Hitachi COMPUTE BLADE 500 SERIES Management Module Setup Manual page 116

Group that is allowed to login to the management module and server blade
Server Certificate
Because all communications between the system unit and LDAP servers are
carried out over Secure Socket Layer (SSL) or Transport Layer Security
(TLS), the server certificate must be registered for Active Directory to be
used as an LDAP server.
For details about how to register the server certificate, see the documentation
of your Windows Server.
Tip: There are two types of server certificates. One is self-signed certificate,
and the other one is a certificate certified by an external certificate authority.
You can use either of them for communication between Compute Blade 500
and Active Directory.
Bind DN for the LDAP Server
To search an LDAP directory at user authentication, you must connect to an
LDAP server. There are two methods for connecting to an LDAP server as
below. Perform either of the following methods:
• Connect to an LDAP server by using an LDAP bind DN and the password.
• Connect to an LDAP server as an anonymous user.
Tip: We recommend to use an LDAP bind DN and the password.
Registering a user account to use as a bind DN
Register a user account to use as an LDAP bind DN with your Windows
Server. For details about how to register user accounts, see the
documentation of your Windows Server.
You must grant the access permission for the LDAP directory to use when
authenticating users to the user account to be used as the LDAP bind DN.
Registering a user account as Anonymous
Follow the procedure below to register an anonymous user.
Tip: When registering a user for LDAP connection, skip this procedure.
1 Select Start > Run..., enter mmc and click OK.
.
2-92
Hitachi Compute Blade 500 Series Management Module Setup Guide
Item
Functional detail