Users Guide

Related links
Conguring User Accounts and Privileges
Accessing CMC Web Interface
Logging Into CMC Using Smart Card
You can log in to CMC using a smart card. Smart cards provide Two Factor Authentication (TFA) that provide two-layers of security:
Physical smart card device.
Secret code such as a password or PIN.
Users must verify their credentials using the smart card and the PIN.
NOTE: You cannot use the IP address to log in to CMC using Smart Card login. Kerberos validates your credentials based on the
Fully Qualied Domain Name (FQDN).
Before you log in as an Active Directory user using Smart Card, make sure to:
Upload a Trusted Certicate Authority (CA) certicate (CA-signed Active Directory certicate) to CMC.
Congure the DNS server.
Enable Active Directory login.
Enable Smart Card login.
To log in to CMC as an Active Directory user using smart card:
1 Log in to CMC using the link https://<cmcname.domain-name>.
The CMC Login page is displayed prompting you to insert the smart card.
NOTE
: If you changed the default HTTPS port number (port 80), access the CMC Web page using<cmcname.domain-
name>:<port number>, where cmcname is the CMC host name for CMC, domain-name is the domain name, and port
number
is the HTTPS port number.
2 Insert the smart card and click Login.
The PIN pop-up is displayed.
3 Enter the PIN and click Submit.
NOTE
: If the smart card user is present in Active Directory, an Active Directory password is not required.
You are logged in to CMC with your Active Directory credentials.
Related links
Conguring CMC SSO Or Smart Card Login For Active Directory Users
Logging Into CMC Using Single Sign-on
When Single Sign-On (SSO) is enabled, you can log in to CMC without entering your domain user authentication credentials, such as user
name and password.
NOTE
: You cannot use the IP address to log into the Single Sign-On. Kerberos validates your credentials against the FQDN.
Before logging in to CMC using Single Sign-on, make sure that:
You have logged in to your system using a valid Active Directory user account.
Single Sign-On option is enabled during Active Directory conguration.
42
Logging In to CMC