beautypg.com

Dell KVM 2321DS User Manual

Page 166

background image

150

LDAP Feature for the Remote Console Switch

a

Select Start - Control Panel - Add or Remove Programs.

b

Select Add/Remove Windows Components.

c

In the Windows Components Wizard, select the Certificate Services

check box.

d

Select Enterprise root CA as CA Type and click Next.

e

Enter Common name for this CA, click Next, and click Finish.

2 Enable SSL on each of your domain controllers by installing the SSL

certificate for each controller.

a

Click Start - Administrative Tools - Domain Security Policy.

b

Expand the Public Key Policies folder, right-click Automatic

Certificate Request Settings and click Automatic Certificate

Request.

c

In the Automatic Certificate Request Setup Wizard, click Next and

select

Domain Controller.

3 Click Next and click Finish.

A certificate/private key file can be created using openssl using Linux.

Openssl can be downloaded from openssl.org. Any instructions below with

text in <> is where a user would need to set a value based on the criteria at

the end of that line.
To create a certificate to import:

1 From the Linux command prompt, type openssl and hit Enter. The user

should be at the OpenSSL prompt.
OpenSSL> genrsa -out privatekey.pem <512>
Generating RSA private key, 512 bit long modulus
..........++++++++++++
.....++++++++++++
e is 65537 (0x10001)
OpenSSL> req -new -key privatekey.pem -x509 -out certificate.pem-batch

-days <365>