If your company uses the Microsoft Active Directory software, you can configure the software to provide access to iDRAC, allowing you to add and control iDRAC user privileges to your existing users in your directory service. This is a licensed feature.
You can configure user authentication through Active Directory to log in to the iDRAC. You can also provide role-based authorizations, which enables an administrator to configure specific privileges for each user. For full instructions on configuring Active Directory, see iDRAC user guide.
The Certificate Settings page in iDRAC GUI is used to configure the digital certificate that is used during initiation of TLS/SSL connections when communicating with the Active Directory (AD) server; these communications use LDAP over TLS/SSL (LDAPS). When certificate validation is enabled, it is necessary to upload the certificate of the Certificate Authority (CA) that issued the certificate that is used by the AD server during initiation of TLS/SSL connections. The CA's certificate is used to validate the authenticity of the certificate provided by the AD server during TLS/SSL initiation. For more information, see
https://downloads.dell.com/solutions
Certificate Validation
Select
Enabled to validate the SSL certificate of your Active Directory server.
iDRAC always uses LDAP over Secure Socket Layer (SSL) while connecting to Active Directory. By default, iDRAC uses the CA certificate available in iDRAC to validate the SSL server certificate of the domain controllers during SSL handshake and provides security. You can disable the certificate validation for testing purposes, or when you choose to trust the domain controllers in the security boundary without validating their SSL certificates.