Users Guide

The Dell-extended Active Directory Users and Computers Snap-In checks the mode and limits users in order to create objects across
domains, if in a mixed mode.
Does using CMC with Active Directory support multiple domain environments?
Yes. The domain forest function level must be in Native mode or Windows 2003 mode. In addition, the groups among Association Object,
RAC user objects, and RAC Device Objects (including Association Object) must be universal groups.
Can these Dell-extended objects (Dell Association Object, Dell RAC Device, and Dell Privilege Object) be in different
domains?
The Association Object and the Privilege Object must be in the same domain. The Dell-extended Active Directory Users and Computers
Snap-In allows to create these two objects in the same domain only. Other objects can be in different domains.
Are there any restrictions on Domain Controller SSL configuration?
Yes. All SSL certificates for Active Directory servers in the forest must be signed by the same root certificate authority-signed certificate,
because CMC only allows upload of one trusted certificate authority-signed SSL certificate.
The Web interface does not launch after a new RAC certificate is created and uploaded.
If Microsoft Certificate Services is used to generate the RAC certificate, the User Certificate option may have been used instead of Web
Certificate, when creating the certificate.
To recover, generate a CSR, create a new Web certificate from Microsoft Certificate Services, and then upload it by running the following
RACADM commands:
racadm sslcsrgen [-g] [-f {filename}]
racadm sslcertupload -t 1 -f {web_sslcert}
IOM
After a configuration change, sometimes CMC displays the IP address as 0.0.0.0.
Click the Refresh icon to see if the IP address is set correctly on the switch. If an error is made in setting the IP/mask/gateway, the
switch does not set the IP address and returns a 0.0.0.0 in all fields.
Common errors are:
• Setting the out-of-band IP address to be the same as, or on the same network as, the in-band management IP address.
• Entering an invalid subnet mask.
• Setting the default gateway to an address that is not on a network, which is directly connected to the switch.
Event and error messages
After you downgrade the CMC firmware from the latest CMC version to earlier versions, why does the Chassis Log displays
the following message for some of the logs?
USR8513 - MessageID missing from message registry.
What you see is a new message introduced in the current firmware that older firmware cannot interpret. For more information about the
message ID, see the Event and Error Messages Reference Guide under OpenManage Software at www.dell.com/
openmanagemanuals.
Frequently asked questions
157