HP Integrity rx2800 HP Integrity iLO 3 Operations Guide - Page 107

Active Directory installation prerequisites, Preparing directory services for Active Directory

Get HP Integrity rx2800 - i2 PDF manuals and user guides View all HP Integrity rx2800 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 107 highlights

The following sections provide installation prerequisites, preparation, and a working example of directory services for Active Directory. Active Directory installation prerequisites The following are prerequisites for installing Active Directory: • The Active Directory must have a digital certificate installed to enable iLO 3 to connect securely over the network. • The Active Directory must have the schema extended to describe iLO 3 object classes and properties. • The MP firmware must be Version F.01.57 or later. Directory services for iLO 3 uses LDAP over SSL to communicate with the directory servers. Before installing snap-ins and schema for Active Directory, read and have available the following documentation: IMPORTANT: To install directory services for iLO 3, an Active Directory schema administrator must extend the schema. • Extending the schema in the Microsoft Windows 2000 Server Resource Kit, available at: http://www.microsoft.com • Installing Active Directory in the Microsoft Windows 2000 Server Resource Kit, available at: http://www.microsoft.com • Microsoft Knowledge Base articles: ◦ 216999 "How to Install the Remote Server Administration Tools in Windows" ◦ 314978 "How to Use Adminpak.msi to Install a Specific Server Administration Tool in Windows 2000" ◦ 247078 "How to Enable SSL Communication over LDAP for Windows 2000 Domain Controllers" ◦ 321051 "How to Enable LDAP over SSL with a Third-Party Certification Authority" ◦ 299687 MS01-036 "Function Exposed by Using LDAP over SSL Could Enable Passwords to Be Changed" Integrity iLO 3 requires a secure connection to communicate with the directory service. This secure connection requires the installation of the Microsoft CA. For more information, see the following Microsoft technical references: • Securing Windows 2000, Appendix D, Configuring Digital Certificates on Domain Controllers for Secure LDAP and SMTP Replication at: http://www.microsoft.com • Microsoft Knowledge Base Article 321051 "How to Enable LDAP over SSL with a Third-Party Certification Authority" Preparing directory services for Active Directory To set up directory services for use with iLO 3: 1. Install Active Directory. For more information, see the resource kit, Installing Active Directory in the Microsoft Windows 2000 Server. 2. Install the Microsoft Admin Pack (the ADMINPAK.MSI file, which is located in the i386 subdirectory of the Windows 2000 Server or Advanced Server CD). For more information, see the Microsoft Knowledge Base Article 216999. 3. In Windows 2000, the safety interlock that prevents accidental writes to the schema must be temporarily disabled. The schema extender utility can do this if the remote registry service is Directory services for Active Directory 107

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
The following sections provide installation prerequisites, preparation, and a working example of
directory services for Active Directory.
Active Directory installation prerequisites
The following are prerequisites for installing Active Directory:
•
The Active Directory must have a digital certificate installed to enable iLO 3 to connect securely
over the network.
•
The Active Directory must have the schema extended to describe iLO 3 object classes and
properties.
•
The MP firmware must be Version F.01.57 or later.
Directory services for iLO 3 uses LDAP over SSL to communicate with the directory servers. Before
installing snap-ins and schema for Active Directory, read and have available the following
documentation:
IMPORTANT:
To install directory services for iLO 3, an Active Directory schema administrator
must extend the schema.
•
Extending the schema in the Microsoft Windows 2000 Server Resource Kit, available at:
h
t
tp://w
w
w
.mi
c
r
o
s
o
f
t
.co
m
•
Installing Active Directory in the Microsoft Windows 2000 Server Resource Kit, available at:
h
t
tp://w
w
w
.mi
c
r
o
s
o
f
t
.co
m
•
Microsoft Knowledge Base articles:
216999 “How to Install the Remote Server Administration Tools in Windows”
◦
◦
314978 “How to Use Adminpak.msi to Install a Specific Server Administration Tool in
Windows 2000”
◦
247078 “How to Enable SSL Communication over LDAP for Windows 2000 Domain
Controllers”
◦
321051 “How to Enable LDAP over SSL with a Third-Party Certification Authority”
◦
299687 MS01-036 “Function Exposed by Using LDAP over SSL Could Enable Passwords
to Be Changed”
Integrity iLO 3 requires a secure connection to communicate with the directory service. This secure
connection requires the installation of the Microsoft CA. For more information, see the following
Microsoft technical references:
•
Securing Windows 2000, Appendix D, Configuring Digital Certificates on Domain Controllers
for Secure LDAP and SMTP Replication at:
h
t
tp://w
w
w
.mi
c
r
o
s
o
f
t
.co
m
•
Microsoft Knowledge Base Article 321051 “How to Enable LDAP over SSL with a Third-Party
Certification Authority”
Preparing directory services for Active Directory
To set up directory services for use with iLO 3:
1.
Install Active Directory. For more information, see the resource kit, Installing Active Directory
in the Microsoft Windows 2000 Server.
2.
Install the Microsoft Admin Pack (the
ADMINPAK.MSI
file, which is located in the i386
subdirectory of the Windows 2000 Server or Advanced Server CD). For more information,
see the Microsoft Knowledge Base Article 216999.
3.
In Windows 2000, the safety interlock that prevents accidental writes to the schema must be
temporarily disabled. The schema extender utility can do this if the remote registry service is
Directory services for Active Directory
107