Users Guide

Configuring iDRAC smart card login for Active
Directory users
Before configuring iDRAC Smart Card login for Active Directory users, make sure that you have completed the required
prerequisites.
To configure iDRAC for smart card login:
1. In iDRAC Web interface, while configuring Active Directory to set up an user account based on standard schema or extended
schema, on the Active Directory Configuration and Management Step 1 of 4 page:
● Enable certificate validation.
● Upload a trusted CA-signed certificate.
● Upload the keytab file.
2. Enable smart card login. For information about the options, see the iDRAC Online Help.
Related concepts
Enabling or disabling smart card login on page 152
Obtaining certificates on page 94
Generating Kerberos keytab file on page 149
Configuring Active Directory with Standard schema using iDRAC web interface on page 134
Configuring Active Directory with Standard schema using RACADM on page 134
Configuring Active Directory with Extended schema using iDRAC web interface on page 144
Configuring Active Directory with Extended schema using RACADM on page 144
Enabling or disabling smart card login
Before enabling or disabling smart card login for iDRAC, make sure that:
● You have configure iDRAC permissions.
● iDRAC local user configuration or Active Directory user configuration with the appropriate certificates is complete.
NOTE:
If smart card login is enabled, then SSH, Telnet, IPMI Over LAN, Serial Over LAN, and remote RACADM are disabled.
Again, if you disable smart card login, the interfaces are not enabled automatically.
Related concepts
Obtaining certificates on page 94
Configuring iDRAC smart card login for Active Directory users on page 152
Configuring iDRAC smart card login for local users on page 150
Enabling or disabling smart card login using web interface
To enable or disable the Smart Card logon feature:
1. In the iDRAC web interface, go to Overview > iDRAC Settings > User Authentication > Smart Card.
The Smart Card page is displayed.
2. From the Configure Smart Card Logon drop-down menu, select Enabled to enable smart card logon or select Enabled
With Remote RACADM. Else, select Disabled.
For more information about the options, see the iDRAC Online Help.
3. Click Apply to apply the settings.
You are prompted for a Smart Card login during any subsequent logon attempts using the iDRAC web interface.
Enabling or disabling smart card login using RACADM
To enable smart card login, use the set command with objects in the iDRAC.SmartCard group.
152
Configuring iDRAC for Single Sign-On or smart card login