Dell iDRAC6 User Manual page 162

6 To validate the SSL certificate of your Active Directory servers, select the
Certificate Validation Enabled check box under Certificate Settings. If
you do not want to validate the SSL certificate of your Active Directory
servers, skip to step 8.
7 Under Upload Active Directory CA Certificate, enter the file path of the
certificate or browse to find the certificate file, and then click Upload. You
must enter the absolute file path, which includes the full path and the
complete file name and file extension. The certificate information for the
Active Directory CA certificate that you uploaded appears in the Current
Active Directory CA Certificate section.
8 Click Next. The Step 2 of 4 Active Directory Configuration and
Management screen appears.
9 Select the Active Directory Enabled check box.
10 Select Enable Smart–Card Login to enable Smart Card login. You are
prompted for a Smart Card logon during any subsequent logon attempts
using the GUI.
11 Add User Domain Name, and enter the IP address of the Domain
Controller Server Address. Select Next.
12 Select Standard Schema Settings on Step 3 of 4 Active Directory
Configuration and Management page. Select Next.
13 On Step 4a of 4 Active Directory page, enter the IP Address of the Global
Catalog Server. Add the Role Group information that your valid Active
Directory user is a member of, by selecting one of the Role Groups (Step
4B of 4 Configure Role Group page). Enter the Group Name, the Group
Domain, and the Role Group Privileges. Select OK and then Finish.
After selecting Done, scroll back to the bottom of the Active Directory
page and select Kerberos Keytab Upload.
14 Upload a valid Kerberos Keytab file. Ensure that the Active Directory
Server and iDRAC6 times are synchronized. Verify that both time and
time zones are correct before uploading the keytab file. For more
information on creating a keytab file, see "Enabling Kerberos
Authentication".
Clear the Enable Smart–Card Login option to disable the TFA Smart Card
logon feature. The next time you login to iDRAC6 GUI, you are prompted for
®
a Microsoft Active Directory
occurs as the default login prompt from the Web interface.
162
Configuring Smart Card Authentication
®
or local logon username and password, which