HP Xw460c HP Integrated Lights-Out 2 User Guide for Firmware 1.75 and 1.77 - Page 149

IMPORTANT: Incorrectly editing the registry can severely damage your system. HP recommends creating a back up of any valued data on the computer before making changes to the registry. a. Start MMC. b. Install the Active Directory Schema snap-in in MMC. c. Right-click Active Directory Schema and select Operations Master. d. Select The Schema may be modified on this Domain Controller. e. Click OK. The Active Directory Schema folder might need to be expanded for the checkbox to be available. 4. Create a certificate or install Certificate Services. This step is necessary to create a certificate or install Certificate Services because iLO 2 communicates with Active Directory using SSL. Active Directory must be installed before installing Certificate Services. 5. To specify that a certificate be issued to the server running active directory: a. Launch Microsoft® Management Console on the server and add the default domain policy snap- in (Group Policy, then browse to Default domain policy object). b. Click Computer Configuration>Windows Settings>Security Settings>Public Key Policies. c. Right-click Automatic Certificate Requests Settings, and select new>automatic certificate request. d. Using the wizard, select the domain controller template, and the certificate authority you want to use. 6. Download the Smart Component, which contains the installers for the schema extender and the snap- ins. The Smart Component can be downloaded from the HP website (http://www.hp.com/servers/lights-out). 7. Run the schema installer application to extend the schema, which extends the directory schema with the proper HP objects. The schema installer associates the Active Directory snap-ins with the new schema. The snap-in installation setup utility is a Windows® MSI setup script and will run anywhere MSI is supported (Windows® XP, Windows® 2000, Windows® 98). However, some parts of the schema extension application require the .NET Framework, which can be downloaded from the Microsoft® website (http://www.microsoft.com). Snap-in installation and initialization for Active Directory 1. Run the snap-in installation application to install the snap-ins. 2. Configure the directory service to have the appropriate objects and relationships for iLO 2 management. a. Use the management snap-ins from HP to create iLO 2, Policy, Admin, and User Role objects. b. Use the management snap-ins from HP to build associations between the iLO 2 object, the policy object, and the role object. c. Point the iLO 2 object to the Admin and User role objects (Admin and User roles will automatically point back to the iLO 2 object). For more information on iLO 2 objects, refer to "Directory services objects (on page 152)." At a minimum, you must create: • One Role object that will contain one or more users and one or more iLO 2 objects. Directory services 149