Yes, i've typed this in the right way.
And in the trusted-sites-list on the Server, it is also listed.
Now i've detected another effect:
Typing http://<servername>:8080/CmcApp/logon.faces from my Client will start the CMC - typing this on the IE within the Server doesn't start the CMC at all.
And without the ending "logon.faces" it doesn't start neither from my Client nor on the Server directly.
I don't understand the possible differences, because the entry in the "trusted-sites" is correct.
What should i check also?