Using Microsoft Active Directory SSO

The SSO feature enables you to log into the iDRAC6 directly after logging into your workstation without entering your domain user authentication credentials, such as user name and password. To log into the iDRAC6 using this feature, you should have already logged into your system using a valid Active Directory user account. Also, you should have configured the user account to log into the iDRAC6 using the Active Directory credentials. The iDRAC6 uses the cached Active Directory credentials to log you in.

You can enable iDRAC6 to use Kerberos—a network authentication protocol—to enable SSO. For more information, see "About Kerberos Authentication" on page 187. Ensure that you have performed the steps listed in the "Prerequisites for Active Directory SSO and Smart Card Authentication" on page 188 section before configuring iDRAC6 for SSO logon.

Configuring iDRAC6 to Use SSO

Perform the following steps to configure iDRAC6 for SSO using iDRAC Web interface:

1Log in to iDRAC Web interface.

2Go to Remote AccessNetwork/Security tab→ Directory Service tab→ Microsoft Active Directory.

3Click Configure Active Directory. The Active Directory Configuration and Management Step 1 of 4 page is displayed.

4Upload the keytab obtained from the Active Directory root domain,

to the iDRAC6. To do this, under Upload Kerberos Keytab, type the path of the keytab file or click Browse to locate the file. Click Upload. The Kerberos keytab will be uploaded into iDRAC6. The keytab is the same file you created while performing the tasks listed in the "Prerequisites for Active Directory SSO and Smart Card Authentication" on page 188.

5Click Next. The Active Directory Configuration and Management Step 2 of 4 page is displayed.

6Select Enable Single Sign-Onto enable SSO login.

Configuring iDRAC6 for Single Sign-On or Smart Card Login

191

Page 191
Image 191
Dell IDRAC6 manual Using Microsoft Active Directory SSO, Configuring iDRAC6 to Use SSO, 191