Users Guide

Configuring Smart Card Authentication 171
Incorrect Smart Card PIN
Check to see if the Smart Card has been locked out due to too many attempts
with an incorrect PIN. In such cases, the issuer of the Smart Card in the
organization will be able to help you get a new Smart Card.
Unable to Log into Local iDRAC6
If a local iDRAC6 user cannot log in, check if the username and the user
certificates uploaded to the iDRAC6 have expired. The iDRAC6 trace logs
may provide important log messages regarding the errors; although the error
messages are sometimes intentionally ambiguous due to security concerns.
Unable to Log into iDRAC6 as an Active Directory User
If you cannot log into the iDRAC6 as an Active Directory user, try to log into
the iDRAC6 without enabling the Smart Card logon. If you have enabled the
CRL check, try the Active Directory logon without enabling the CRL check.
The iDRAC6 trace log should provide important messages in case of CRL
failure.
You also have the option of disabling the Smart Card Logon through the local
racadm using the following command:
racadm config -g cfgActiveDirectory -o
cfgADSmartCardLogonEnable 0