Users Guide

Conguring iDRAC SSO login for Active Directory users
Before conguring iDRAC for Active Directory SSO login, make sure that you have completed all the prerequisites.
You can congure iDRAC for Active Directory SSO when you setup an user account based on Active Directory.
Related links
Prerequisites for Active Directory Single Sign-On or smart card login
Conguring Active Directory with Standard schema using iDRAC web interface
Conguring Active Directory with Standard schema using RACADM
Conguring Active Directory with Extended schema using iDRAC web interface
Conguring Active Directory with Extended schema using RACADM
Conguring iDRAC SSO login for Active Directory users using web interface
To congure iDRAC for Active Directory SSO login:
NOTE: For information about the options, see the
iDRAC Online Help
.
1. Verify whether the iDRAC DNS name matches the iDRAC Fully Qualied Domain Name. To do this, in iDRAC Web interface, go
to
OverviewiDRAC SettingsNetworkNetwork and see the DNS Domain Name property.
2. While conguring Active Directory to setup a user account based on standard schema or extended schema, perform the
following two additional steps to congure SSO:
Upload the keytab le on the Active Directory Conguration and Management Step 1 of 4 page.
Select Enable Single Sign-On option on the Active Directory Conguration and Management Step 2 of 4 page.
Conguring iDRAC SSO login for Active Directory users using RACADM
To enable SSO, complete the steps to congure Active Directory, and run the following command:
racadm set iDRAC.ActiveDirectory.SSOEnable 1
Conguring iDRAC smart card login for local users
To congure iDRAC local user for smart card login:
1. Upload the smart card user certicate and trusted CA certicate to iDRAC.
2. Enable smart card login.
Related links
Obtaining certicates
Uploading smart card user certicate
Enabling or disabling smart card login
Uploading smart card user certicate
Before you upload the user certicate, make sure that the user certicate from the smart card vendor is exported in Base64 format.
SHA-2 certicates are also supported.
Related links
Obtaining certicates
Uploading smart card user certicate using web interface
To upload smart card user certicate:
1. In iDRAC Web interface, go to OverviewiDRAC SettingsNetworkUser AuthenticationLocal Users.
149