Installation Manual

• iLO Date/Time, SNTP Settings—The current date and time and the SNTP settings cannot
be displayed through this interface.
• Kerberos-specific configuration parameters—You can configure Kerberos parameters
in the properties of the oemhp_dircfg1, target.
For information about configuring the iLO parameters by using the CLI, CLP, or SSH, see the
iLO scripting and command line guide.
Configuring supported browsers for single sign-on
Users who are allowed to log in to iLO must be members of the groups for which permissions
are assigned. For Windows clients, locking and unlocking the workstation refreshes the credentials
that are used to log in to iLO. Home versions of the Windows operating system do not support
Kerberos login.
The procedures in this section enable login if Active Directory is configured correctly for iLO, and
iLO is configured correctly for Kerberos login.
Enabling single-sign-on in Internet Explorer
The following procedure is based on Internet Explorer 11. Other browser versions might have
different steps.
Process overview:
1. Enable authentication in Internet Explorer.
2. Add the iLO domain to the Intranet zone.
3. Enable the Automatic login only in Intranet zone setting.
4. If any options were changed in steps 1–3, close and restart Internet Explorer.
5. Verify the single sign-on configuration.
Enabling authentication in Internet Explorer
1. Select Tools→Internet options.
2. Click the Advanced tab.
3. Scroll to the Security section.
4. Verify that the Enable Integrated Windows Authentication option is selected.
5. Click OK.
Adding the iLO domain to the Intranet zone
1. Select Tools→Internet options.
2. Click the Security tab.
3. Click the Local intranet icon.
4. Click the Sites button.
5. Click the Advanced button.
6. Enter the site to add in the Add this website to the zone box.
On a corporate network, *.example.net is sufficient.
7. Click Add.
8. Click Close.
9. Click OK to close the Local intranet dialog box.
10. Click OK to close the Internet Options dialog box.
Enabling the Automatic logon only in Intranet zone setting
1. Select Tools→Internet options.
2. Click the Security tab.
282 Kerberos authentication and Directory services