Users Guide

Configuring Smart Card Authentication 139
Configuring Smart Card
Authentication
The Dell™ Remote Access Controller 5 (DRAC 5) version 1.30 and later
support the two-factor-authentication for logging into the DRAC 5 Web
interface. This support is provided by the Smart Card Logon feature on the
DRAC 5.
The traditional authentication schemes use user name and password to
authenticate users. This provides minimal security.
Two-factor-authentication, on the other hand, provides a higher-level of
security by requiring users to have a password or PIN and a private key for a
digital certificate.
The two-factor authentication requires users to verify their identities by
providing both factors.
Configuring Smart Card Login in DRAC 5
Enable the DRAC 5 Smart Card logon feature from Remote Access→
Configuration→ Smart Card.
If you:
• Disable Smart Card configuration, you are prompted for a Microsoft
®
Active Directory
®
or local logon username and password.
•
Enable or Enable with Remote Racadm , you are prompted for a Smart
Card logon during any subsequent logon attempts using the GUI.
When you select
Enable , all command line interface (CLI) out-of-band
interfaces, such as telnet, ssh, serial, remote racadm, and IPMI over LAN,
are disabled. This is because these services support only single-factor
authentication.
When you select
Enable with Remote Racadm , all CLI out-of-band
interfaces, except remote racadm, are disabled.