– Base DN – SSL Certificate The distinguished name to use as a starting point for searching for users on the server  (for example,  dc=ssd,dc=hursley,dc=ibm,dc=com ). The SSL certificate that is used to securely connect to the LDAP server. This certificate  is required only if you chose to use SSL or Transport Layer Security as a security  method earlier. Now that remote authentication is enabled, the remote user groups must be configured. You  can use the default built-in user groups for remote authentication. However, remember that  the name of the default user groups cannot be changed. If the LDAP server already contains a group that you want to use, and you don’t want to  create this group on the storage system, then the name of the group must be changed on the  server side to match the default name. Any user group, whether default or self-defined, must  be enabled for remote authentication before LDAP authentication can be used for that group. Chapter 4. Initial configuration  127 Figure 4-32 Configure remote authentication: Creating an LDAP server 4. Click  Finish  to save the settings.