Dell IDRAC6, User Manual

Page: 156 / 472

156
Using iDRAC6 With Microsoft Active Directory
I enabled certificate validation but I failed my Active Directory log in. I ran the
diagnostics from the GUI and the test result shows the following error message:
ERROR: Can't contact LDAP server,
error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify failed: Please check the correct
Certificate Authority (CA) certificate has been
uploaded to iDRAC. Please also check if the iDRAC
date is within the valid period of the
certificates and if the Domain Controller Address
configured in iDRAC matches the subject of the
Directory Server Certificate.
What could the problem be and how do I fix it?
If certificate validation is enabled, iDRAC6 uses the uploaded CA certificate
to verify the directory server certificate when iDRAC6 establishes the SSL
connection with the directory server. The most common reasons for failing
certification validation are:
• iDRAC6 date is not within the valid period of the server certificate or
CA certificate. Check iDRAC6 time and the valid period of
your certificate.
• The Domain Controller Addresses configured in iDRAC6 do not match
the Subject or Subject Alternative Name of the directory server certificate.
– If you are using an IP address, see "I am using an IP address for a
Domain Controller Address, and I failed certificate validation. What
is the problem?".
– If you are using FQDN, ensure you are using the FQDN of the domain
controller, and not the domain itself. For example, use
servername.example.com
and not
example.com.
What should I check if I cannot log in to iDRAC6 using Active Directory?
First, diagnose the problem using the Test Settings feature. For directions,
see "My Active Directory log in failed. What do I do?"
Then, fix the specific problem indicated by the test results. For additional
information, see "Testing Your Configurations."