Users Guide

By using the Association Object Properties window, you can associate users or user groups, privilege objects, systems, RAC devices, and system or device
groups.
You can add groups of Users and Products. You can create Dell-related groups in the same way that you created other groups.
To add Users or User Groups:

1. Right-click the Association Object and select Properties.

2. Select the Users tab and click Add.

3. Type the User or User Group name or browse to select one and click OK.
Click the Privilege Object tab to add the privilege object to the association that defines the user's or user group's privileges when authenticating to a system.
To add a privilege:

1. Select the Privileges Object tab and click Add.

2. Type the Privilege Object name or browse for one and click OK.
Click the Products tab to add one or more systems or devices to the association. The associated objects specify the products connected to the network that
are available for the defined users or user groups.
To add Products:

1. Select the Products tab and click Add.

2. Type the system, device, or group name and click OK.

3. In the Properties window, click Apply and then OK.

Enabling SSL on a Domain Controller (RAC Only)
IfyouplantouseMicrosoftEnterpriseRootCAtoautomaticallyassignallyourdomaincontrollersSSLcertificates,youmustperformthefollowingstepsto
enable SSL on each domain controller.

1. Install a Microsoft Enterprise Root CA on a Domain Controller.
a. Select Start® Control Panel® Add or Remove Programs.
b. Select Add/Remove Windows Components.
c. In the Windows Components Wizard, select the Certificate Services check box.
d. Select Enterprise root CA as CA Type and click Next.
e. Enter Common name for this CA, click Next, and click Finish.

2. EnableSSLoneachofyourdomaincontrollersbyinstallingtheSSLcertificateforeachcontroller.
a. Click Start® Administrative Tools® Domain Security Policy.
b. Expand the Public Key Policies folder, right-click Automatic Certificate Request Settings and click Automatic Certificate Request.
c. In the Automatic Certificate Request Setup Wizard, click Next and select DomainController.
d. Click Next and click Finish.

Exporting the Domain Controller Root CA Certificate (RAC Only)

1. Go to the domain controller on which you installed the Microsoft Enterprise CA service.

NOTE: RAC users must use Universal Groups to span domains with their users or RAC objects.
NOTE: You can add only one Privilege Object to an association object.
NOTE: You can add multiple systems or RAC devices to an Association Object.
NOTE: The following steps may vary slightly if you are using Windows 2000.