Users Guide

NOTE: The cmcname.domainname.com must be lower case as required by RFC and the @REALM_NAME must be
uppercase. In addition, CMC supports the DES-CBC-MD5 type of cryptography for Kerberos authentication.
A keytab le is generated that must be uploaded to CMC.
NOTE: The keytab contains an encryption key and must be kept secure. For more information on the
ktpass
utility, see the
Microsoft website.
Conguring CMC For Active Directory Schema
For information to congure CMC for Active Directory standard schema, see Conguring Standard Schema Active Directory.
For information to congure CMC for Extended Schema Active Directory, see Extended Schema Active Directory Overview.
Conguring Browser For SSO Login
Single Sign-On (SSO) is supported on Internet Explorer versions 6.0 and later and Firefox versions 3.0 and later.
NOTE: The following instructions are applicable only if CMC uses Single Sign-On with Kerberos authentication.
Internet Explorer
To congure Internet Explorer for Single Sign-On:
1 In the Internet Explorer, select Tools > Internet Options.
2 On the Security tab, under Select a zone to view or change security settings, select Local Intranet.
3 Click Sites.
The Local Intranet dialog box is displayed.
4 Click Advanced.
The Local Intranet Advance Settings dialog box is displayed.
5 In the Add this site to the zone, type the name of CMC and the domain it belongs to and click Add.
NOTE
: You can use a wildcard (*) to specify all devices or users in that domain.
Mozilla Firefox
1 In Firefox, type about:cong in the address bar.
NOTE
: If the browser displays the This might void your warranty warning, click I'll be careful. I promise.
2 In the Filter text box, type negotiate.
The browser displays a list of preference names limited to those containing the word negotiate.
3 From the list, double-click network.negotiate-auth.trusted-uris.
4 In the Enter string value dialog box, type the CMC's domain name and click OK.
Conguring Browser For Smart Card Login
Mozilla Firefox — CMC 2.10 does not support Smart Card login through the Firefox browser.
Conguring
CMC For Single Sign-On Or Smart Card Login 163