User's Manual

Using the CMC With Microsoft Active Directory 217
Can these Dell-extended objects
(Dell Association Object, Dell RAC
Device, and Dell Privilege Object)
be in different domains?
The Association Object and the Privilege
Object must be in the same domain. The Dell-
extended Active Directory Users and
Computers Snap-In forces you to create these
two objects in the same domain. Other objects
can be in different domains.
Are there any restrictions on Domain
Controller SSL configuration?
Yes. All SSL certificates for Active Directory
servers in the forest must be signed by the
same root certificate authority-signed
certificate, because CMC only allows you to
upload one trusted certificate authority-signed
SSL certificate.
I created and uploaded a new RAC
certificate and now the Web
interface does not launch.
If you use Microsoft Certificate Services to
generate the RAC certificate, you may have
inadvertently chose User Certificate instead of
Web Certificate when creating the certificate.
To recover, generate a CSR, and then create a
new Web certificate from Microsoft
Certificate Services and upload it using the
using the following RACADM commands:
racadm sslcsrgen [-g] [-u]
[-f {filename}]
racadm sslcertupload -t 1 -f
{web_sslcert}
Table 7-9. Using CMC With Active Directory: Frequently Asked Questions (continued)
Question Answer