Users Guide

Configuring iDRAC6 for Single Sign-On and Smart Card Login 179
8 Select Enable Smart–Card Login to enable Smart Card login. You are
prompted for a Smart Card logon during any subsequent logon attempts
using the GUI.
9 Add User Domain Name , and enter the IP address of the Domain
Controller Server Address. Select
Next .
10 Select Standard Schema Settings on Step 3 of 4 Active Directory
Configuration and Management
page. Select Next .
11 On Step 4a of 4 Active Directory page, enter the IP Address of the Global
Catalog Server
. Add the Role Group information that your valid Active
Directory user is a member of, by selecting one of the Role Groups (S
tep
4B of 4 Configure Role Group
page). Enter the Group Name , the Group
Domain
, and the Role Group Privileges . Select OK and then Finish .
After selecting
Done , scroll back to the bottom of the Active Directory
summary page and select
Kerberos Keytab Upload .
12 Upload a valid Kerberos Keytab file. Ensure that the Active Directory
Server and iDRAC6 times are synchronized. Verify that both time and
time zones are correct before uploading the keytab file. For more
information on creating a keytab file, see "Configuring iDRAC6 for Single
Sign-On and Smart Card Login" on page 171.
Clear the Enable Smart–Card Login option to disable the TFA Smart Card
logon feature. The next time you login to iDRAC6 GUI, you are prompted for
a Microsoft Active Directory or local logon username and password, which
occurs as the default login prompt from the Web interface.