Dell IDRAC6, User Manual

Page: 150 / 472

150
Using iDRAC6 With Microsoft Active Directory
NOTE:
If you are using a standalone CA, the following steps may vary.
1
Locate the domain controller that is running the Microsoft Enterprise
CA service.
2
Click Start
→
Run .
3
In the Run field, enter
mmc
and click OK .
4
In the Console 1 (MMC) window, click File ( or Console on Windows 2000
systems ) and select Add/Remove Snap-in .
5
In the Add/Remove Snap-In window, click Add .
6
In the Standalone Snap-In window, select Certificates and click Add .
7
Select Computer account and click Next .
8
Select Local Computer and click Finish .
9
Click OK .
10
In the Console 1 window, expand the Certificates folder, expand the
Personal folder, and click the Certificates folder.
11
Locate and right-click the root CA certificate, select All Tasks , and click
Export...
12
In the Certificate Export Wizard , click Next , and select No do not export
the private key .
13
Click Next and select Base-64 encoded X.509 (.cer) as the format.
14
Click Next and save the certificate to a directory on your system.
15
Upload the certificate you saved in step 14 to iDRAC6.
To upload the certificate using RACADM, see "Configuring Active
Directory With Standard Schema Using RACADM."
To upload the certificate using the Web interface, see "Configuring Active
Directory With Standard Schema Using iDRAC6 Web Interface."
Importing iDRAC6 Firmware SSL Certificate
NOTE:
If the Active Directory Server is set to authenticate the client during an SSL
session initialization phase, you need to upload iDRAC6 Server certificate to the
Active Directory Domain controller as well. This additional step is not required if the
Active Directory does not perform a client authentication during an SSL session’s
initialization phase.