Users Guide

• Upload a Trusted Certificate Authority (CA) certificate (CA-signed Active Directory certificate) to CMC.

• Configure the DNS server.

• Enable Active Directory login.

• Enable Smart Card login.

To log in to CMC as an Active Directory user using smart card:

1. Log in to CMC using the link https://<cmcname.domain-name>.

The CMC Login page is displayed prompting you to insert the smart card.

NOTE: If you changed the default HTTPS port number (port 80), access the CMC Web page using

<cmcname.domain-name>:<port number>, where cmcname is the CMC host name for CMC, domain-name is

the domain name, and port number is the HTTPS port number.

2. Insert the smart card and click Login.

The PIN pop-up is displayed.

3. Enter the PIN and click Submit.

NOTE: If the smart card user is present in Active Directory, an Active Directory password is not required.

You are logged in to CMC with your Active Directory credentials.

Related links

Configuring CMC SSO Or Smart Card Login For Active Directory Users

Logging Into CMC Using Single Sign-on

When Single Sign-On (SSO) is enabled, you can log in to CMC without entering your domain user authentication credentials, such

as user name and password.

NOTE: You cannot use the IP address to log into the Single Sign-On. Kerberos validates your credentials against the

FQDN.

Before logging in to CMC using Single Sign-on, make sure that:

• You have logged in to your system using a valid Active Directory user account.

• Single Sign-On option is enabled during Active Directory configuration.

To log in to CMC using Single Sign-on:

1. Log in to the client system using your network account.

2. Access the CMC Web interface using: https://<cmcname.domain-name>

For example, cmc-6G2WXF1.cmcad.lab, where cmc-6G2WXF1 is the cmc-name and cmcad.lab is the domain-name.

NOTE: If you have changed the default HTTPS port number (port 80), access the CMC Web interface using

<cmcname.domain-name>:<port number>, where the cmcname is the CMC host name for CMC, domain-

name

is the domain name, and port number is the HTTPS port number.

CMC logs you in, using the Kerberos credentials that were cached by your browser when you logged in using your valid Active

Directory account. If the login fails, the browser is redirected to the normal CMC login page.

NOTE: If you did not log in to the Active Directory domain and are using a browser other then Internet Explorer, the