Users Guide

• Automatic prompting for le downloads (if this option is available)
• File download
CAUTION: To make sure that the computer used to access iDRAC is safe, under Miscellaneous, do not enable the Launching
applications and unsafe les option.
Network security
While accessing the iDRAC Web interface, a security warning appears stating that the SSL certicate issued by the Certicate
Authority (CA) is not trusted.
iDRAC includes a default iDRAC server certicate to ensure network security while accessing through the Web-based interface and remote
RACADM. This certicate is not issued by a trusted CA. To resolve this, upload a iDRAC server certicate issued by a trusted CA (for
example, Microsoft Certicate Authority, Thawte or Verisign).
Why the DNS server not registering iDRAC?
Some DNS servers register iDRAC names that contain only up to 31 characters.
When accessing the iDRAC Web-based interface, a security warning is displayed stating that the SSL certicate host name does not
match the iDRAC host name.
iDRAC includes a default iDRAC server certicate to ensure network security while accessing through the Web-based interface and remote
RACADM. When this certicate is used, the Web browser displays a security warning because the default certicate that is issued to
iDRAC does not match the iDRAC host name (for example, the IP address).
To resolve this, upload an iDRAC server certicate issued to the IP address or the iDRAC host name. When generating the CSR (used for
issuing the certicate), make sure that the common name (CN) of the CSR matches the iDRAC IP address (if certicate issued to IP) or
the registered DNS iDRAC name (if certicate is issued to iDRAC registered name).
To make sure that the CSR matches the registered DNS iDRAC name:
1 In iDRAC Web interface, go to Overview > iDRAC Settings > Network. The Network page is displayed.
2 In the Common Settings section:
• Select the Register iDRAC on DNS option.
• In the DNS iDRAC Name eld, enter the iDRAC name.
3 Click Apply.
Active Directory
Active Directory login failed. How to resolve this?
To diagnose the problem, on the Active Directory Conguration and Management page, click Test Settings. Review the test results and
x the problem. Change the conguration and run the test until the test user passes the authorization step.
In general, check the following:
• While logging in, make sure that you use the correct user domain name and not the NetBIOS name. If you have a local iDRAC user
account, log into iDRAC using the local credentials. After logging in, make sure that:
• The Active Directory Enabled option is selected on the Active Directory Conguration and Management page.
• The DNS setting is correct on the iDRAC Networking conguration page.
• The correct Active Directory root CA certicate is uploaded to iDRAC if certicate validation was enabled.
• The iDRAC name and iDRAC Domain name matches the Active Directory environment conguration if you are using extended
schema.
316
Frequently asked questions