Users Guide

178 Configuring iDRAC6 for Single Sign-On and Smart Card Login
Configuring Smart Card Authentication
iDRAC6 supports the two factor authentication (TFA) feature by enabling
Smart Card Logon.
The traditional authentication schemes use user name and password to
authenticate users. This provides minimal security.
TFA, on the other hand, provides a higher-level of security by making the
users provide two factors of authentication—what you have and what you
know—what you have is the Smart Card, a physical device, and what you
know—a secret code like a password or PIN.
The two-factor authentication requires users to verify their identities by
providing both factors.
Configuring Smart Card Login in iDRAC6
To enable iDRAC6 Smart Card login feature from the Web interface:
1
Open a supported Web browser window.
2 Log in to iDRAC6 Web interface.
3 Go to the Step 1 of 4 Active Directory Configuration and Management
screen.
4 To validate the SSL certificate of your Active Directory servers, select the
Certificate Validation Enabled check box under Certificate Settings . If
you do not want to validate the SSL certificate of your Active Directory
servers, skip to step 6.
5 Under Upload Active Directory CA Certificate , enter the file path of the
certificate or browse to find the certificate file, and then click
Upload . You
must enter the absolute file path, which includes the full path and the
complete file name and file extension. The certificate information for the
Active Directory CA certificate that you uploaded is displayed in the
Current Active Directory CA Certificate section.
6 Click Next. The Step 2 of 4 Active Directory Configuration and
Management
screen is displayed.
7 Select the Active Directory Enabled check box.