Avocent SPC420 manual Integrated Windows Authentication, To display and manage the trust store

Chapter 4: Basic Operations 49

To display and manage the trust store:

1.Click the System tab.

2.Click Global Properties in the top navigation bar.

3.In the side navigation bar, click X.509 Certificates, and then click Trust Store. The System Trust Store window will open, listing all trusted certificate authorities known to the DSView 3 software. By default, the list contains the standard CAs from Java.

4.To view or change information about a certificate, click on its name. The System Trust Store Entry window will open. You may change the CRL Location, which indicates where the CRL should be obtained for that CA. If you change the location, click Save. Then click Close.

5.To delete one or more certificates:

a.Click the checkbox to the left of the certificate name. To delete all certificates on the page, click the checkbox to the left of Name at the top of the list.

b.Click Delete.

c.You are prompted to confirm the deletion. Confirm or cancel the deletion.

6.To add a certificate:

a.Click Add. The New System Trust Store Entry window will open.

b.In the Certificate File field, enter the name of the file containing the X.509 certificate to upload into the trust store. The file may be binary or Base64 encoded.

c.In the CRL Location field, you may enter the location of the CRL for the uploaded certificate (maximum 256 characters). The supported protocols are http://and ldap://.

d.Click Add.

Integrated Windows Authentication

The DSView 3 management software allows DSView 3 software clients to authenticate against Microsoft Windows NT domain and Microsoft Active Directory external authentication servers using Integrated Windows Authentication. This feature allows Single Sign-On (SSO) and is disabled by default. When running Windows Server 2003 or 2008 with Kerberos and NTLM authentication protocols, SSO is supported but it must first be configured in the web browser and AD server; see the documentation included with your browser and AD server or contact an Avocent technical support representative for assistance.

NOTE: When accessing the DSView 3 client using Integrated Windows Authentication, the browser URL must include the DSView 3 intranet name.

To use Integrated Windows Authentication for authentication, a DSView 3 software administrator must first enable it. See Client session information on page 66.