Client Login Certificate Configuration Screen Details

Screen component

Description

Certificate owner

Displays options to configure from where in the smart card certificate HPE OneView must extract the user name for querying the enterprise directories to validate the user.

By default, HPE OneView uses the "Subject alternative name" field to retrieve the user name to query the enterprise directory. You can instruct HPE OneView to search attributes within the "Subject attributes" field in the certificate by selecting the "Subject" check box.

Directory domain

Displays options to configure from where in the certificate HPE OneView must extract domain information for the user. HPE OneView uses the extracted domain information when querying the enterprise directory to authenticate the user. Directory domain provides details.

Requirements to validate the certificate Text box to specify the requirements to validate the certificate for key usage and policy identifiers for two-factor login.