Users Guide

Logging into CMC as a local user, active directory
user, or LDAP user
To log in to CMC, you must have a CMC account with the Log In to CMC privilege. The default root account is the default
administrative account that ships with CMC.
NOTE: For added security, it is recommended that you change the default password of the root account during initial
setup.
NOTE: When Certificate Validation is enabled, FQDN of the system should be provided. If certificate validation is enabled
and IP address is provided for the Domain Controller, then the login will fail.
CMC does not support extended ASCII characters, such as ß, å, é, ü, or other characters used primarily in non-English
languages.
To log in as a local user, Active Directory user, or LDAP user.
1. In the Username field, type your user name:
● CMC user name: <user name>
NOTE: The CMC user name can contain only alphanumeric characters and certain special characters. The at (@)
symbol and following special characters are not supported:
○ Forward slash (/)
○ Backward slash (/)
○ Semicolon (;)
○ Backward Quote (`)
○ Quotations (“)
● Active Directory user name: <domain>\<user name>, <domain>/<user name> or <user>@<domain>.
● LDAP user name: <user name>
NOTE: This field is case-sensitive.
2. In the Password field, type the user password.
NOTE: For Active Directory user, the Username field is case-sensitive.
3. In the Domain field, from the drop-down menu, select the required domain.
4. Optionally, select a session timeout. This is the duration for which you can stay logged in with no activity before you are
automatically logged out. The default value is the Web Service Idle Timeout.
5. Click OK.
You are logged into CMC with the required user privileges.
You cannot log in to the Web interface with different user names in multiple browser windows on a single workstation.
NOTE:
If LDAP authentication is enabled and you attempt logging into CMC using the local credentials, the credentials are
first checked in the LDAP server and then in CMC.
Logging into CMC using a smart card
To use this feature, you must have an Enterprise License. You can log in to CMC using a smart card. Smart cards provide Two
Factor Authentication (TFA) that provide two-layers of security:
● Physical smart card device.
● Secret code such as a password or PIN.
Users must verify their credentials using the smart card and the PIN.
NOTE:
You cannot use the IP address to log in to CMC using the Smart Card login. Kerberos validates your credentials
based on the Fully Qualified Domain Name (FQDN).
Before you log in as an Active Directory user using a Smart Card, make sure to:
● Upload a Trusted Certificate Authority (CA) certificate (CA-signed Active Directory certificate) to CMC
Logging into CMC
35