC as an Active Directory user using smart card:
1. Log in to CMC using the link https://<cmcname.domain-name>.
The CMC Login page is displayed prompting you to insert the smart card.
NOTE:
If you changed the default HTTPS port number (port 80), access the CMC Web page
using<cmcname.domain-name>:<port number>, where cmcname is the CMC host name for CMC, domain-name
is the domain name, and port number is the HTTPS port number.
2. Insert the smart card and click Login.
The PIN pop-up is displayed.
3. Enter the PIN and click Submit.
NOTE: If the smart card user is present in Active Directory, an Active Directory password is not required.
You are logged in to CMC with your Active Directory credentials.
Related tasks
Configuring CMC SSO Or Smart Card Login For Active Directory Users on page 149
Logging Into CMC Using Single Sign-on
When Single Sign-On (SSO) is enabled, you can log in to CMC without entering your domain user authentication credentials,
such as user name and password.
NOTE: You cannot use the IP address to log into the Single Sign-On. Kerberos validates your credentials against the FQDN.
Before logging in to CMC using Single Sign-on, make sure that:
You have logged in to your system using a valid Active Directory user account.
Single Sign-On option is enabled during Active Directory configuration.
To log in to CMC using Single Sign-on:
1. Log in to the client system using your network account.
2. Access the CMC Web interface using: https://<cmcname.domain-name>
For example, cmc-6G2WXF1.cmcad.lab, where cmc-6G2WXF1 is the cmc-name and cmcad.lab is the domain-name.
NOTE:
If you have changed the default HTTPS port number (port 80), access the CMC Web interface using
<cmcname.domain-name>:<port number>, where the cmcname is the CMC host name for CMC, domain-name
is the domain name, and port number is the HTTPS port number.
40 Logging In to CMC