Table 105 Active Directory Keys To Modify - Brocade Communications Systems 53-1001763-02 Administrator's Manual

2. Configure the DNS on the switch by using the dnsConfig command.
3. Set up LDAP according to the instructions in
Fabric OS Administrator's Guide
53-1001763-02
Example of setting the DNS
switch:admin> dnsconfig
Enter option
1 Display Domain Name Service (DNS) configuration
2 Set DNS configuration
3 Remove DNS configuration
4 Quit
Select an item: (1..4) [4] 2
Enter Domain Name: [] domain.com
Enter Name Server IP address in dot notation: [] 123.123.123.123
Enter Name Server IP address in dot notation: [] 123.123.123.124
DNS parameters saved successfully
Enter option
1 Display Domain Name Service (DNS) configuration
2 Set DNS configuration
3 Remove DNS configuration
4 Quit
Select an item: (1..4) [4] 4
Specify the DNS IP address using either IPv4 or IPv6. This is needed for the switch to resolve
the domain name to the IP address because LDAP initiates a TCP session to connect to your
Microsoft Active Directory server. A Fully Qualified Domain Name (FQDN) is needed to validate
the server identity as mentioned in the common name of the server certificate.
Directory" on page 111 in
•
Additional Microsoft Active Directory settings
a. Set the following SCHANNEL settings listed in
To support FIPS-compliant TLS cipher suites on Microsoft's Active Directory server, allow
the SCHANNEL settings listed in
how to allow the SCHANNEL settings for the ciphers, hashes, key exchange and the TLS
protocol.
TABLE 105
Active Directory keys to modify
Key
Ciphers
Hashes
Key exchange algorithm
Protocols
b. Enable FIPS algorithm policy on the Microsoft Active Directory. Refer to
www.microsoft.com for instructions.
"LDAP configuration and Microsoft Active
Chapter 5, "Managing User
Table 105. Refer to www.microsoft.com for instructions on
Sub-key
3DES
SHA1
PKCS
TLSv1.0
FIPS mode configuration
Accounts".
Table 105 to allow.
D
525