Raritan dominion kx III Administrator's Manual

Raritan dominion kx III Administrator's Manual

Hide thumbs Also See for dominion kx III:
Table of Contents

Advertisement

Dominion KX III
Administrators Guide
Release 3.2.0
Copyright © 2015 Raritan, Inc.
DKX3A-v3.2.0-0G-E
December 2015
255-62-0002-00

Advertisement

Table of Contents
loading

Summary of Contents for Raritan dominion kx III

  • Page 1 Dominion KX III Administrators Guide Release 3.2.0 Copyright © 2015 Raritan, Inc. DKX3A-v3.2.0-0G-E December 2015 255-62-0002-00...
  • Page 2 Raritan, Inc. © Copyright 2015 Raritan, Inc. All third-party software and hardware mentioned in this document are registered trademarks or trademarks of and are the property of their respective holders.
  • Page 3: Table Of Contents

    Contents Chapter 1 Introduction What's New in Help........................1 Package Contents.......................... 2 KX III Device Photos and Features....................2 Hardware ..........................2 Software..........................3 Dominion KX3-832 ......................4 Dominion KX3-864 ......................6 Supported Number of Ports and Remote Users per Model ..........7 KX III Remote/Local Console Interfaces and User Station............
  • Page 4 Contents KX III Local Console Interface ..................... 29 Chapter 4 KX III Administration Overview ............................30 KX III Installation and Configuration .................... 31 Rack Mounting........................31 Factory Default Login Information ..................32 Step 1: Configuring Network Firewall Settings ..............33 Step 2: Configuring KVM Target Servers ................33 Step 3: Connecting the Equipment..................36 Step 4: Configuring the KX III ....................39 Step 5: Launching the KX III Remote Console..............50...
  • Page 5 Permissions and Dual Video Port Group Access ............243 Example Dual Port Video Group Configuration...............244 Dual Port Video Configuration Steps................245 Raritan Client Navigation when Using Dual Video Port Groups........248 Direct Port Access and Dual Port Video Groups.............249 Dual Port Video Groups Displayed on the Ports Page............249 Updating the LDAP Schema......................249...
  • Page 6 Contents CIMs Required for Virtual Media ..................258 Mounting Local Drives .......................259 Notes on Mounting Local Drives..................259 Supported Tasks Via Virtual Media ...................259 Supported Virtual Media Types ....................260 Conditions when Read/Write is Not Available ..............260 Supported Virtual Media Operating Systems ................260 Number of Supported Virtual Media Drives ................261 Connecting and Disconnecting from Virtual Media..............261 Access a Virtual Media Drive on a Client Computer ............261...
  • Page 7 Contents Optimize for: Selections....................275 Video Mode........................276 Noise Filter........................277 Connection Information......................278 Access and Copy Connection Information ..............278 USB Profiles..........................279 Keyboard............................280 Send Ctrl+Alt+Del Macro....................280 Send LeftAlt+Tab (Switch Between Open Windows on a Target Server).......280 Setting CIM Keyboard/Mouse Options ................280 Send Text to Target......................280 Keyboard Macros ......................281 Build a New Macro ......................281 Import Macros........................282...
  • Page 8 Adjusting Capture and Playback Buffer Size (Audio Settings)........313 Power Control Using VKC, VKCS, and AKC ................314 Version Information - Virtual KVM Client ...................314 Chapter 8 Dominion KX III User Station Overview ............................316 User Station Photo and Features ....................317 Operating the User Station ......................317 Chapter 9 Mobile KVM Client (MKC) Help Remotely Access Targets Using a Mobile Device..............319...
  • Page 9 Contents Discovering Devices on the Local Subnet...............338 Discovering Devices on the KX III Subnet...............339 Chapter 11 KX III Local Console Overview ............................341 Accessing a Target Server ......................341 Local Console Video Resolution Behavior.................342 Simultaneous Users........................342 Local Port Hot Keys and Connect Keys..................342 Return to the Local Console from a Target Device - Default Hot Key......343 Local Port Auto-Sense (Video Refresh) - Default Hot Key..........343 Connect Key Examples ....................343...
  • Page 10 Contents Import KX III Devices into dcTrack ..................368 Clone Existing KX III Devices ..................368 Build Data and Power Circuits for the KX III ................369 Submit an Add Item Request for the KX III................369 Manage the KX III Work Order ....................369 Visualize the KX III in a Cabinet Elevation and on the Floor Map ..........370 Managing the KX III Lifecycle ....................371 Move a KX III ........................371...
  • Page 11 Contents Java Not Loading Properly on Mac .................400 IPv6 Support Notes........................401 Operating System IPv6 Support Notes ................401 AKC Download Server Certification Validation IPv6 Support Notes .......401 Dual Stack Login Performance Issues..................402 CIM Notes ..........................402 Windows 3-Button Mouse on Linux Targets..............402 Windows 2000 Composite USB Device Behavior for Virtual Media........403 Target Video Picture Not Centered (Mouse Out of Synch) ..........404 Virtual Media Notes........................404...
  • Page 12 Contents Appendix F Frequently Asked Questions General FAQs ..........................417 Remote Access..........................419 Universal Virtual Media ......................422 Bandwidth and KVM-over-IP Performance................424 IPv6 Networking.........................428 Servers............................429 Blade Servers ..........................430 Installation..........................432 Local Port - KX IIII........................434 Extended Local Port........................435 Dual Power Supplies........................436 Intelligent Power Distribution Unit (PDU) Control ..............436 Ethernet and IP Networking.......................437 Local Port Consolidation, Tiering and Cascading..............439 Computer Interface Modules (CIMs)..................442...
  • Page 13: Chapter 1 Introduction

    Introduction Chapter 1 The Dominion KX III is an enterprise-class, secure, KVM-over-IP switch that provides 1, 2, 4 or 8 users with remote BIOS-level control of 8 to 64 servers. KX III comes with standard features such as DVI/HDMI/DisplayPort digital and analog video, audio, virtual media, smart card/CAC, blade server support, and mobile access.
  • Page 14: Package Contents

    Chapter 1: Introduction Package Contents Each KX III ships as a fully-configured stand-alone product in a standard 1U (2U for KX3-864) 19" rackmount chassis. Each KX III device ships with the following contents:  1 - KX III device  1 - KX III Quick Setup Guide ...
  • Page 15: Software

    Chapter 1: Introduction  ® ® Remote access and power management from an iPhone or iPad  Support for tiering in which a base KX III device is used to access multiple other tiered devices  Multiple user capacity (1/2/4/8 remote users; 1 local user) ...
  • Page 16: Dominion Kx3-832

    Integration with Raritan's CommandCenter Secure Gateway (CC-SG) management unit  CC Unmanage feature to remove device from CC-SG control  Support of Raritan PX1 and PX2 appliances  Support for remote IP access from the new Dominion KX III User Station Dominion KX3-832 KX3-832 Photos...
  • Page 17 Chapter 1: Introduction KX3-832 Features Diagram key Dual Power AC 100V/240V Dual 10/100/1000 Ethernet access Local USB ports DVI-D port 32 KVM ports for UTP Cabling (Cat5/5e/6) Tier port for tiering devices Modem port for external modems...
  • Page 18: Dominion Kx3-864

    Chapter 1: Introduction Dominion KX3-864 KX3-864 Photos KX3-864 Features Diagram key Dual Power AC 100V/240V Dual 10/100/1000 Ethernet access Local USB ports DVI-D port 64 KVM ports for UTP Cabling (Cat5/5e/6) Tier port for optional tiering devices...
  • Page 19: Supported Number Of Ports And Remote Users Per Model

    Functions" on page 227) and KX III Local Console Interface (on page 29), respectively. The Dominion User Station provides an alternative interface for IP access to the KX III's target servers. See Dominion KX III User Station (on page 315).
  • Page 20: Kx Iii Kvm Client Applications

    KX III. KVM Client help is provided as part of KX III online help. Online help is accompanied by the KX III Quick Setup Guide, which can be found on the Raritan Firmware, Upgrades and Documentation page of Raritan's website (http://www.raritan.com/support/firmware-and-documentation).
  • Page 21: Chapter 2 Get Started Using Kx

    If you have not already done so, install and configure KX III. See the KX III Quick Setup Guide that came with the KX III device or download it from the Raritan Support website http://www.raritan.com/support. Allow Pop-Ups Regardless of the browser you are using, you must allow pop-ups in order to launch the KX III Remote Console.
  • Page 22: Java Validation And Access Warning

    When logging in to KX III, Java 1.7 or 1.8 prompts you to validate KX III, and to allow access to the application. Raritan recommends installing an SSL certificate in each KX III device in order to reduce Java warnings, and enhance security. SSL Certificates...
  • Page 23: Installing A Certificate

    Chapter 2: Get Started Using KX III Installing a Certificate You may be prompted by the browser to accept and validate the KX III's SSL certificate. Depending on your browser and security settings, additional security warnings may be displayed when you log in to KX III. It is necessary to accept these warnings to launch the KX III Remote Console.
  • Page 24 Chapter 2: Get Started Using KX III Note: If you are not prompted by the browser, manually select Tools > Internet Options to open the Internet Options dialog. 1. Click the Content tab. 2. Click Certificates. The Certificate Import Wizard opens and walks you through each step.
  • Page 25: Example 2: Add The Kx Iii To Trusted Sites And Import The Certificate

    Chapter 2: Get Started Using KX III Example 2: Add the KX III to Trusted Sites and Import the Certificate In this example, the KX III's URL is added as a Trusted Site, and the Self Signed Certificate is added as part of the process. 1.
  • Page 26 Chapter 2: Get Started Using KX III Next, import the Certificate. 1. Open an IE browser, then log in to KX III. 2. Click More Information on the first Java ™ security warning. 3. Click View Certificate Details on the More Information dialog. You are prompted to install the certificate.
  • Page 27: Converting A Binary Certificate To A Base64-Encoded Der Certificate (Optional)

    Chapter 2: Get Started Using KX III Converting a Binary Certificate to a Base64-Encoded DER Certificate (Optional) KX III requires an SSL certificate in either Base64-Encoded DER format or PEM format. If you are using an SSL certificate in binary format, you cannot install it. However, you can convert your binary SSL certificate.
  • Page 28 Chapter 2: Get Started Using KX III 3. Click "Copy to File...". 4. The Certificate Export Wizard opens. Click Next to start the Wizard. 5. Select "Base-64 encoded X.509" in the second Wizard dialog. 6. Click Next to save the file as a Base-64 encoded X.509. You can now install the certificate on your KX III.
  • Page 29: Logging In To Kx Iii

    Chapter 2: Get Started Using KX III Logging In to KX III Log in to your KX III Remote Console from any workstation with network ™ connectivity. Java 1.7 is required to use the Java-based Virtual KVM Client (VKC). Java 1.8.0_40 is required to use the VKCS. VKCs requires Java 1.8.0_40 or later.
  • Page 30 Chapter 2: Get Started Using KX III To add the KX III switches and user credentials to the User Station: 1. Power on and log in to the User Station. 2. Click Main Menu > User Station Configuration > 3. Enter and save the following information. ...
  • Page 31: Chapter 3 Kx Iii Interface And Navigation

    Access targets from either the Remote or Local console from one of the supported KVM clients. If you have the Dominion User Station, you can also use it to access targets. See Dominion KX III User Station (on page 315). Alternatively, access targets from your mobile device. See Mobile KVM Client (MKC) Help (on page 319).
  • Page 32: Kx Iii Remote Console Interface

    Chapter 3: KX III Interface and Navigation KX III Remote Console Interface The KX III Remote Console is a browser-based graphical user interface that allows you to log in to KVM target servers and serial targets connected to the KX III and to remotely administer the KX III. The KX III Remote Console provides a digital connection to your connected KVM target servers.
  • Page 33: Port Access Page (Remote Console Display)

    Chapter 3: KX III Interface and Navigation Port Access Page (Remote Console Display) After a successful login, the Port Access page opens listing all ports along with their status and availability. Ports connected to KVM target servers (blades and standard servers) are displayed in blue.
  • Page 34 Chapter 3: KX III Interface and Navigation Blade Chassis - Port Access Page The blade chassis is displayed in an expandable, hierarchical list on the Port Access page, with the blade chassis at the root of the hierarchy and the individual blades labeled and displayed below the root. Use the Expand Arrow icon next to the root chassis to display the individual blades.
  • Page 35 Chapter 3: KX III Interface and Navigation View by Group Tab The View by Group tab displays blade chassis, 'standard' port groups, and dual video port groups. Click the Expand Arrow icon next to a group to view the ports assigned to the port group. View by Search Tab The View by Search tab allows you to search by port name.
  • Page 36: Port Action Menu

    Chapter 3: KX III Interface and Navigation Port Action Menu When you click a Port Name in the Port Access list, the Port Action menu appears. Choose the desired menu option for that port to execute it. Note that only currently available options, depending on the port's status and availability, are listed in the Port Action menu.
  • Page 37 Chapter 3: KX III Interface and Navigation Switch From  Switch From - Switches from an existing connection to the selected port (KVM target server) This menu item is available only for KVM targets, and only when a Virtual KVM Client is opened. Note: This menu item is not available on the KX III Local Console.
  • Page 38 Chapter 3: KX III Interface and Navigation Note: This menu item is not available on the KX III Local Console. The only way to disconnect from the switched target in the Local Console is to use the hot key. Power On ...
  • Page 39: Dkx3-808 Fast Switching

    Chapter 3: KX III Interface and Navigation Power Cycle  Power Cycle - Power cycles the target server through the associated outlets This option is visible only when there are one or more power associations to the target, and when the user has permission to operate this service.
  • Page 40: Left Panel

    Chapter 3: KX III Interface and Navigation Left Panel The left panel of the KX III interface contains the following information. Note that some information is conditional - meaning it is displayed based on your role, features being used and so on. Conditional information is noted here.
  • Page 41: Kx Iii Local Console Interface

    Chapter 3: KX III Interface and Navigation Information Description When displayed? PowerIn1 Status of the power 1 Always outlet connection. Either on or off, or Auto-detect PowerIn2 Status of the power 2 Always outlet connection. Either on or off, or Auto-detect Configured As If you are using a tiering When the KX III is...
  • Page 42: Chapter 4 Kx Iii Administration

    KX III Administration Chapter 4 In This Chapter Overview....................30 KX III Installation and Configuration ............31 Rack PDU (Power Strip) Outlet Control ..........54 USB Profiles ....................56 User Management ...................64 Device Management................90 Security Management................192 Maintenance ..................210 Diagnostics ....................222 KX III Local Console - Administration Functions ........227 Command Line Interface (CLI) ..............232 Dual Video Port Groups.................240 Updating the LDAP Schema..............249...
  • Page 43: Kx Iii Installation And Configuration

    KX III Installation and Configuration See the KX III Quick Setup Guide that came with your device or download it from Raritan's Support website for a quick reference to the basic, bear minimum setup steps. Additional information and optional steps included here but not in the QSG include: ...
  • Page 44: Factory Default Login Information

    Chapter 4: KX III Administration Rear Mount The steps correspond to the numbers shown in the rear rackmount diagrams. 1. Secure the cable-support bar to the front end of the side brackets, near the side brackets' “ears,” using two of the included screws. 2.
  • Page 45: Step 1: Configuring Network Firewall Settings

    Chapter 4: KX III Administration  Password = raritan All lowercase.  IP address = 192.168.0.192 Important: For backup and business continuity purposes, it is strongly recommended you create a backup administrator username and password, and keep that information in a secure location.
  • Page 46 Chapter 4: KX III Administration Mouse Settings Raritan recommends using Absolute Mouse Synchronization to minimize mouse settings on target servers. Additional Supported Mouse Settings (on page 34). In this mode, absolute coordinates are used to keep the client and target cursors in synch, even when the target mouse is set to a different acceleration or speed.
  • Page 47 If you do not set this profile, the mouse does synch in OS X. To do this, do one of the following: 1. Connect to the Mac target from the Raritan KVM Client. 2. Select USB Profile > Other Profiles > Mac OS-X (10.4.9 and later).
  • Page 48: Step 3: Connecting The Equipment

    Chapter 4: KX III Administration 5. Select 'Mac OS-X (10.4.9) and later' from the Available box, then click Add to add it to the Selected box. 6. Click on 'Mac OS-X (10.4.9) and later' in the Selected box. This automatically adds it to the Preferred Profile drop-down. 7.
  • Page 49 Chapter 4: KX III Administration A: AC Power 1. Use the power cords that came with KX III. Use both cords with AC power outlets for dual-power failover protection. Optional For details on enabling power supply autodetection from the Remote Console, see Specify Power Supply Autodetection in online help.
  • Page 50 A single link DVI cable is used to connect to a local DVI monitor or keyboard tray (not included with the KX III). Connect to the DVI port on Raritan's T1700-LED or T1900-LED keyboard tray. Use a required DVI-D to VGA converter to connect to VGA monitors.
  • Page 51: Step 4: Configuring The Kx Iii

    VGA monitor and secure it by tightening the screws. Note: The DVI-D to VGA converter is not included with the KX III. Contact Raritan Sales for information. E. Connect Target Servers to KX III 1. Connect the keyboard, mouse and video plugs on the CIM to the corresponding ports on the target server.
  • Page 52 Chapter 4: KX III Administration 3. Enter the old password raritan, then enter and reenter a new password. 4. Passwords can be up to 64 characters in length consisting of English alphanumeric characters and special characters. 5. Click Apply. 6. Click OK on the Confirmation page.
  • Page 53 Chapter 4: KX III Administration 5. Enter the IPv4 IP Address, if needed. The default IP address is 192.168.0.192. 6. Enter the IPv4 Subnet Mask. The default subnet mask is 255.255.255.0. 7. The LAN1 settings are applied to LAN2 if failover occurs. 8.
  • Page 54 Chapter 4: KX III Administration  Global/Unique IP Address - this is the IP address assigned to KX III.  Prefix Length - this is the number of bits used in the IPv6 address.  Gateway IP Address. Select Router Discovery to locate a Global or Unique IPv6 address instead of a Link-Local subnet.
  • Page 55 Chapter 4: KX III Administration 2. Set the IP Auto Configuration to None in the IPv4 section. 3. Ensure the "Enable Automatic Failover" checkbox is not selected. 4. If needed, manually specify the network parameters by entering the Default Gateway and then complete the steps that follow. Alternatively, if you do not want to set a static IP, see Disable or Enable DHCP in KX III.
  • Page 56 Chapter 4: KX III Administration 9. Enter the LAN2 IPv4 Default Gateway and Subnet Mask. 10. Complete the IPv6 sections, if applicable. 11. Select the IP Auto Configuration. If None is selected, you must manually specify -  Global/Unique IP Address - this is the IP address assigned to KX III.
  • Page 57 Chapter 4: KX III Administration 12. Select "Use the Following DNS Server Addresses" and enter the Primary DNS Server IP Address and Secondary DNS Server IP Address. The secondary addresse is used if the primary DNS server connection is lost due to an outage. Note: "Obtain DNS Server Address Automatically"...
  • Page 58 Chapter 4: KX III Administration Specify Power Supply Autodetection KX III provides dual power supplies. When both power supplies are used, KX III automatically detects them and notifies you of their status. Additionally, both the Powerln1 and Powerln2 Auto Detect checkboxes are automatically selected on the Power Supply Setup page.
  • Page 59 Chapter 4: KX III Administration  Select the Powerln2 Auto Detect option if you are plugging power input into power supply number two. (The right-most power supply at the back of the device when you are facing rear of the device.) Click OK.
  • Page 60 Chapter 4: KX III Administration Configure Date/Time Settings The date and time settings impact SSL certificate validation if LDAPS is enabled. Configuring the date and time also ensures your audit logs will be timestamped correctly. There are two ways to do this: ...
  • Page 61 For additional information about CC-SG authentication, see the CommandCenter Secure Gateway User Guide, Administrator Guide, or Deployment Guide, which can be downloaded from the Support section of the Raritan website http://www.raritan.com. Supported Protocols To simplify management of usernames and passwords, the KX III provides the ability to forward authentication requests to an external authentication server.
  • Page 62: Step 5: Launching The Kx Iii Remote Console

    3. You are always redirected to the IP address from HTTP to HTTPS. 4. Enter your username and password. Click Login. Tip: If you have a Dominion KX III User Station, you can use it to remotely access the KX III target servers. See...
  • Page 63 Chapter 4: KX III Administration Access and Control Target Servers Remotely The KX III Port Access page provides a list of all KX III ports. The page also lists all of the target servers connected to the KX III along with their status and availability.
  • Page 64: Step 6: Configuring The Keyboard Language (Optional)

    Chapter 4: KX III Administration DKX3-808 Fast Switching DKX3-808 maintains the video connections to the servers, enabling faster connections to servers and faster switching between channels. Some Video Settings do not apply to DKX3-808 targets:  Automatic Color Calibration  Video Sensing: Best possible video mode/Quick sense video mode Disconnect from a Target Server To disconnect a target:...
  • Page 65: Step 7: Create And Install An Ssl Certificate

    The DCIM-SUSB performs a reset (power cycle). Verify that the characters are correct. Step 7: Create and Install an SSL Certificate Raritan strongly recommends you install your own SSL Certificate in each KX III device. ™ This security best practice reduces the number of Java warning messages, and avoids man-in-the-middle attacks.
  • Page 66: Rack Pdu (Power Strip) Outlet Control

    Rack PDU (Power Strip) Outlet Control Overview You can control Raritan PX and RPC series rack PDU (power strip) outlets connected to the KX III through a D2CIM-PWR. Once connected to the KX III, the rack PDU and its outlets are controlled from the Powerstrip page, which is accessed by clicking on the Power menu at the top of the page.
  • Page 67: Turning Outlets On/Off And Cycling Power

    Chapter 4: KX III Administration  Association - The ports associated with the outlet If you have privileges, you can also control power from AKC, VKC, VKCs, and the Admin client. See Remote Power Management via Virtual KVM Client (VKC) or Active KVM Client (AKC) (see "Power Control Using VKC, VKCS, and...
  • Page 68: Usb Profiles

    To change settings in the BIOS menu or boot from a virtual media drive, depending on the target server model, a BIOS profile may be more appropriate. Should none of the standard USB profiles provided by Raritan work with a given KVM target, please contact Raritan Technical Support for assistance.
  • Page 69: Cim Compatibility

    The current release of the KX III comes with the selection of USB profiles described in the following table. New profiles are included with each firmware upgrade provided by Raritan. As new profiles are added, they will be documented in the help.
  • Page 70 Chapter 4: KX III Administration USB profile Description BIOS Dell Optiplex 790 Use this profile for Dell Optiplex 790 when using Keyboard Keyboard Only Macros during BIOS operations. Only keyboard is enabled with this profile. Restrictions:  Mouse is disabled. ...
  • Page 71 Chapter 4: KX III Administration USB profile Description BIOS Generic BIOS Generic Use this profile when Generic OS profile does not work on the BIOS. WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected. Restrictions:  USB bus speed limited to full-speed (12 MBit/s) ...
  • Page 72 Chapter 4: KX III Administration USB profile Description BIOS Lenovo ThinkPad T61 BIOS Lenovo ThinkPad T61 and X61 (boot from virtual media) & X61 Use this profile to boot the T61 and X61 series laptops from virtual media. Restrictions:  USB bus speed limited to full-speed (12 MBit/s) Generic The generic USB profile resembles the behavior of the original ®...
  • Page 73 Chapter 4: KX III Administration USB profile Description when using the Mac Boot Menu MAC OS X ® 10.4.9 (and later) Mac OS X version 10.4.9 (and later) This profile compensates the scaling of mouse coordinates introduced in recent versions of Mac OS X. Select this if the remote and local mouse positions get out of sync near the desktop borders.
  • Page 74 Chapter 4: KX III Administration USB profile Description  Keyboard and Mouse (Type 2) first  Mass Storage  USB bus speed limited to full-speed (12 MBit/s)  Virtual CD-ROM and disk drives cannot be used simultaneously WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected.
  • Page 75: Selecting Profiles For A Kvm Port

    Chapter 4: KX III Administration Mouse Modes when Using the Mac Boot Menu When working with the "BIOS Mac" USB profile, to use the mouse in the Mac Boot Menu, you must use Single Mouse mode since Absolute Mouse Mode is not supported in the BIOS. To configure the mouse to work at the Boot menu: 1.
  • Page 76: User Management

    Chapter 4: KX III Administration User Management User Groups The KX III stores an internal list of all user profiles and user groups to determine access authorization and permissions. This information is stored internally in an encrypted format. All users must be authenticated to access KX III. KX III can be configured to authenticate users locally and/or remotely using LDAP/LDAPS or RADIUS.
  • Page 77 Chapter 4: KX III Administration User Group List User groups are used with local and remote authentication (via RADIUS or LDAP/LDAPS). It is a good idea to define user groups before creating individual users since, when you add a user, you must assign that user to an existing user group.
  • Page 78 Chapter 4: KX III Administration 2. Type a descriptive name for the new user group into the Group Name field (up to 64 characters). 3. Select the checkboxes next to the permissions you want to assign to all of the users belonging to this group. See Setting Permissions (on page 66) 4.
  • Page 79 Chapter 4: KX III Administration their own. Carefully consider granting these permissions. Permission Description Device Access Allows users and user groups with this While Under permission to directly access the KX III. The KX CC-SG III is accessed using an IP address when Local Management Access is enabled for the device in CC-SG.
  • Page 80 Chapter 4: KX III Administration Permission Description consistent across all devices. Setting Port Permissions For each server port, you can specify the access type the group has, as well as the type of port access to the virtual media and the power control. Please note that the default setting for all permissions is Deny.
  • Page 81 Chapter 4: KX III Administration VM access Power control access option Description Deny Deny power control to the target server Access Full permission to power control on a target server For blade chassis, the port access permission will control access to the URLs that have been configured for that blade chassis.
  • Page 82 Chapter 4: KX III Administration Use the IP ACL section of the Group page to add, insert, replace, and delete IP access control rules on a group-level basis. To add (append) rules: 1. Type the starting IP address in the Starting IP field. 2.
  • Page 83 Chapter 4: KX III Administration 2. Click Delete. 3. When prompted to confirm the deletion, click OK. Important: ACL rules are evaluated in the order in which they are listed. For instance, in the example shown here, if the two ACL rules were reversed, Dominion would accept no communication at all.
  • Page 84: Users

    Chapter 4: KX III Administration 2. Click Delete. 3. When prompted to confirm the deletion, click OK. Users Users must be granted user names and passwords to gain access to the KX III. This information is used to authenticate users attempting to access your KX III.
  • Page 85 Chapter 4: KX III Administration 6. To activate the new user, leave the Active checkbox selected. Click View the KX III Users List The User List page displays a list of all users including their user name, full name, and user group. The list can be sorted on any of the columns by clicking on the column name.
  • Page 86 Chapter 4: KX III Administration  Username - username for user logins and target connections  Access From - IP address of client PC accessing the KX III  Status - current Active or Inactive status of the connection To view users by port: ...
  • Page 87 Chapter 4: KX III Administration Logging Users Off the KX III (Force Logoff) If you are an administrator, you are able to log off any authenticated user who is logged on to the KX III. Users can also be disconnected at the port level.
  • Page 88: Authentication Settings

    Chapter 4: KX III Administration Authentication Settings Authentication is the process of verifying that a user is who he says he is. Once a user is authenticated, the user's group is used to determine his system and port permissions. The user's assigned privileges determine what type of access is allowed.
  • Page 89 Chapter 4: KX III Administration Implementing LDAP/LDAPS Remote Authentication Lightweight Directory Access Protocol (LDAP/LDAPS) is a networking protocol for querying and modifying directory services running over TCP/IP. A client starts an LDAP session by connecting to an LDAP/LDAPS server (the default TCP port is 389). The client then sends operation requests to the server, and the server sends responses in turn.
  • Page 90 LDAP database you want to begin searching for user information. Up to 64 characters can be used. An example base search value might be: cn=Users,dc=raritan,dc=com. Consult your authentication server administrator for the appropriate values to enter into these fields.
  • Page 91 Chapter 4: KX III Administration 11. If you entered a Distinguished Name for the Administrative User, you must enter the password that will be used to authenticate the Administrative User's DN against the remote authentication server. Enter the password in the Secret Phrase field and again in the Confirm Secret Phrase field (up to 128 characters).
  • Page 92 Chapter 4: KX III Administration 15. Select the Enable LDAPS Server Certificate Validation checkbox to use the previously uploaded root CA certificate file to validate the certificate provided by the server. If you do not want to use the previously uploaded root CA certificate file, leave this checkbox deselected.
  • Page 93 KX III policies and user group privileges that are applied locally to AD user groups. IMPORTANT: If you are an existing Raritan, Inc. customer, and have already configured the Active Directory server by changing the AD...
  • Page 94 Chapter 4: KX III Administration 4. From the KX III, enable and configure your AD server properly. See Implementing LDAP/LDAPS Remote Authentication (on page 77). Important Notes  Group Name is case sensitive.  The KX III provides the following default groups that cannot be changed or deleted: Admin and <Unknown>.
  • Page 95 Chapter 4: KX III Administration 8. The Timeout is recorded in seconds and default timeout is 1 second, but can be changed as required. The timeout is the length of time the KX III waits for a response from the RADIUS server before sending another authentication request. 9.
  • Page 96 Chapter 4: KX III Administration  CHAP - With CHAP, authentication can be requested by the server at any time. CHAP provides more security than PAP.
  • Page 97  RADIUS Attribute: Filter-ID  Attribute Type: String  Attribute Value: Raritan:G{KVM_Admin} (where KVM_Admin is group name created locally on Dominion KVM Switch). Case sensitive.  Configure Session Conditions (Date and Time) (Required) - Policy Elements > Session Conditions > Date and Time ...
  • Page 98 Your remote RADIUS server can provide these user group names by returning an attribute, implemented as a RADIUS FILTER-ID. The FILTER-ID should be formatted as follows: Raritan:G{GROUP_NAME} where GROUP_NAME is a string denoting the name of the group to which the user belongs.
  • Page 99 Chapter 4: KX III Administration Attribute Data Log out Accounting-Request(4) Acct-Status (40) Stop(2) - Stops the accounting NAS-Port-Type (61) VIRTUAL (5) for network connections. NAS-Port (5) Always 0. NAS-IP-Address (4) The IP address for the KX III. User-Name (1) The user name entered at the login screen. Acct-Session-ID (44) Session ID for accounting.
  • Page 100 Chapter 4: KX III Administration User Authentication Process Remote authentication follows the process specified in the flowchart below:...
  • Page 101: Changing A Password

    Chapter 4: KX III Administration Changing a Password To change your KX III password: 1. Choose User Management > Change Password. The Change Password page opens. 2. Type your current password in the Old Password field. 3. Type a new password in the New Password field. Retype the new password in the Confirm New Password field.
  • Page 102: Device Management

    Chapter 4: KX III Administration Device Management Network Settings Choose Failover or Isolation Mode Configure KX III for Dual LAN Failover Mode (on page 40) Configure KX III for Dual LAN Isolation Mode (on page 42) Configure KX III for Dual LAN Failover Mode LAN1 and LAN2 share the same IP address to support automatic failover.
  • Page 103 Chapter 4: KX III Administration 7. The LAN1 settings are applied to LAN2 if failover occurs. 8. Complete the IPv6 sections, if applicable. 9. Select the IP Auto Configuration. If None is selected, you must manually specify -  Global/Unique IP Address - this is the IP address assigned to KX III.
  • Page 104 Chapter 4: KX III Administration  Link-Local IP Address - this address is automatically assigned to the device. It is used for neighbor discovery or when no routers are present.  Zone ID - Identifies the device the address is associated with. Read-Only 10.
  • Page 105 Chapter 4: KX III Administration 3. Ensure the "Enable Automatic Failover" checkbox is not selected. 4. If needed, manually specify the network parameters by entering the Default Gateway and then complete the steps that follow. Alternatively, if you do not want to set a static IP, see Disable or Enable DHCP in KX III.
  • Page 106 Chapter 4: KX III Administration 9. Enter the LAN2 IPv4 Default Gateway and Subnet Mask. 10. Complete the IPv6 sections, if applicable. 11. Select the IP Auto Configuration. If None is selected, you must manually specify -  Global/Unique IP Address - this is the IP address assigned to KX III.
  • Page 107 Chapter 4: KX III Administration 12. Select "Use the Following DNS Server Addresses" and enter the Primary DNS Server IP Address and Secondary DNS Server IP Address. The secondary addresse is used if the primary DNS server connection is lost due to an outage. Note: "Obtain DNS Server Address Automatically"...
  • Page 108 Chapter 4: KX III Administration  "Use the Following DNS Server Addresses" a. Select "Obtain DNS Server Address Automatically" if DHCP is selected. The DNS information is then provided by the DHCP server that is used. When finished, click OK. Your KX III device is now network accessible.
  • Page 109: View And Edit Lan Interface Settings

    Chapter 4: KX III Administration View and Edit LAN Interface Settings Choose Device Settings > Network to open the Network Settings page. The LAN Interface Settings are in the right column. The current LAN and LAN2 parameter settings are identified.
  • Page 110 (on page 40). Note: Because a failover port is not activated until after a failover has actually occurred, Raritan recommends that you do not monitor the port or only monitor the port after a failover occurs. Click OK to apply the setting.
  • Page 111: Reset Network Settings To Factory Defaults

    Chapter 4: KX III Administration Change the Bandwidth Limit, if needed. The default is No Limit. This sets the maximum amount of bandwidth that can be consumed by the KX III device (for all sessions). Note: Lower bandwidth may result in slower performance. Click OK to apply the setting.
  • Page 112: Configuring Ports

    Chapter 4: KX III Administration 2. Click "Reset to Defaults" at the bottom of the page. Configuring Ports Access the Port Configuration Page To access a port configuration: 1. Choose Device Settings > Port Configuration. The Port Configuration Page opens. This page is initially displayed in port number order, but can be sorted on any of the fields by clicking on the column heading.
  • Page 113 Chapter 4: KX III Administration  For rack PDUs, the Port page for rack PDUs (power strips) is opened. From this page, you can name the rack PDUs and their outlets. Port Configuration Page The Port Configuration page displays a list of the KX III ports. When a port's status is down, Not Available is displayed as its status.
  • Page 114 Chapter 4: KX III Administration Port Name If a KX III port has no CIM connected or is connected to a CIM with no name, a default port name of Dominion_KX3_Port# is assigned to the port. Dominion_KX3 is the device model and Port# is the number of the KX III physical port.
  • Page 115 Chapter 4: KX III Administration Port Type Port type includes:  DCIM - Dominion CIM  TierDevice - Tiered device  Not Available - No CIM connected  DVM-DP - Display Port CIM  DVM-HDMI - HDMI CIM  DVM-DVI - DVI CIM ...
  • Page 116 Chapter 4: KX III Administration 6. Click OK. Configuring KVM Switches The KX III also supports use of hot key sequences to switch between targets on a KVM switch. KVM switching is supported by blade chassis and in tiered configurations. Important: For user groups to see the KVM switch that you create, you must first create the switch and then create the group.
  • Page 117 Chapter 4: KX III Administration 7. In the KVM Switch Name field, enter the name you want to use to refer to this port connection. 8. Activate the targets that the KVM switch hot key sequence will be applied to. Indicate that the KVM switch ports have targets attached by selecting ‘Active’...
  • Page 118 URL. For example username=admin, where username is the username field. Password Field - Enter the password parameter that will be used in the URL. For example password=raritan, where password is the password field. 10. Click OK. To change the active status/deactivate a KVM switch port or URL: 1.
  • Page 119 Chapter 4: KX III Administration 3. Next -  Configure the CIM Settings (on page 107)  Configure the CIM Power Associations (on page 107)  Configure the CIM Target Settings (on page 107)  Apply Selected Profiles to Other CIMs (on page 108) ...
  • Page 120 Chapter 4: KX III Administration 3. For digital CIMs, to set the target's video resolution to match your monitor's native display resolution, select the resolution from the Display Native Resolution drop-down. For a complete list of supported video resolutions from the remote console, see KX III Supported Local Port DVI Resolutions page 378)
  • Page 121 KX III allows you to connect rack PDUs (power strips) to KX III ports. KX III rack PDU configuration is done from the KX III Port Configuration page. Note: Raritan recommends no more than eight (8) rack PDUs (power strips) be connected to a KX III at once since performance may be affected.
  • Page 122 Chapter 4: KX III Administration 5. Power on the device. Diagram key PX rack PDU with serial port D2CIM-PWR KX III D2CIM-PWR to rack PDU serial port connection D2CIM-PWR to KX III target device port via Cat5 cable...
  • Page 123 Note: PX rack PDUs (power strips) can be named in the PX as well as in the KX III. Once a Raritan remote rack PDU is connected to the KX III, it will appear on the Port Configuration page. Click on the power port name on that page to access it.
  • Page 124 Chapter 4: KX III Administration 3. Click OK.
  • Page 125 Port Access page. To use this feature, you will need:  Raritan remote rack PDU(s)  Power CIMs (D2CIM-PWR) Make a Power Association...
  • Page 126 Chapter 4: KX III Administration 4. Click OK. That rack PDU/outlet association is removed and a confirmation message is displayed. To remove a rack PDU association if the rack PDU has been removed from the target: 1. Click Device Settings > Port Configuration and then click on the active target.
  • Page 127 Chapter 4: KX III Administration 3. On the Port Configuration page, click on the name of the blade chassis you want to configure. The Port page will open. 4. Select the Blade Chassis radio button. The page will then display the necessary fields to configure a blade chassis.
  • Page 128 Chapter 4: KX III Administration  Username - Not applicable.  Password - Not applicable.  Port Number - The default port number for the blade chassis is 22. Not applicable. 7. Change the blade chassis name, if needed. 8. Check the Installed checkbox next to each slot that has a blade installed.
  • Page 129 Chapter 4: KX III Administration  URL - Enter the URL to the interface. Required  Username - Enter the username used to access the interface. Optional  Password - Enter the password used to access the interface. Optional Note: Leave the username and password fields blank for DRAC, ILO, and RSA web applications or the connection will fail.
  • Page 130 Chapter 4: KX III Administration  Tips for Adding a Web Browser Interface (on page 132) for tips on adding a web browser interface. 10. In the Target Settings section, select "640x480 or 720x400 Compensation" if you are experiencing display issues when the target is using this resolution.
  • Page 131 Chapter 4: KX III Administration 14. Select 'Use international keyboard for scan code set 3' if connecting to the target with a DCIM-PS2 and require the use of scan code set 3 with an international keyboard. 15. Click OK to save the configuration. Blade Chassis Configuration Options ®...
  • Page 132 Chapter 4: KX III Administration Manual and Auto-Discovery Blade Chassis Configuration Two modes of operation are provided for blade chassis: manual configuration and auto-discovery, depending on the blade chassis capabilities. Configure the mode by selecting Device Services > Port Configuration to open the Port page.
  • Page 133 Chapter 4: KX III Administration Hot Key Sequences to Access Blade Chassis The use of hot key sequences to switch KVM access to a blade chassis is supported. For blade chassis that allow users to select a hot key sequence, those options will be provided on the Port Configuration page.
  • Page 134 Chapter 4: KX III Administration Link to a Blade Chassis Interface - Blade Chassis Managed Links You are able to configure the connection to a blade chassis web browser interface if one is available. Configure links when adding a blade by selecting Device Services > Port Configuration, and entering the link information in the Blade Chassis Managed Links section of the page.
  • Page 135 Chapter 4: KX III Administration Managing Blade Chassis Blade chassis can be managed from the Virtual KVM Client (VKC), Active KVM Client (AKC), and CC-SG. Managing blade severs via VKC and AKC is the same as managing standard target servers. Virtual KVM Client (VKC) Help (see "Virtual KVM Client (VKC...
  • Page 136 Chapter 4: KX III Administration To configure a Dell PowerEdge M1000e: ™ 1. If you selected Dell PowerEdge M1000e, auto-discovery is available. Configure the blade chassis as applicable. Prior to configuring a blade chassis that can be auto-discovered, it must be configured to enable SSH connections on the designated port number (see Device Services...
  • Page 137 Chapter 4: KX III Administration Click the Blade Chassis Managed Links icon to expand the section on the page. The first URL link is intended for use to connect to the blade chassis Administration Module GUI. Note: Access to the URL links entered in this section of the page is governed by the blade chassis port permissions.
  • Page 138 Chapter 4: KX III Administration 10. Select the CIMs native, display resolution from the Display Native Resolution drop-down. This is the preferred resolution and timing mode of the digital CIM. Once a resolution is selected, it is applied to the CIM. If no selection is made, the default 1024x1280@60Hz resolution is used.
  • Page 139 Chapter 4: KX III Administration a. Active - To activate the link once it is configured, select the Active checkbox. Leave the checkbox deselected to keep the link inactive. Entering information into the link fields and saving can still be done even if Active is not selected. Once Active is selected, the URL field is required.
  • Page 140 Chapter 4: KX III Administration 3. On the Port Configuration page, click on the name of the blade chassis you want to configure. The Port page will open. 4. Select the Blade Chassis radio button. The page will then display the necessary fields to configure a blade chassis.
  • Page 141 Chapter 4: KX III Administration 5. In the Blade Chassis Managed Links section of the page, you are able to configure the connection to a blade chassis web browser interface if one is available. Click the Blade Chassis Managed Links icon to expand the section on the page.
  • Page 142 Chapter 4: KX III Administration 6. If applicable, define the USB profile for the blade chassis or select an existing USB profile. Click the USB Profiles Select USB Profiles for Port icon or the Apply Select Profiles to Other Ports icon expand these sections of the page.
  • Page 143 Chapter 4: KX III Administration a. Active - To activate the link once it is configured, select the Active checkbox. Leave the checkbox deselected to keep the link inactive. Entering information into the link fields and saving can still be done even if Active is not selected. Once Active is selected, the URL field is required.
  • Page 144 Chapter 4: KX III Administration Tips for Adding a Web Browser Interface You can add a Web Browser Interface to create a connection to a device with an embedded web server. A Web Browser interface can also be used to connect to any web application, such as the web application associated with an RSA, DRAC or ILO Processor card.
  • Page 145 Chapter 4: KX III Administration HP and Cisco UCS Blade Chassis Configuration (Port Group Management) The KX III supports the aggregation of ports connected to certain types of blades into a group representing the blade chassis. Specifically, ® ® ® ™...
  • Page 146 Chapter 4: KX III Administration 4. Select the Blade Server Group checkbox. If you want to designate that these ports are attached to blades housed in a blade chassis (for example, HP c3000 or Dell PowerEdge 1855), select the Blade Server Group checkbox. Note: This is especially important to CC-SG users who want HP blades to be organized on a chassis basis, although each blade has its own connection to a port on the KX III.
  • Page 147 Chapter 4: KX III Administration Supported Blade Chassis Models This table contains the blade chassis models that are supported by the KX III and the corresponding profiles that should be selected per chassis model when configuring them in the KX III application. A list of these models can be selected on the Port Configuration page from the Blade Server Chassis Model drop-down, which appears when the Blade Chassis radio button is selected.
  • Page 148 Chapter 4: KX III Administration Blade chassis Connection method Recommended CIM(s)  DCIM-PS2 Generic If a D2CIM-VUSB or D2CIM-DVUSB is used when connecting to a blade-chassis configured  DCIM-USBG2 as Generic, you will be able to select the USB profiles from the Port Configuration page and the client's USB Profile menu.
  • Page 149 Chapter 4: KX III Administration Blade chassis Connection method Recommended CIM(s)  VGA monitors with DDC support. Source: Dell Chassis Management Controller, Firmware Version 1.0, User Guide  ® BladeSystem The HP c-Class Blade SUV Cable enables you DCIM-USBG2 c3000 to perform blade chassis administration, ...
  • Page 150 Note: Audio is disabled for all KVM switch targets. Required and Recommended Blade Chassis Configurations This table contains information on limitations and constraints that apply to configuring blade chassis to work with the KX III. Raritan recommends that all of the information below is followed. Blade chassis Required/recommended action ...
  • Page 151  Exit the iKVM GUI menu before attaching Dell's chassis to a Raritan CIM. iKVM may not work correctly if this is not done.  Configure the iKVM GUI Main menu to select target blades by Slot, not by Name. iKVM may not work correctly if this is not done.
  • Page 152  The SSH port configured on the blade chassis management module and the port number entered on the Port Configuration page must match.  Raritan KX III virtual media is supported only on IBM IBM KX3 Virtual ® BladeCenter Models H and E.
  • Page 153 Chapter 4: KX III Administration Blade chassis Sample URL format  Password: calvin  Password Field: TEXT_PASSWORD  ® http://192.168.84.217/private/welcome.ssi ® BladeCenter or H Configuring USB Profiles (Port Page) You choose the available USB profiles for a port in the Select USB Profiles for Port section of the Port page.
  • Page 154 Chapter 4: KX III Administration  Ctrl-Click to select several discontinuous profiles. 2. Click Add. The selected profiles appear in the Selected list. These are the profiles that can be used for the KVM target server connected to the port. To specify a preferred USB profile: 1.
  • Page 155 Chapter 4: KX III Administration Configuring KX III Local Port Settings Note: Some changes you make to the settings on the Local Port Settings page restart the browser you are working in. If a browser restart occurs when a setting is changed, it is noted in the steps provided here. To configure the local port settings: ...
  • Page 156 Chapter 4: KX III Administration Configure the Local Port Scan Mode Settings 1. If needed, configure the Local Port Scan Mode settings. These settings apply to Scan Settings feature, which is accessed from the Port page.  In the "Display Interval (10-255 sec):" field, specify the number of seconds you want the target that is in focus to display in the center of the Port Scan window.
  • Page 157 Local language input is not supported at this time for KX III Local Console functions. Note: If using a Turkish keyboard, you must connect to a target server through the Active KVM Client (AKC). It is not supported by other Raritan clients. Select the Local Port Hotkey 1.
  • Page 158 Chapter 4: KX III Administration Select the Local Port Connect Key Select the Local Port Connect key. Use a connect key sequence to connect to a target and switch to another target without returning to the GUI. Then use the hot key to disconnect and return to the local port GUI Once the local port connect key is created, it will appear in the Navigation panel of the GUI so you can use it as a reference.
  • Page 159: Device Services

    Chapter 4: KX III Administration b. Set the amount of time (in minutes) in which Power Save Mode will be initiated. Select the Local User Authentication 1. Choose the type of local user authentication.  Local/LDAP/RADIUS. This is the recommended option. ...
  • Page 160 Chapter 4: KX III Administration 3. Enter the SSH Port information. The standard SSH TCP port number is 22 but the port number can be changed to provide a higher level of security operations. 4. Click OK. HTTP and HTTPS Port Settings You are able to configure HTTP and/or HTTPS ports used by the KX III.
  • Page 161 Chapter 4: KX III Administration Configuring and Enabling Tiering The tiering feature allows you to access KX III targets and PDUs through one base KX III device. Devices can be added and removed from a tiering configuration as needed up to a maximum of two tiered levels. When setting up the devices, you will use specific CIMS for specific configurations.
  • Page 162 Chapter 4: KX III Administration Unsupported and Limited Features on Tiered Targets The following features are not supported on tiered targets:  Blade chassis on tiered devices  Audio on tiered devices  Smart cards on tiered devices  Virtual media tiered devices ...
  • Page 163 Chapter 4: KX III Administration Steps KX III Base device KX III Tiered device CIM to connect the target server to KX III the Tiered device. Target server Base device Tier port to Tiered device Tier port connection:  Connect one end of a Cat5/5e/6 cable into a target server port on the KX III Base device.
  • Page 164 Chapter 4: KX III Administration In the Tier Secret field, enter the same secret word you entered for the base device on the Device Settings page. Click OK. Once devices are enabled and configured, they appear on the Port Access page. When the KX III is configured to function as a base device or tiered device, they will be displayed as: ...
  • Page 165 Chapter 4: KX III Administration Power Control from Tiered Devices You can power on and off targets that are a part of the tiered configuration. These targets are accessed from the Port Access page. If targets and outlets are associated, power control is available from the Port Access page.
  • Page 166 Chapter 4: KX III Administration Username and password are optional. If username and password are not provided, a login dialog will be displayed and, after being authenticated, the user will be directly connected to the target. The port may be a port number or port name. If you are using a port name, the name must be unique or an error is reported.
  • Page 167 Chapter 4: KX III Administration Username and password are optional. If username and password are not provided, a login dialog will be displayed and, after being authenticated, the user will be directly connected to the target. The port may be a port number or port name. If you are using a port name, the name must be unique or an error is reported.
  • Page 168 Chapter 4: KX III Administration Enabling the AKC Download Server Certificate Validation If you are using the AKC client, you can choose to use the Enable AKC Download Server Certificate Validation feature or opt not to use this feature. Note: When operating in IPv4 and IPv6 dual stack mode with 'Enable AKC Download Server Certificate Validation' feature, Microsoft ®...
  • Page 169 Chapter 4: KX III Administration ® 2. Launch Internet Explorer using the KX III IP address as the URL. A Certificate Error message will be displayed. 3. Select View Certificates. 4. On the General tab, click Install Certificate. The certificate is then installed in the Trusted Root Certification Authorities store.
  • Page 170 Chapter 4: KX III Administration Configuring SNMP Agents SNMP-compliant devices, called agents, store data about themselves in Management Information Bases (MIBs) and return this data to the SNMP managers. See Viewing the KX III MIB (on page 178) for information on viewing the KX III MIB.
  • Page 171 Chapter 4: KX III Administration  Privacy Protocol - if applicable, the AES or DES algorithm used to encrypt PDU and context data. a. Privacy Passphrase - if applicable, the pass phrase used to access the privacy protocol algorithm (up to 64 characters). 6.
  • Page 172 Chapter 4: KX III Administration Configuring Modem Settings Certified Modems (on page 391) for information on certified modems that work with the KX III. For information on settings that will give you the best performance when connecting to the KX III via modem, see Configuring Connection Properties (on page 273).
  • Page 173 KX III via the modem. Sierra Wireless Software and Firmware Versions Sierra Wireless must have at least ALEOS Software Version 4.4.1.014 Raritan has tested this configuration with the Verizon Wireless MC7750 Radio Module using firmware version 3.05.10.13. Connect the External, Wireless Modem...
  • Page 174  USB Device Mode must be set to "USBNET". Change Default Username For security reasons, Raritan recommends you change the default Admin account username to a new name before using the Sierra Wireless . Assign User Groups Modem Access Permissions...
  • Page 175 Chapter 4: KX III Administration Following are settings applied in KX III.  Modem Access permission is assigned to a user group on the Group page, and the user is then assigned to the group on the User page. For more information, see User Profiles and Groups. Enable/Disable Broadband Modem Access Use this feature to enable or disable access to an external Sierra Wireless modem.
  • Page 176 Chapter 4: KX III Administration KX III is now accessible using the Sierra Wireless modem. External Modem Connection Status and Checks The connection event is logged in the KX III audit log. Once the devices are on and the connection is active, the gateway IP address is displayed in the Remote Console in the left panel under the Network section.
  • Page 177 Chapter 4: KX III Administration For modem access through direct port access, you must configure settings in:  The KX III remote console  ® On the client machine in the Java Control Panel and in your browser (Microsoft Internet Explorer ®...
  • Page 178 Chapter 4: KX III Administration Steps For better modem performance, deselect the “Apply Encryption Mode to KVM and Virtual Media (Forced in FIPS 140-2 Mode)” setting if it is enabled on the Security Settings page (select Security > Security Settings). Optional ®...
  • Page 179 Chapter 4: KX III Administration Steps ® Access the Java Control Panel from the Microsoft Windows Control Panel. In the Java Control Panel, open to the General tab. Click Settings. Select "Keep temporary files on my computer". Click OK. You can now close the Java Control Panel and Microsoft Control Panel. Configure the following browser settings on your client machine, depending on the browser you use.
  • Page 180 Chapter 4: KX III Administration Steps ® For Microsoft Internet Explorer , click Tools > Internet Options. The steps here follow Internet Explorer 9. Click on the General tab. Click Settings in the Browser History section to open the Windows Database Settings dialog. Click the "Caches and Databases"...
  • Page 181 Chapter 4: KX III Administration Steps ® For Firefox , click Tools > Options. Click on Privacy. Set the History to "Firefox will" to "Remember history". Click OK to apply the settings. Finally, you need to perform the following steps the first time you access each target server via the Virtual KVM Client (VKC) from KX III.
  • Page 182 Chapter 4: KX III Administration Steps In VKC, click Connection > Properties to open the Connection Properties dialog. Set the Video Mode to “Greyscale 2” so you use the least bandwidth. Click OK. It may be necessary to set the “Noise Filter” to greater than 2 if the modem connection is slow after you test it.
  • Page 183 Chapter 4: KX III Administration Note: If DHCP is selected for the Network Settings on the Network page, the NTP server IP address is automatically retrieved from the DHCP server by default. Manually enter the NTP server IP address by selecting the Override DHCP checkbox. 6.
  • Page 184 Chapter 4: KX III Administration  Destination IP/Hostname - the IP or hostname of the SNMP manager. Up to five (5) SNMP managers can be created Note: IPv6 addresses cannot exceed 80 characters in length for the host name. a. Port Number - the port number used by the SNMP manager b.
  • Page 185 Chapter 4: KX III Administration Use the Link to SNMP Agent Configuration link to quickly navigate to the Devices Services page from the Event Management - Settings page. The events that are captured once an SNMP trap is configured are selected on the Event Management - Destination page.
  • Page 186 Chapter 4: KX III Administration Use the reset to factory defaults feature to remove the SNMP configuration and set the KX III to its original factory default. To reset to factory defaults:  Click Reset To Defaults. WARNING: When using SNMP traps over UDP, it is possible for the KX III and the router that it is attached to fall out of synchronization when the KX III is rebooted, preventing the reboot completed SNMP trap from being logged.
  • Page 187 Chapter 4: KX III Administration Trap Name Description ipConflictResolved An IP Address conflict was resolved. networkFailure An Ethernet interface of the product can no longer communicate over the network. networkParameterChanged A change has been made to the network parameters. passwordSettingsChanged Strong password settings have changed.
  • Page 188 Chapter 4: KX III Administration Trap Name Description userDeleted A user account has been deleted. userForcedLogout A user was forcibly logged out by Admin userLogin A user has successfully logged into the KX III and has been authenticated. userLogout A user has successfully logged out of the KX III properly.
  • Page 189 Chapter 4: KX III Administration 2. Go to the SMTP Settings panel and select the Enable SMTP Server checkbox. 3. Type the email address of the SMTP subscriber in the New Email Subscriber Address field and then click Add. 4. Click OK. Configure and Test SMTP Server Settings Enter the information required for a connection to your SMTP server on the SMTP Server Settings page.
  • Page 190 Chapter 4: KX III Administration It is important that the SMTP server information be accurate so that the KX III appliance can send messages using that SMTP server. This test sends an email using the settings displayed on the page in the SMTP Settings pane.
  • Page 191 Chapter 4: KX III Administration 2. Click the 'Click here to view the 'SNMP MIB' link. The MIB file opens in a browser window. SysLog Configuration 1. Choose Device Settings > Event Management - Settings. The Event Management - Settings page opens. 2.
  • Page 192 Chapter 4: KX III Administration To reset to factory defaults:  Click Reset To Defaults. WARNING: When using SNMP traps over UDP, it is possible for the KX III and the router that it is attached to fall out of synchronization when the KX III is rebooted, preventing the reboot completed SNMP trap from being logged.
  • Page 193: Power Supply Setup

    Chapter 4: KX III Administration Power Supply Setup KX III provides dual power supplies, and can automatically detect and provide notification regarding the status of these power supplies. When both power supplies are used, KX III automatically detects them and notifies you of their status. Additionally, both the Powerln1 and Powerln2 Auto Detect checkboxes are automatically selected on the Power Supply Setup page.
  • Page 194 Chapter 4: KX III Administration 2. If you are plugging power input into power supply number one (left-most power supply at the back of the unit), then select the Powerln1 Auto Detect option. 3. If you are plugging power input into power supply number two (right-most power supply at the back of the unit), then select the Powerln2 Auto Detect option.
  • Page 195: Connect And Disconnect Scripts

    Chapter 4: KX III Administration Connect and Disconnect Scripts The KX III provides the ability to execute key macro scripts when connecting to or disconnecting from a target. You can create and edit your own scripts on the Connection Script page to perform additional actions when connecting to or disconnecting from targets.
  • Page 196 Chapter 4: KX III Administration 3. In the Apply Selected Scripts to Ports section, select the target(s) you want to apply the script to using Select All or clicking on the checkbox to the left of each target to apply the script to only select targets.
  • Page 197 Chapter 4: KX III Administration For example, select F1-F16 to display the function key set in the Add box. Select a function key and add it to the Script box. Next, select Letters from the Key Set drop-down and add a letter key to the script. 8.
  • Page 198 Chapter 4: KX III Administration...
  • Page 199 Chapter 4: KX III Administration Modifying Scripts To modify existing scripts: 1. Click Device Settings > Connection Scripts. The Connection Scripts page opens. 2. In the Available Connection Scripts section, select the script you want to modify and click Modify. The page is then in Edit mode. 3.
  • Page 200: Port Group Management

    Chapter 4: KX III Administration 5. Click Import. The Configuration Scripts page opens and the imported scripts are displayed. To export a disconnect script: 1. Click Device Settings > Configuration Scripts. The Configuration Scripts page opens. 2. In the Available Connection Scripts section, select the script you want to export and click Export.
  • Page 201 Chapter 4: KX III Administration Creating Port Groups The KX III supports the aggregation of multiple ports into a single port group. Port groups consist solely of ports configured as standard KVM ports. A port may only be a member of a single group. Ports that are available to be included in a port group are displayed in the Select Port for Group >...
  • Page 202 Chapter 4: KX III Administration Creating a Dual Video Port Group The dual video port groups feature allows you to group two video ports into one group. Use this feature when you need to connect to a server with two video cards/ports, and you want to access both ports from the same remote client at the same time.
  • Page 203 Chapter 4: KX III Administration 2. Click Add. The Port Group page opens, and all available ports are displayed in the Select Ports for Group section. Note: If a port is already a part of blade server port group, another dual video port group, or 'standard' port group, the port is not an option since ports can only belong to a single port group at a time.
  • Page 204: Changing The Default Gui Language Setting

    From the Security Settings page, you can specify login limitations, user blocking, password rules, and encryption and share settings. Raritan SSL certificates are used for public and private key exchanges, and provide an additional level of security. Raritan web server certificates are self-signed.
  • Page 205 Chapter 4: KX III Administration To reset back to defaults:  Click Reset to Defaults. Login Limitations Using login limitations, you can specify restrictions for single login, password aging, and the logging out idle users. Limitation Description Enable single login When selected, only one login per user name is limitation allowed at any time.
  • Page 206 Chapter 4: KX III Administration Limitation Description Enter the number of days after which a password change is required. The default is 60 days. Log out idle users, Select the "Log off idle users" checkbox to After (1-365 automatically disconnect users after the amount minutes) of time you specify in the "After (1-365 minutes)"...
  • Page 207 Chapter 4: KX III Administration Strong Passwords Strong passwords provide more secure local authentication for the system. Using strong passwords, you can specify the format of valid KX III local passwords such as minimum and maximum length, required characters, and password history retention. Strong passwords require user-created passwords to have a minimum of 8 characters with at least one alphabetical character and one nonalphabetical character (punctuation character or number).
  • Page 208 Chapter 4: KX III Administration User Blocking The User Blocking options specify the criteria by which users are blocked from accessing the system after the specified number of unsuccessful login attempts. The three options are mutually exclusive: Option Description Disabled The default option.
  • Page 209 Chapter 4: KX III Administration Option Description Users are denied access to the system for the Timer Lockout specified amount of time after exceeding the specified number of unsuccessful login attempts. When selected, the following fields are enabled:  Attempts - The number of unsuccessful login attempts after which the user will be locked out.
  • Page 210 Chapter 4: KX III Administration Encryption & Share Using the Encryption & Share settings you can specify the type of encryption used, PC and VM share modes, and the type of reset performed when the KX III Reset button is pressed. WARNING: If you select an encryption mode that is not supported by your browser, you will not be able to access the KX III from your browser.
  • Page 211 Chapter 4: KX III Administration Auto This is the recommended option. The KX III autonegotiates to the highest level of encryption possible. You must select Auto in order for the device and client to successfully negotiate the use of FIPS compliant algorithms. AES-128 The Advanced Encryption Standard (AES) is a National Institute of Standards and Technology specification for the encryption of electronic...
  • Page 212 Reset (default) defaults. Enable Local Admin Resets the local administrator password only. Password Reset The password is reset to raritan. Disable All Local No reset action is taken. Resets Checking Your Browser for AES Encryption If you do not know if your browser uses AES, check with the browser manufacturer or navigate to the https://www.fortify.net/sslcheck.html...
  • Page 213 Chapter 4: KX III Administration Enabling FIPS 140-2 For government and other high security environments, enabling FIPS 140-2 mode may be required. The KX III uses an embedded FIPS 140-2-validated cryptographic ® module running on a Linux platform per FIPS 140-2 Implementation Guidance section G.5 guidelines.
  • Page 214 Chapter 4: KX III Administration FIPS 140-2 Support Requirements The KX III supports the use of FIPS 140-2 approved encryption algorithms. This allows an SSL server and client to successfully negotiate the cipher suite used for the encrypted session when a client is configured for FIPS 140-2 only mode.
  • Page 215: Configuring Ip Access Control

    Chapter 4: KX III Administration Configuring IP Access Control Using IP access control, you control access to your KX III. Note that IP access control restricts traffic of any kind from accessing the KX III, so NTP servers, RADIUS hosts, DNS hosts and so on must be granted access to the KX III.
  • Page 216 Chapter 4: KX III Administration 3. Choose the Policy from the drop-down list. 4. Click Insert. If the rule # you just typed equals an existing rule #, the new rule is placed ahead of the exiting rule and all rules are moved down in the list.
  • Page 217: Ssl Certificates

    Chapter 4: KX III Administration SSL Certificates KX III uses the Secure Socket Layer (SSL) protocol for any encrypted network traffic between itself and a connected client. When establishing a connection, KX III has to identify itself to a client using a cryptographic certificate.
  • Page 218 Chapter 4: KX III Administration Country (ISO code) - The country where the organization is located. This is the two-letter ISO code, e.g. DE for Germany, or US for the U.S. g. Challenge Password - Some certification authorities require a challenge password to authorize later changes on the certificate (e.g.
  • Page 219 Chapter 4: KX III Administration b. A message containing all of the information you entered appears. c. The CSR and the file containing the private key used when generating it can be downloaded by clicking Download CSR. d. Send the saved CSR to a CA for certification. You will get the new certificate from the CA.
  • Page 220: Security Banner

    Chapter 4: KX III Administration Security Banner KX III provides you with the ability to add a security banner to the KX III login process. This feature requires users to either accept or decline a security agreement before they can access the KX III. The information provided in a security banner will be displayed in a Restricted Service Agreement dialog after users access KX III using their login credentials.
  • Page 221 Chapter 4: KX III Administration Note: You cannot upload a text file from the local port.
  • Page 222: Maintenance

    Chapter 4: KX III Administration Maintenance Audit Log A log is created of KX III system events. The audit log can contain up to approximately 2K worth of data before it starts overwriting the oldest entries. To avoid losing audit log data, export the data to a syslog server or SNMP manager.
  • Page 223: Device Information

    Device Information The Device Information page provides detailed information about your KX III device and the CIMs in use. This information is helpful should you need to contact Raritan Technical Support. To view information about your KX III and CIMs: ...
  • Page 224: Creating A Kx Iii Backup And Restore File

    Chapter 4: KX III Administration  D2CIM-DVUSB-DVI  D2CIM-DVUSB-HDMI  D2CIM-DVUSB Note: Only the numeric portion of the serial numbers are displayed for the DCIM-USB, DCIM-PS2 and DCIM-USB G2 CIMs. For example, XXX1234567 is displayed. The serial number prefix GN is displayed for CIMs that have field configured serial numbers.
  • Page 225 Chapter 4: KX III Administration Create a Backup File Note: Backups are always complete system backups. Restores can be complete or partial depending on your selection. ® If you are using Internet Explorer 7 or later, to back up your KX III: 1.
  • Page 226 Chapter 4: KX III Administration Restore Your KX III Using a Restore File WARNING: Exercise caution when restoring your KX III to an earlier version. Usernames and password in place at the time of the backup will be restored. If you do not remember the old administrative usernames and passwords, you will be locked out of the KX III.
  • Page 227: Applying Kx Iii Appliance Setting To A Kx Iii Using A Backup/Restore File

    Chapter 4: KX III Administration  User and Group Restore - This option includes only user and group information. This option does not restore the certificate and the private key files. Use this option to quickly set up users on a different KX III. ...
  • Page 228: Usb Profile Management

    Raritan tech support. These profiles are designed to address the needs of your target server’s configuration, in the event that the set of standard profiles does not already address them. Raritan tech support will provide the custom profile and work with you to verify the solution for your target server’s specific needs.
  • Page 229: Upgrading Cims

    Chapter 4: KX III Administration Note: If an error or warning is displayed during the upload process (for example. overwriting an existing custom profile), you may continue with the upload by clicking Upload or cancel it by clicking on Cancel. To delete a custom profile to your KX III: 1.
  • Page 230: Upgrading The Kx Iii Firmware

    - doing so will likely result in damage to the appliance or CIMs. To upgrade your KX III appliance: 1. Click the Show Latest Firmware link to locate the appropriate Raritan firmware distribution file (*.RFP) on the Raritan website http://www.raritan.com...
  • Page 231: Upgrade History

    Chapter 4: KX III Administration Note: At this point, connected users are logged out, and new login attempts are blocked. 6. Click Upgrade. Please wait for the upgrade to complete. Status information and progress bars are displayed during the upgrade. Upon completion of the upgrade, the appliance reboots (1 beep sounds to signal that the reboot has completed).
  • Page 232 Chapter 4: KX III Administration To reboot your KX III: 1. Choose Maintenance > Reboot. The Reboot page opens. 2. Click Reboot. You are prompted to confirm the action. Click Yes to proceed with the reboot.
  • Page 233: Stopping Cc-Sg Management

    Chapter 4: KX III Administration Stopping CC-SG Management While KX III is under CC-SG management, if you try to access the device directly, you are notified that the device is under CC-SG management. If you are managing KX III through CC-SG and connectivity between CC-SG and the KX III is lost after the specified timeout interval (typically 10 minutes), you are able to end the CC-SG management session from the KX III console.
  • Page 234: Diagnostics

    Chapter 4: KX III Administration Diagnostics Network Interface Page The KX III provides information about the status of your network interface. To view information about your network interface:  Choose Diagnostics > Network Interface. The Network Interface page opens. The following information is displayed: ...
  • Page 235 Chapter 4: KX III Administration  Statistics - Produces a page similar to the one displayed here.  Interfaces - Produces a page similar to the one displayed here.
  • Page 236: Ping Host

    Chapter 4: KX III Administration  Route - Produces a page similar to the one displayed here. Ping Host Page Ping is a network tool used to test whether a particular host or IP address is reachable across an IP network. Using the Ping Host page, you can determine if a target server or another KX III is accessible.
  • Page 237: Trace Route To Host

    Chapter 4: KX III Administration 4. Select the interface in the Network Interface drop-down box to ping on a specified interface. Optional Note: In Isolation mode, choose to ping on Auto, LAN1 only, or LAN2 only. Trace Route to Host Page Trace route is a network tool used to determine the route taken to the provided hostname or IP address.
  • Page 238 Chapter 4: KX III Administration 5. Select the interface in the Network Interface drop-down box to trace route on a specified interface. Optional...
  • Page 239: Kx Iii Local Console - Administration Functions

    Chapter 4: KX III Administration Device Diagnostics Note: This page is for use by Raritan Field Engineers or when you are directed by Raritan Technical Support. Use this feature to download diagnostic information from the KX III to the client machine.
  • Page 240: Security And Authentication

    Chapter 4: KX III Administration Security and Authentication In order to use the KX III Local Console, you must first authenticate with a valid username and password. The KX III provides a fully-integrated authentication and security scheme, whether your access is via the network or the local port. In either case, the KX III allows access only to those servers to which a user has access permissions.
  • Page 241 Local language input is not supported at this time for KX III Local Console functions. Note: If using a Turkish keyboard, you must connect to a target server through the Active KVM Client (AKC). It is not supported by other Raritan clients. Select the Local Port Hotkey 1.
  • Page 242 Chapter 4: KX III Administration Hot key: Take this action: Double Click Scroll Lock Press Scroll Lock key twice quickly Double Click Num Lock Press Num Lock key twice quickly Double Click Caps Lock Press Caps Lock key twice quickly Double Click Left Alt key Press the left Alt key twice quickly Double Click Left Shift key...
  • Page 243 Chapter 4: KX III Administration Select the Local Port Connect Key Select the Local Port Connect key. Use a connect key sequence to connect to a target and switch to another target without returning to the GUI. Then use the hot key to disconnect and return to the local port GUI Once the local port connect key is created, it will appear in the Navigation panel of the GUI so you can use it as a reference.
  • Page 244: Command Line Interface (Cli)

    Chapter 4: KX III Administration Select the Local User Authentication 1. Choose the type of local user authentication.  Local/LDAP/RADIUS. This is the recommended option.  None. There is no authentication for Local Console access. This option is recommended for secure environments only. Command Line Interface (CLI) Overview The Command Line Interface(CLI) can be used to configure the KX III...
  • Page 245: Accessing The Kx Iii Using Cli

    Chapter 4: KX III Administration Accessing the KX III Using CLI Access the KX III by using one of the following methods:  SSH (Secure Shell) via IP connection A number of SSH clients are available and can be obtained from the following locations: ...
  • Page 246: Logging In

    Logging In To log in, enter the user name admin as shown: 1. Log in as admin 2. The Password prompt appears. Enter the default password: raritan The welcome message displays. You are now logged on as an administrator. After reviewing the following...
  • Page 247 Chapter 4: KX III Administration CLI Syntax -Tips and Shortcuts Tips  Commands are listed in alphabetical order.  Commands are not case sensitive.  Parameter names are a single word without an underscore.  Commands without arguments default to show current settings for the command.
  • Page 248: Initial Configuration Using Cli

    1. Reset the administrator password. All KX III devices are shipped with the same default password. Therefore, to avoid security breaches it is imperative that you change the admin password from raritan to one customized for the administrators who will manage the KX III device.
  • Page 249: Cli Prompts

    Chapter 4: KX III Administration CLI Prompts The Command Line Interface prompt indicates the current command level. The root portion of the prompt is the login name. admin is the root portion of a command when you establish a direct admin serial port connection via a terminal emulation application.
  • Page 250: Administering The Kx Iii Console Server Configuration Commands

    Chapter 4: KX III Administration Command Description help Display overview of commands. history Display the current session's command line history. interface Set/get network parameters. ipv6_interface Set/get IPv6 network parameters. logout Logout of the current CLI session. name Device name configuration. quit Return to previous menu.
  • Page 251 Chapter 4: KX III Administration Commands Description ethernetfailover Interface Command The Interface command is used to configure the KX III network interface. The syntax of the interface command is: interface [ipauto <none|dhcp>] [ip <ipaddress>] [mask <subnetmask>] [gw <ipaddress>] [mode <mode>] Set/Get ethernet parameters ipauto <none|dhcp>...
  • Page 252: Dual Video Port Groups

    Chapter 4: KX III Administration Name Command The name command is used to configure the Device Name and preferred hostname. The syntax of the name is: name [devicename <devicename>] [hostname <hostname>] Device name configuration devicename <devicename> Device Name hostname <hostname> Preferred host name (DHCP only) Name Command Example...
  • Page 253: Recommendations For Dual Port Video

     Client PC’s primary and secondary displays  Raritan device’s dual video port group configuration  Target server’s primary and secondary displays Only the following Client Launch Settings will be applied to dual port video displays: ...
  • Page 254: Cims Required For Dual Video Support

    Linux Intelligent and Linux users may experience Standard Mouse display and mouse movement Modes issues using single mouse mode. Raritan recommends Linux users do not use Single Mouse mode. ® operating Single Mouse Mode For Mac targets with multiple system monitors, use a standard mouse in Single-Cursor mode.
  • Page 255: Permissions And Dual Video Port Group Access

    Chapter 4: KX III Administration  Other - Enable Single Mouse Cursor setting will NOT be applied  Other - Enable Scale Video setting will be applied  Other - Pin Menu Toolbar setting will be applied  Dragging and moving items between windows on the primary and secondary target requires a release and press of the mouse button as the item is moved from one window to the other.
  • Page 256: Example Dual Port Video Group Configuration

    Chapter 4: KX III Administration Example Dual Port Video Group Configuration The following is a general example. Your configuration may vary in the type of CIMs used, the port you designate as the primary port, the ports you are connecting to and so on. In this example, we are using: ...
  • Page 257: Dual Port Video Configuration Steps

    Chapter 4: KX III Administration Diagram key Connection from the target's primary (first) video port to the KX III Connection from the target's secondary (second) video port to the KX III IP connection between the KX III and remote client Target server - configure the display settings and launch the dual port video group Display settings are the same on the remote client and...
  • Page 258 USB cables to available USB ports on the target. 3. Connect each CIM to the Raritan device using a CAT5/6 cable. 4. If you have not already done so: a. Connect the Raritan device to an AC power source using the provided power cable b.
  • Page 259 9. If security warnings appear, accept and/or allow access. Step 3: Configure the Mouse Mode and Ports Once you have connected the target server to the Raritan device through the target server video ports, it detects the connection and displays the ports on the Port Configuration page.
  • Page 260: Raritan Client Navigation When Using Dual Video Port Groups

    For example, if you are using extended desktop mode, the port windows can be moved between monitors. Raritan Client Navigation when Using Dual Video Port Groups When using full screen mode in the clients, switch between ports by: ...
  • Page 261: Direct Port Access And Dual Port Video Groups

    Chapter 4: KX III Administration Direct Port Access and Dual Port Video Groups Direct Port Access allows users to bypass having to use the KX III's Login dialog and Port Access page. This feature also provides the ability to enter a username and password directly to proceed to the target, if the username and password is not contained in the URL.
  • Page 262 Chapter 4: KX III Administration From LDAP/LDAPS When an LDAP/LDAPS authentication is successful, the KX III determines the permissions for a given user based on the permissions of the user's group. Your remote LDAP server can provide these user group names by returning an attribute named as follows: rciusergroup attribute type: string...
  • Page 263: Setting The Registry To Permit Write Operations To The Schema

    Chapter 4: KX III Administration Setting the Registry to Permit Write Operations to the Schema To allow a domain controller to write to the schema, you must set a registry entry that permits schema updates. To permit write operations to the schema: 1.
  • Page 264: Adding Attributes To The Class

    Chapter 4: KX III Administration 3. Click New and then choose Attribute. When the warning message appears, click Continue and the Create New Attribute dialog appears. 4. Type rciusergroup in the Common Name field. 5. Type rciusergroup in the LDAP Display Name field. 6.
  • Page 265 Chapter 4: KX III Administration 2. Scroll to the user class in the right pane and right-click it. 3. Choose Properties from the menu. The user Properties dialog appears. 4. Click the Attributes tab to open it. 5. Click Add.
  • Page 266: Updating The Schema Cache

    Chapter 4: KX III Administration 6. Choose rciusergroup from the Select Schema Object list. 7. Click OK in the Select Schema Object dialog. 8. Click OK in the User Properties dialog. Updating the Schema Cache To update the schema cache: ®...
  • Page 267 Chapter 4: KX III Administration 3. Go to the directory where the support tools were installed. Run adsiedit.msc. The ADSI Edit window opens. 4. Open the Domain. 5. In the left pane of the window, select the CN=Users folder.
  • Page 268 Chapter 4: KX III Administration 6. Locate the user name whose properties you want to adjust in the right pane. Right-click the user name and select Properties. 7. Click the Attribute Editor tab if it is not already open. Choose rciusergroup from the Attributes list.
  • Page 269: Overview

    Virtual Media Chapter 5 In This Chapter Overview....................257 Prerequisites for Using Virtual Media ............258 Mounting Local Drives ................259 Supported Tasks Via Virtual Media ............259 Supported Virtual Media Types .............260 Supported Virtual Media Operating Systems ........260 Number of Supported Virtual Media Drives...........261 Connecting and Disconnecting from Virtual Media .......261 Virtual Media in a Windows XP Environment ........263 Virtual Media in a Linux Environment............264...
  • Page 270: Prerequisites For Using Virtual Media

    Chapter 5: Virtual Media Prerequisites for Using Virtual Media KX III Virtual Media Prerequisites  For users requiring access to virtual media, the KX III permissions must be set to allow access to the relevant ports, as well as virtual media access (VM Access port permission) for those ports.
  • Page 271: Mounting Local Drives

    Chapter 5: Virtual Media Mounting Local Drives This option mounts an entire drive, which means the entire disk drive is mounted virtually onto the target server. Use this option for hard drives and external drives only. It does not include network drives, CD-ROM, or DVD-ROM drives. Notes on Mounting Local Drives KVM target servers running the Windows XP ®...
  • Page 272: Supported Virtual Media Types

    USB mass storage devices  PC hard drives  ISO images (disk images) ISO9660 is the standard supported by Raritan. However, other ISO standards can be used.  Digital audio devices* Conditions when Read/Write is Not Available Virtual media Read/Write is not available in the following situations: ...
  • Page 273: Number Of Supported Virtual Media Drives

    Chapter 5: Virtual Media Number of Supported Virtual Media Drives With the virtual media feature, you can mount up to two drives (of different types) that are supported by the USB profile currently applied to the target. These drives are accessible for the duration of the KVM session.
  • Page 274: Mounting Cd-Rom/Dvd-Rom/Iso Images

    You can access the media just like any other drive. Mounting CD-ROM/DVD-ROM/ISO Images This option mounts CD-ROM, DVD-ROM, and ISO images. Note: ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work. To access a CD-ROM, DVD-ROM, or ISO image: 1.
  • Page 275: Disconnect From Virtual Media Drives

    Chapter 5: Virtual Media 4. For remote ISO images on a file server: a. Choose the Remote Server ISO Image option. b. Choose Hostname and Image from the drop-down list. The file servers and image paths available are those that you configured using the File Server Setup page.
  • Page 276: Virtual Media In A Linux Environment

    Chapter 5: Virtual Media Virtual Media in a Linux Environment Active System Partitions You cannot mount active system partitions from a Linux client. Linux Ext3/4 drive partitions need to be unmounted via umount /dev/<device label> prior to a making a virtual media connection. Drive Partitions The following drive partition limitations exist across operating systems: ...
  • Page 277: Virtual Media File Server Setup (File Server Iso Images Only)

    Virtual Media File Server Setup (File Server ISO Images Only) This feature is only required when using virtual media to access file server ISO images. ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work.
  • Page 278: Overview

    "Virtual KVM Client (VKC and VKCs) Help" on page 270). Recommended Minimum Active KVM Client (AKC) Requirements Raritan recommends the Active KVM Client (AKC) machines meet the following minimum requirements for use with KX III.  Client machine with either a - ...
  • Page 279: Akc Supported Microsoft .Net Framework

    Since .NET is required to run AKC, if you do not have .NET installed or you have an unsupported version of .NET installed, you will receive a message instructing you to check the .NET version. Note: Raritan recommends Windows XP ® operating system users verify you have a working version of .NET 4.0 or 4.5 already installed before...
  • Page 280: Proxy Server Configuration For Use With Vkc, Vkcs, And Akc

    Windows Vista , Windows 7 and Windows 2008 server users should ensure that Protected Mode is not on when accessing the Raritan device. Enable AKC Download Server Certificate Validation If the Raritan device (or CC-SG) administrator has enabled the Enable AKC Download Server Certificate Validation option: ...
  • Page 281: Connect To A Target From Virtual Kvm Client (Vkc), Standalone Vkc (Vkcs), Or Active Kvm Client (Akc)

    Chapter 6: Active KVM Client (AKC) Help a. Select Control Panel > Java. b. On the General tab, click Network Settings. The Network Settings dialog opens. c. Select "Use Proxy Server". d. Click Advanced. The Advanced Network Settings dialog opens. e.
  • Page 282: Virtual Kvm Client (Vkc And Vkcs) Help

    Virtual KVM Client (VKC and VKCs) Chapter 7 Help In This Chapter Overview....................271 Recommended Minimum Virtual KVM Client (VKC) Requirements..271 Virtual KVM Client Java Requirements - KX III ........272 Proxy Server Configuration for Use with VKC, VKCS, and AKC ..272 Connect to a Target from Virtual KVM Client (VKC), Standalone VKC (VKCs), or Active KVM Client (AKC) .............273 Configuring Connection Properties ............273...
  • Page 283: Overview

    IMPORTANT: Refreshing your browser closes the Virtual KVM Client connection. Recommended Minimum Virtual KVM Client (VKC) Requirements Raritan recommends the Virtual KVM Client (VKC) machines meet the following minimum requirements for use with KX III.  Client machine with either a - ...
  • Page 284: Virtual Kvm Client Java Requirements - Kx Iii

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Virtual KVM Client Java Requirements - KX III ™ Java 1.7 or 1.8 is required to use the Java-based Virtual KVM Client (VKC). Java 1.8.0_40 is required to use the VKCS. Proxy Server Configuration for Use with VKC, VKCS, and AKC When the use of a Proxy Server is required, a SOCKS proxy must also be provided and configured on the remote client PC.
  • Page 285: Connect To A Target From Virtual Kvm Client (Vkc), Standalone Vkc (Vkcs), Or Active Kvm Client (Akc)

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Connect to a Target from Virtual KVM Client (VKC), Standalone VKC (VKCs), or Active KVM Client (AKC) Once you have logged on to the KX III Remote Console, access target servers via the Virtual KVM Client (VKC), Standalone VKC (VKCs), or Active KVM Client (AKC).
  • Page 286: Access Connection Properties

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Access Connection Properties To access connection properties: Click Connection > Properties, or click the Connection... icon to open the Connection Properties dialog. Default Connection Property Settings - Optimized for Best Performance The KX III comes configured to provide optimal performance for the majority of video streaming conditions.
  • Page 287: Optimize For: Selections

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Click Reset on the Connection Properties dialog at any time to return to the default settings. Tip: Use the Connection Information dialog to monitor the connection in real-time. See Access and Copy Connection Information (on page 278) Optimize for: Selections...
  • Page 288: Video Mode

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Video Mode The Video Mode slider controls each video frame's encoding, affecting video quality, frame rate and bandwidth. In general, moving the slider to the left results in higher quality at the cost of higher bandwidth and, in some cases, lower frame rate.
  • Page 289: Noise Filter

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Noise Filter Unless there is a specific need to do so, do not change the noise filter setting. The default setting is designed to work well in most situations. The Noise Filter controls how much interframe noise is absorbed by the KX III.
  • Page 290: Connection Information

    Horizontal Resolution - The target server horizontal resolution.  Vertical Resolution - The target server vertical resolution.  Refresh Rate - Refresh rate of the target server.  Protocol Version - Raritan communications protocol version. Access and Copy Connection Information...
  • Page 291: Usb Profiles

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Steps Click Connection > Info... to open the Connection Info dialog. Click Copy to Clipboard. Paste the information as needed. USB Profiles Set a USB profile for a target server from the Virtual KVM Client (VKC) by clicking USB Profile in the menu, then selecting from the menu choices.
  • Page 292: Keyboard

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Keyboard Send Ctrl+Alt+Del Macro Due to its frequent use, a Ctrl+Alt+Delete macro is preprogrammed. Selecting Keyboard > Send Ctrl+Alt+Del, or clicking on the Ctrl+Alt+Delete button in the toolbar sends this key sequence to the server or to the KVM switch to which you are currently connected.
  • Page 293: Keyboard Macros

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help 4. Click OK. Keyboard Macros Keyboard macros ensure that keystroke combinations intended for the target server are sent to and interpreted only by the target server. Otherwise, they might be interpreted by the computer on which the Virtual KVM Client (VKC) is running (your client PC).
  • Page 294: Import Macros

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help a. To remove a step in the sequence, select it and click Remove. b. To change the order of steps in the sequence, click the step and then click the up or down arrow buttons to reorder them as needed.
  • Page 295: Export Macros

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help  Click Yes to replace the existing macro with the imported version.  Click Yes to All to replace the currently selected and any other duplicate macros that are found.  Click No to keep the original macro and proceed to the next macro ...
  • Page 296: Video Properties

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help 4. Select the folder to save the macro file to, enter a name for the file and click Save. If the macro already exists, you receive an alert message. 5. Select Yes to overwrite the existing macro or No to close the alert without overwriting the macro.
  • Page 297: Calibrating Color

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Calibrating Color Use the Calibrate Color command to optimize the color levels (hue, brightness, saturation) of the transmitted video images. The color settings are on a target server-basis. Note: When color is successfully calibrated, the values are cached and reused each time you switch to the target.
  • Page 298 Warning: Exercise caution when changing the Clock and Phase settings. Doing so may result in lost or distorted video and you may not be able to return to the previous state. Contact Raritan Technical Support before making any changes. Horizontal Offset - Controls the horizontal positioning of the target server display on your monitor.
  • Page 299: Screenshot From Target Command (Target Screenshot)

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Note: Some Sun background screens, such as screens with very dark borders, may not center precisely on certain Sun servers. Use a different background or place a lighter colored icon in the upper left corner of the screen.
  • Page 300: Mouse Options

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Mouse Options You can operate in either single mouse mode or dual mouse mode. When in a dual mouse mode, and provided the option is properly configured, the mouse cursors align. When controlling a target server, the Remote Console displays two mouse cursors - one belonging to your KX III client workstation, and the other belonging to the target server.
  • Page 301: Dual Mouse Modes

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Dual Mouse Modes Absolute Mouse Synchronization In this mode, absolute coordinates are used to keep the client and target cursors in synch, even when the target mouse is set to a different acceleration or speed.
  • Page 302 To be sure to avoid any problems with this function, Raritan recommends you do not have file icons or folder icons in the upper left corner of your desktop.
  • Page 303 Chapter 7: Virtual KVM Client (VKC and VKCs) Help Standard Mouse Mode Standard Mouse mode uses a standard mouse synchronization algorithm. The algorithm determines relative mouse positions on the client and target server. In order for the client and target mouse cursors to stay in synch, mouse acceleration must be disabled.
  • Page 304: Tool Options

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Single Mouse Mode Single Mouse mode uses only the target server mouse cursor; the client mouse cursor no longer appears onscreen. Note: Single mouse mode does not work on Windows or Linux targets when the client is running on a Virtual Machine.
  • Page 305 Chapter 7: Virtual KVM Client (VKC and VKCs) Help  Japanese  United Kingdom  Korean (Korea)  French (Belgium)  Norwegian (Norway)  Portuguese (Portugal)  Danish (Denmark)  Swedish (Sweden)  German (Switzerland)  Hungarian (Hungary)  Spanish (Spain) ...
  • Page 306 Turkish Keyboards If using a Turkish keyboard, you must connect to a target server through the Active KVM Client (AKC). It is not supported by other Raritan clients. Slovenian Keyboards The < key does not work on Slovenian keyboards due to a JRE limitation.
  • Page 307: Client Launch Settings

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Language Configuration method Japanese System Settings (Control Center) System Settings (Control Center) Korean System Settings (Control Center) Belgian Keyboard Indicator Norwegian Keyboard Indicator Danish Keyboard Indicator Swedish Keyboard Indicator Hungarian System Settings (Control Center) Spanish System Settings (Control Center) Italian...
  • Page 308 Chapter 7: Virtual KVM Client (VKC and VKCs) Help b. Use 'Select From Detected Monitors' to select from a list of monitors that are currently detected by the application. If a previously selected monitor is no longer detected, 'Currently Selected Monitor Not Detected' is displayed. ...
  • Page 309: Configuring Port Scan Settings In Vkc/Vkcs And Akc

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Configuring Port Scan Settings in VKC/VKCS and AKC Configuring port scan options in VKC/VKCS and AKC applies to scanning from the KX III Remote Console. To configure port scan options for the Local Console, see Configure Local Console Scan Settings (on page 348)
  • Page 310: Collecting A Diagnostic Snapshot Of The Target

    The "snapshot" function generate log files and image files from the target. It then bundles these files in a zip file that can be sent to Raritan Technical Support in order to help diagnose technical problems you may be encountering.
  • Page 311 Chapter 7: Virtual KVM Client (VKC and VKCs) Help  Log.txt file: These are the client logs. Note that the logs are included even if you have not enabled information to be captured in them. VKC uses internal memory to capture the information in this case.
  • Page 312 Chapter 7: Virtual KVM Client (VKC and VKCs) Help To capture a diagnostic snapshot: Steps Access a target, and then click Tools > Collect a Diagnostic Snapshot. Several messages are displayed as the information is collected. You are prompted to save the zip file containing the diagnostic files.
  • Page 313: View Options

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help The zip file containing the diagnostic files that were collecting opens. View Options View Toolbar You can use the Virtual KVM client with or without the toolbar display. To toggle the display of the toolbar (on and off): ...
  • Page 314: Connect To Virtual Media

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Full Screen Mode When you enter Full Screen mode, the target's full screen is displayed and acquires the same resolution as the target server. The hot key used for exiting this mode is specified in the Options dialog, Tool Options (on page 292).
  • Page 315: Smart Cards

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Smart Cards Using the KX III, you are able to mount a smart card reader onto a target server to support smart card authentication and related applications. For a list of supported smart cards, smart card readers, and additional system requirements, see Smart Card Minimum System Requirements, CIMs and Supported/Unsupported Smart Card...
  • Page 316: Smart Card Reader Detected

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Smart Card Reader Detected After a KVM session is established with a target server, a Smart Card menu and button are available in VKC and AKC. Once the Smart Card button is selected or Smart Card is selected from the menu, the smart card readers that are detected as attached to the remote client are displayed in a dialog.
  • Page 317: Update A Smart Card Reader

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Update a Smart Card Reader To update the smart card in the Select Smart Card Reader dialog:  Click Refresh List if a new smart card reader has been attached to the client PC.
  • Page 318: Digital Audio

    Note: Audio CDs are not supported by virtual media so they do not work with the audio feature. Before you begin using the audio feature, Raritan recommends you review the audio related information documented in the following sections of Help: ...
  • Page 319: Digital Audio Vkc And Akc Icons

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Digital Audio VKC and AKC Icons Audio Icon name Description icons Speaker These icons are located in status bar at the bottom of the client window. Green, blinking waves indicate an audio playback session is currently streaming.
  • Page 320: Recommendations For Audio Connections When Pc Share Mode Is Enabled

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Recommendations for Audio Connections when PC Share Mode is Enabled If you are using the audio feature while running PC Share mode, audio playback and capture are interrupted if an additional audio device is connected to the target.
  • Page 321 Chapter 7: Virtual KVM Client (VKC and VKCs) Help In practice, the bandwidth used when an audio device connects to a target is higher due to the keyboard and video data consumed when opening and using an audio application on the target. A general recommendation is to have at least a 1.5MB connection before running playback and capture.
  • Page 322: Saving Audio Settings

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Saving Audio Settings Audio device settings are applied on a per KX III device basis. Once the audio devices settings are configured and saved on the KX III, the same settings are applied to it. ®...
  • Page 323: Connecting And Disconnecting From A Digital Audio Device

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Operating System Audio Playback Support Review the table shown here to see which Raritan client works with audio playback/capture for each operating system: Operating system Audio playback and capture supported ...
  • Page 324 Chapter 7: Virtual KVM Client (VKC and VKCs) Help 6. Select the audio format for the playback device from the Format: drop-down. Note: Select the format that you wish to use based on the available network bandwidth. Formats with lower sampling rates consume less bandwidth and may tolerate more network congestion.
  • Page 325: Adjusting Capture And Playback Buffer Size (Audio Settings)

    Chapter 7: Virtual KVM Client (VKC and VKCs) Help Adjusting Capture and Playback Buffer Size (Audio Settings) Once an audio device is connected, the capture and playback buffer size can be adjusted as needed. This feature is useful for controlling the quality of the audio, which may be impacted by bandwidth limitations or network spikes.
  • Page 326: Power Control Using Vkc, Vkcs, And Akc

    Version Information - Virtual KVM Client This menu command provides version information about the Virtual KVM Client, in case you require assistance from Raritan Technical Support. To obtain version information: 1. Choose Help > About Raritan Virtual KVM Client.
  • Page 327: Chapter 8 Dominion Kx Iii User Station

    To use a standalone appliance for remote access to KX III target servers instead of using the VKC or AKC clients on a PC or laptop, purchase Dominion User Stations from Raritan. The User Station is perfect for environments like labs, studios and control rooms where a PC or laptop is not wanted.
  • Page 328: Overview

    Chapter 8: Dominion KX III User Station Overview The Dominion User Station (DKX3-UST) is designed to access servers and computer devices connected to KX III's from your LAN/WAN networks. ALL KX III models are supported. KX III Release 3.2 and above is required.
  • Page 329: User Station Photo And Features

    Connect the User Station to the LAN/WAN network. 2. Power on and log in to the User Station.  For initial login, use Raritan's default username and password: admin and raritan. 3. Add KX III's data. See Logging In to KX III...
  • Page 330 Chapter 8: Dominion KX III User Station 4. The added KX III's are displayed in the Port Navigator window. 5. Click a KX III to show a list of its servers. 6. Click a target server, and a KVM Client opens, showing the target video.
  • Page 331: Remotely Access Targets Using A Mobile Device

    Mobile KVM Client (MKC) Help Chapter 9 In This Chapter Remotely Access Targets Using a Mobile Device.........319 Connect to a Target Using the Mobile KVM Client........320 Touch Mouse Functions ................320 Using the MKC Toolbar .................321 Display Mobile Device Keyboard............323 Display Connection Info.................323 Set Keyboard Type................324 Manage Mobile Client Keyboard Macros ..........325 Launch Keyboard Macro ...............325...
  • Page 332: Connect To A Target Using The Mobile Kvm Client

    Chapter 9: Mobile KVM Client (MKC) Help Connect to a Target Using the Mobile KVM Client Mobile access using the Mobile Access Client requires the use of CommandCenter Secure Gateway (CC-SG). Enable pop-ups in your mobile device browser before accessing Mobile KVM Client (MKC) or CC-SG Mobile Access Client.
  • Page 333: Using The Mkc Toolbar

    Chapter 9: Mobile KVM Client (MKC) Help Using the MKC Toolbar The MKC toolbar may not be completely visible at one time, depending on the resolution of your mobile device. To view the whole toolbar:  Touch and swipe to move the toolbar icons to the left and right, bringing different icons into view.
  • Page 334 Chapter 9: Mobile KVM Client (MKC) Help Touch and swipe the toolbar to the left, to view the F5 through F12 icons. Swipe the toolbar back to the right to return to the default view. On a mobile phone device, such as an iPhone, you will see fewer icons. Use the same touch-and-swipe motion left and right to view additional icons.
  • Page 335: Display Mobile Device Keyboard

    Chapter 9: Mobile KVM Client (MKC) Help Display Mobile Device Keyboard Toggle on and off the MKC keyboard to display or hide it. The keyboard is configured on the mobile device. For example, on iPad choose Settings > General > Keyboard > International Keyboards to see the available keyboards or to add a keyboard.
  • Page 336: Set Keyboard Type

    Chapter 9: Mobile KVM Client (MKC) Help Set Keyboard Type The default keyboard in MKC is US/International English. Select the language keyboard to match the language keyboard setting of the target you are accessing. This is required to provide the correct keyboard mapping in the target.
  • Page 337: Manage Mobile Client Keyboard Macros

    Chapter 9: Mobile KVM Client (MKC) Help Manage Mobile Client Keyboard Macros Each user must import their user-defined keyboard macros to make them available for use while connected to targets using the Mobile KVM Client (MKC). Export the file from Virtual KVM Client (VKC), then import it using the desktop Access Client.
  • Page 338: Absolute Mouse Mode

    Chapter 9: Mobile KVM Client (MKC) Help 2. Touch Mouse Mode, then touch Absolute, Intelligent, or Standard. Absolute Mouse Mode In this mode, absolute coordinates are used to keep the client and target cursors in synch, even when the target mouse is set to a different acceleration or speed.
  • Page 339: Sync Mouse In Intelligent Or Standard Mouse Mode

    Chapter 9: Mobile KVM Client (MKC) Help Sync Mouse in Intelligent or Standard Mouse Mode In Intelligent or Standard mouse mode, the Sync Mouse command forces realignment of the target server mouse pointer with the MKC mouse pointer. To sync mouse: 1.
  • Page 340: View Mkc Help

    Chapter 9: Mobile KVM Client (MKC) Help View MKC Help Descriptions of the touchscreen techniques can be accessed in MKC. To view MKC help:  Touch the Help icon (?) icon in the toolbar. The help opens.  Touch Mouse Functions (on page 320) to view this information.
  • Page 341: Chapter 10 Kx Iii Remote Console

    Chapter 10 KX III Remote Console In This Chapter Overview....................329 Scanning Ports - Remote Console ............330 Changing a Password ................335 Managing Favorites ................336 Overview When you log in to the KX III via a network connection, you access the Remote Console. The first page accessed is the Port Access page. Logging In to the KX III (see "Logging In to KX...
  • Page 342: Scanning Ports - Remote Console

    Chapter 10: KX III Remote Console Scanning Ports - Remote Console Use the port scanning feature to search for selected targets and display them in individual thumbnails as part of a slide show. This feature allows you to monitor up to 32 targets at one time since you can view each target server individually as it is displayed during the slide show.
  • Page 343: Scanning Ports Slide Show - Remote Console

    Chapter 10: KX III Remote Console Scanning Ports Slide Show - Remote Console When you start a scan, the Port Scan window opens. As each target is found, it is displayed as a thumbnail in a slide show. The slide show scrolls through the target thumbnails based on the default interval of 10 seconds or according to the interval you specify.
  • Page 344: Target Status Indicators During Port Scanning - Remote Console

    Chapter 10: KX III Remote Console Target Status Indicators During Port Scanning - Remote Console The status of each target is indicated by green, yellow and red lights that are displayed below the target thumbnail. As the target is the focus of the rotation, the indicator is in the task bar also shows the status.
  • Page 345: Using Scan Port Options

    Chapter 10: KX III Remote Console Using Scan Port Options Following are options available to you while scanning targets. With the exception of the Expand/Collapse icon, all of these options are selected from the Options menu in the upper left of the Port Scan viewer. The options will return to their defaults when you close the window.
  • Page 346: Scan For Targets

    Chapter 10: KX III Remote Console Scan for Targets To scan for targets: 1. Click the Set Scan tab on the Port Access page. 2. Select the targets you want to include in the scan by selecting the checkbox to the left of each target, or select the checkbox at the top of the target column to select all targets.
  • Page 347: Changing A Password

    Chapter 10: KX III Remote Console Changing a Password To change your KX III password: 1. Choose User Management > Change Password. The Change Password page opens. 2. Type your current password in the Old Password field. 3. Type a new password in the New Password field. Retype the new password in the Confirm New Password field.
  • Page 348: Managing Favorites

    Chapter 10: KX III Remote Console Managing Favorites A Favorites feature is provided so you can organize and quickly access the devices you use frequently. The Favorite Devices section is located in the lower left sidebar of the Port Access page and provides the ability to: ...
  • Page 349: Enable Favorites

    Chapter 10: KX III Remote Console Enable Favorites  Click Enable in the Favorite Devices section of the left panel of the KX III interface.
  • Page 350: Access And Display Favorites

    Chapter 10: KX III Remote Console Access and Display Favorites To access a favorite KX III devices:  Click on a KX III listed beneath Favorite Devices in the left of the Remote Console. To display favorite KX IIIs by name: ...
  • Page 351: Discovering Devices On The Kx Iii Subnet

    The KX III Remote Console automatically discovers the KX III devices, and any other Raritan device, in the subnet of the KX III. To discover devices on the device subnet: 1. Choose Manage > Discover Devices - KX III Subnet.
  • Page 352 Chapter 10: KX III Remote Console To access a discovered device:  Click the device name or IP address for that device. A new browser opens to that device.
  • Page 353: In This Chapter Overview

    Chapter 11 KX III Local Console In This Chapter Overview....................341 Accessing a Target Server ..............341 Local Console Video Resolution Behavior ..........342 Simultaneous Users ................342 Local Port Hot Keys and Connect Keys ..........342 Scanning Ports - Local Console ............345 Local Console Smart Card Access............349 Local Console USB Profile Options............351 KX III Local Console Factory Reset ............352 Resetting the KX III Using the Reset Button on the Device ....353...
  • Page 354: Local Console Video Resolution Behavior

    Chapter 11: KX III Local Console Local Console Video Resolution Behavior By default, monitors are typically set to the highest resolution they support. Once a monitor is connected to the KX III Local Console, KX III detects the monitor's native resolution. As long as the native resolution is supported by the Local Console, KX III uses that resolution.
  • Page 355: Return To The Local Console From A Target Device - Default Hot Key

    Chapter 11: KX III Local Console Return to the Local Console from a Target Device - Default Hot Key  Press the Scroll Lock hot key twice rapidly The video display switches from the target device interface to the KX III Local Console interface.
  • Page 356: Special Sun Key Combinations

    Chapter 11: KX III Local Console Special Sun Key Combinations ™ The following key combinations for Sun Microsystems server’s special keys operate on the Local Console port. These special keys are available from the Keyboard menu when you connect to a Sun target device: Sun key Local port key combination...
  • Page 357: Scanning Ports - Local Console

    Chapter 11: KX III Local Console Scanning Ports - Local Console Use the port scanning feature to search for selected targets and display them in individual thumbnails as part of a slide show. This feature allows you to monitor up to 32 targets at one time since you can view each target server individually as it is displayed during the slide show.
  • Page 358: Scanning Port Slide Show - Local Console

    Chapter 11: KX III Local Console Scanning Port Slide Show - Local Console When you start a scan, the Port Scan window opens. As each target is found, it is displayed as a thumbnail in a slide show. The slide show scrolls through the target thumbnails based on the default interval of 10 seconds or according to the interval you specify.
  • Page 359 Chapter 11: KX III Local Console...
  • Page 360: Target Status Indicators During Port Scanning - Local Console

    Chapter 11: KX III Local Console Target Status Indicators During Port Scanning - Local Console In thumbnail view on the Local Console, the status of each target is indicated below the thumbnail on the page until it is the focus of the slide show view.
  • Page 361: Scan For Targets - Local Console

    Chapter 11: KX III Local Console  Display Interval - changes the scan display interval.  Interval Between Ports - change interval between switching different port during scan. Scan for Targets - Local Console To scan for targets: 1. Click the Set Scan tab on the Port Access page. 2.
  • Page 362 Chapter 11: KX III Local Console 2. From the Local Console, click Tools. 3. Select the smart card reader from the Card Readers Detected list. Select None from the list if you do not want a smart card reader mounted. 4.
  • Page 363: Local Console Usb Profile Options

    Chapter 11: KX III Local Console Local Console USB Profile Options From the USB Profile Options section of the Tools page, you can choose from the available USB profiles. The ports that can be assigned profiles are displayed in the Port Name field and the profiles that are available for a port appear in the Select Profile To Use field after the port is selected.
  • Page 364: Kx Iii Local Console Factory Reset

    Chapter 11: KX III Local Console KX III Local Console Factory Reset Note: It is recommended that you save the audit log prior to performing a factory reset. The audit log is deleted when a factory reset is performed and the reset event is not logged in the audit log.
  • Page 365: Resetting The Kx Iii Using The Reset Button On The Device

    Chapter 11: KX III Local Console Resetting the KX III Using the Reset Button on the Device On the back panel of the device, there is a Reset button. It is recessed to prevent accidental resets (you need a pointed object to press this button).
  • Page 366: Overview

    An extended local port extends the reach of the local port beyond the rack the KX II is located, for example to another KVM switch. This can be achieved by configuring a KX III to work with a Raritan Cat5 Reach DVI transmitter and receiver, which are then connected to a remote console or other device.
  • Page 367: Connect Cat5 Reach Dvi And Cat5 Reach Dvi

    4. Connect the local console ports of the KVM switch to the transmitter. a. Plug one end of the Raritan-provided DVI cable into the DVI-I IN port on the transmitter, and the other end into the KVM switch's video port.
  • Page 368 Appendix A: Connecting a KX III and Cat5 Reach DVI - Provide Extended Local Port Functionality 5. Turn on the KVM switch. Tip: The local or remote console can be equipped with a KVM drawer instead of a set of keyboard, mouse and monitor. See the illustration below.
  • Page 369 Appendix A: Connecting a KX III and Cat5 Reach DVI - Provide Extended Local Port Functionality 5. Turn on both KVM switches. To increase the distance between any computer and a KVM switch: 1. Set up an optional local console with the transmitter. 2.
  • Page 370: Overview

    Appendix B Accessing a Paragon II from the KX In This Chapter Overview....................358 Supported Paragon II CIMS and Configurations ........359 Connecting the Paragon II to the KX III..........364 Overview Connect the Paragon II system to a KX III device that is managed by CC-SG so that Paragon II is accessible from CC-SG.
  • Page 371: Supported Paragon Ii Cims And Configurations

    Appendix B: Accessing a Paragon II from the KX III When you access the Paragon II system from KX III or CC-SG (if the KX III is managed by CC-SG), the Paragon II OSUI login screen appears for you to log in. In this integration, you can perform any OSUI functions implemented with current Paragon II firmware or any KX III function implemented with current KX III firmware except for the virtual media feature.
  • Page 372 Appendix B: Accessing a Paragon II from the KX III Paragon CIM Supports Does not support   Servers with USB- or P2CIM-AUSBDUAL Virtual media ™ USB-type  Smart cards keyboard and mouse  Absolute Mouse ports mode  Automatic skew ...
  • Page 373: Kx Iii-To-Kx Iii Paragon Cim Guidelines

    Appendix B: Accessing a Paragon II from the KX III KX III-to-KX III Paragon CIM Guidelines The following system configuration guidelines should be followed when you are using Paragon CIMs in a KX III-to-KX III configuration: Concurrent Access Both KX III KVM switches should be configured with the same policy for concurrent access to targets - both PC-Share or both Private.
  • Page 374: Kx Iii-To-Paragon Ii Guidelines

    Appendix B: Accessing a Paragon II from the KX III If a connection to the target is in place from the other KX III, the availability is checked when a connection is attempted. Access is denied or allowed consistent with the PC-Share policy in place for the KX III. Until that time, the availability is not be updated on the other KX III.
  • Page 375: Supported Connection Distances Between Paragon Ii And Kx Iii

    Appendix B: Accessing a Paragon II from the KX III Paragon II Mode description Supported? operation mode port can be selected and Timeout, which is configured controlled by more than on the Paragon II, is not one user, but only one supported.
  • Page 376: Connecting The Paragon Ii To The Kx Iii

    Appendix B: Accessing a Paragon II from the KX III Connecting the Paragon II to the KX III To connect the Paragon II system to a KX III: 1. Check whether the Paragon II user station that you want to connect to the KX III is implemented with version 4.6 firmware (or later).
  • Page 377: Appendix C Managing Kx Iii In Dctrack

    Visualize the KX III in a Cabinet Elevation and on the Floor Map..370 Managing the KX III Lifecycle ..............371 Overview ® Raritan's dcTrack is a complete Data Center Infrastructure Management (DCIM) solution that provides you with real-time information about your facilities, networks and IT.
  • Page 378: Locate Space In A Cabinet For The Kx Iii

    Appendix C: Managing KX III in dcTrack Locate Space in a Cabinet for the KX III Use dcTrack's Capacity Management functionality to locate space in a cabinet in your data center for the KX III. Search by:  Rack units - dcTrack looks for a cabinet with enough rack units open to accommodate the KX III...
  • Page 379: Add Kx Iii Devices To Dctrack

    Appendix C: Managing KX III in dcTrack  Make and model - dcTrack looks for a cabinet with enough available space in the cabinet based on the KX III's dimensions, connectors, and so on See Capacity Management - Locating and Reserving Cabinet Space for an Item in dcTrack Help.
  • Page 380: Import Kx Iii Devices Into Dctrack

    Import KX III Devices into dcTrack If you are adding a large number of KX IIIs, complete the 02_Items_-_All_Other_Classes_for_3.x.xls spreadsheet, which is provided by Raritan, with the KX III information, then import the ® spreadsheet into dcTrack using the Import Wizard.
  • Page 381: Build Data And Power Circuits For The Kx Iii

    Appendix C: Managing KX III in dcTrack Note that entire cabinets, along with the items in the cabinet and their connections and child devices, can also be cloned. So if you added a KX III to a cabinet and use the same cabinet configuration throughout your data center, you can clone the cabinet.
  • Page 382: Visualize The Kx Iii In A Cabinet Elevation And On The Floor Map

    Appendix C: Managing KX III in dcTrack Visualize the KX III in a Cabinet Elevation and on the Floor Map ® When you add the KX III to dcTrack , you place it in a cabinet. Provided the data center location the cabinet belongs to has a floor map associated with it, and the cabinet the KX III is housed in is linked to a cabinet object on the floor map, you can access the floor map from the KX III page in dcTrack.
  • Page 383: Managing The Kx Iii Lifecycle

    Appendix C: Managing KX III in dcTrack See Locate an Item on the Floor Map and Items List (Web Client) in dcTrack Help. You can also view the KX III in the cabinet elevation from the floor map. See Cabinet Elevations - Floor Map (Web Client) in dcTrack Help. Managing the KX III Lifecycle Once the KX III is installed, manage its lifecycle in your data center.
  • Page 384: Decommission A Kx Iii To Storage

    Appendix C: Managing KX III in dcTrack Decommission a KX III to Storage Submit a request to decommission the KX III to storage if you plan to temporarily move it to an off-site location. See Submit a Request to Decommission an Item to Storage in dcTrack Help.
  • Page 385: Appendix D Specifications

    Appendix D Specifications In This Chapter Hardware ....................373 Software....................395 Hardware KX III Dimensions and Physical Specifications Dominion KX Description Power & Dimensions Weight Operating Humidity III model heat (WxDxH) temp dissipation  8 server DKX3-108 Dual Power 17.3" x 8.60lbs 0º...
  • Page 386 Appendix D: Specifications Dominion KX Description Power & Dimensions Weight Operating Humidity III model heat (WxDxH) temp dissipation port for use at the rack  32 server DKX3-232 Dual Power 17.3" x 9.08lbs 0º - 45º C 0-85 % ports 110V/240V, 13.15'' x 50-60Hz...
  • Page 387 Appendix D: Specifications Dominion KX Description Power & Dimensions Weight Operating Humidity III model heat (WxDxH) temp dissipation use at the rack  32 server DKX3-832 Dual Power 17.3" x 9.96lbs 0º - 45º C 0-85 % ports 110V/240V, 13.15'' x 50-60Hz 1.73'' ...
  • Page 388: Kx Iii Supported Target Server Video Resolutions

    Appendix D: Specifications KX III Supported Target Server Video Resolutions When using digital CIMs, you set the target's video resolution to match your monitor's native display resolution. The native display resolution is set when configuring ports for digital CIMs (see Configure the CIM Target Settings (on page 107)).
  • Page 389 Appendix D: Specifications  1152x864@60Hz  1152x864@70Hz  1152x864@75Hz  1152x864@85Hz  1152x870@75.1Hz  1280x720@60Hz  1280x960@60Hz  1280x960@85Hz  1280x1024@60Hz  1280x1024@75Hz  1280x1024@85Hz  1360x768@60Hz  1366x768@60Hz  1368x768@60Hz  1400x1050@60Hz  1440x900@60Hz  1600x1200@60Hz  1680x1050@60Hz  1920x1080@60Hz ...
  • Page 390: Kx Iii Supported Local Port Dvi Resolutions

    KX III. Note: Due to the multiplicity of server manufacturers and types, OS versions, video drivers, and so on, as well as the subjective nature of video quality, Raritan cannot guarantee performance across all distances in all environments.
  • Page 391: Supported Computer Interface Module (Cims) Specifications

    Appendix D: Specifications Supported Computer Interface Module (CIMs) Specifications Digital CIMs support Display Data Channels (DDC) and Enhanced Extended Display Identification Data (E-EDID). Note: Both plugs must be plugged in for the HDMI and DVI CIMs. CIM model Description Dimensions Weight (WxDxH) ...
  • Page 392 Appendix D: Specifications CIM model Description Dimensions Weight (WxDxH)  1.7" x 3.5" x 0.8"  0.25lb D2CIM-DVUSB-DP Digital CIM that provides digital-to-analog conversion and  43 x 90 x 19mm  0.11kg support for:  BIOS virtual media  Smartcard/CAC ...
  • Page 393: Supported Digital Video Cims For Mac

    Appendix D: Specifications CIM model Description Dimensions Weight (WxDxH)  1.3" x 3.0" x 0.6"  0.20lb DCIM-PS2 CIM for PS2  33 x 76 x 15mm  0.09kg  1.3" x 3.0" x 0.6"  0.20lb DCIM-USBG2 CIM for USB and Sun USB ...
  • Page 394: Digital Cim Timing Modes

    Appendix D: Specifications If the Mac’s HDMI or DisplayPort video has a mini connector, a passive adapter cable may be required to connect to the full sized HDMI and DisplayPort plugs on the digital CIMs. Alternatively, use the Mac VGA adapter with the D2CIM-VUSB or D2CIM-DVUSB.
  • Page 395: Dvi Compatibility Mode

    Appendix D: Specifications Digital CIM Established Modes  720x400@70Hz IBM, VGA  640x480@60Hz IBM, VGA  ® 640x480@67Hz Apple Mac  640x480@72Hz VESA  640x480@75Hz VESA  800x600@56Hz VESA  800x600@60Hz VESA  800x600@72Hz VESA  800x600@75Hz VESA  832x624@75Hz Apple Mac II ...
  • Page 396: Supported Remote Connections

    Appendix D: Specifications Supported Remote Connections Remote Details connection Network 10BASE-T, 100BASE-T, and 1000BASE-T (Gigabit) Ethernet Protocols TCP/IP, UDP, SNTP, HTTP, HTTPS, RADIUS, LDAP/LDAPS Network Speed Settings KX III network speed setting Network Auto 1000/Full 100/Full 100/Half 10/Full 10/Half switch port Highest 1000/Full KX III:...
  • Page 397: Dell Chassis Cable Lengths And Video Resolutions

    KX III and LAN Switch to Autodetect (recommended), or set both to a fixed speed/duplex such as 100MB/s/Full. Dell Chassis Cable Lengths and Video Resolutions In order to maintain video quality, Raritan recommends using the following cable lengths and video resolutions when you are connecting to ®...
  • Page 398 Raritan device.  CCID Requirements If the Raritan D2CIM-DVUSB VM/CCID is not recognized as a smart card reader by your Linux target, you may need to update the CCID driver version to 1.3.8 or above and update the driver configuration file (Info.plist).
  • Page 399: Supported Smart Card Readers

    ® client, the following requirements must be met to use smart card readers with the Raritan device. Note: User login to client, on smart card insertion, may take longer when 1 or more KVM sessions are actively in place to targets. As the login process to these targets is also under way.
  • Page 400: Unsupported Smart Card Readers

    SCM Microsystems firmware v5.25. Unsupported Smart Card Readers This table contains a list of readers that Raritan has tested and found not to work with the Raritan device, therefore they are unsupported. If a smart card reader does not appear in the supported smart card readers table or in the unsupported smart card readers table, Raritan cannot guarantee it will function with the device.
  • Page 401: Audio Playback And Capture Recommendations And Requirements

    Appendix D: Specifications Audio Playback and Capture Recommendations and Requirements Audio Level  Set the target audio level to a mid-range setting. ® For example, on a Windows client, set the audio to 50 or lower. This setting must be configured through the playback or capture audio device, not from the client audio device control.
  • Page 402: Number Of Supported Audio/Virtual Media And Smartcard Connections

    Appendix D: Specifications In practice, the bandwidth used when an audio device connects to a target is higher due to the keyboard and video data consumed when opening and using an audio application on the target. A general recommendation is to have at least a 1.5MB connection before running playback and capture.
  • Page 403: Certified Modems

    KX III Local Console functions. For more information about non-US keyboards, see Informational Notes (on page 399). Note: Raritan strongly recommends that you use system-config-keyboard to change languages if you are working in a Linux environment. Language Regions Keyboard layout...
  • Page 404: Mac Mini Bios Keystroke Commands

    Appendix D: Specifications Language Regions Keyboard layout Danish Denmark Danish Swedish Sweden Swedish Hungarian Hungary Hungarian Slovenian Slovenia Slovenian Italian Italy Italian Spanish Spain and most Spanish Spanish speaking countries Portuguese Portugal Portuguese Mac Mini BIOS Keystroke Commands ® The following BIOS commands have been tested on Intel-based Mac ®...
  • Page 405: Using A Windows Keyboard To Access Mac Targets

    Appendix D: Specifications Keystroke Description Virtual Media CIM Dual Virtual Mac Lion Server Media CIM HDMI CIM button optical disc Press N during Start up from a startup compatible network server (NetBoot) Press T during Start up in Target Disk startup mode Press Shift during...
  • Page 406 KX III (Raritan This port is used to discover other Dominion devices and for KVM-over-IP) communication between Raritan devices and systems, including Protocol, CC-SG for devices that CC-SG management is available. Configurable Port By default, this is set to Port 5000, but you may configure it to use any 5000 TCP port not currently in use.
  • Page 407: Software

    Appendix D: Specifications Software Supported Operating Systems, Browsers and Java Versions Operating Systems Browsers Java Windows 10 Windows Edge Java 1.7 or later for VKC ® Internet Explorer Java 1.8.0_40 or Chrome 46 later for VKCs ® Firefox ® ® Windows 7 Home Premium SP1 64-bit Internet Explorer...
  • Page 408 Certain versions of Safari block Java for security reasons. Since Java is ® required to use KX III, Raritan recommends you use Firefox instead. Additionally, you may be required to navigate through a number of messages. Select 'Do Not Block' if these messages are displayed.
  • Page 409: Virtual Kvm Client (Vkc), Vkcs, And Active Kvm Client (Akc) Requirements

    Appendix D: Specifications Virtual KVM Client (VKC), VKCS, and Active KVM Client (AKC) Requirements ® Microsoft .NET 4.0 (or later) is required to use KX III with the Microsoft ® Windows -based Active KVM Client (AKC). ™ Java 1.7 or 1.8 is required to use the Java-based . Java 1.8.0_40 is required to use the VKCS.
  • Page 410: Multi-Language Keyboard Jre Requirement

    Appendix D: Specifications ™ ® Note that a JRE plug-in is available for the Windows 32-bit and 64-bit operating systems. Java Runtime Environment (JRE) Notes (on page 399) for additional information. Multi-Language Keyboard JRE Requirement In order for multi-language keyboards to work in the KX III and Virtual ™...
  • Page 411: In This Chapter Overview

    Help link in the KX III Remote Console interface. Note: Some topics in this section reference other multiple Raritan appliances because various appliances are impacted by the information. Java Runtime Environment (JRE) Notes...
  • Page 412: Java Not Loading Properly On Mac

    Appendix E: Informational Notes c. Deselect the Enable Caching checkbox if it is already checked. d. Click OK. 4. To clear the Java cache: a. From the Temporary Files Settings dialog, click the Delete Files button. The Delete Temporary Files dialog appears. b.
  • Page 413: Ipv6 Support Notes

    Appendix E: Informational Notes IPv6 Support Notes Operating System IPv6 Support Notes Java ™ Java 1.7 supports IPv6 for the following:  ™ Solaris 10 (and later)  ® Linux kernel 2.1.2 (and later)/RedHat 6.1 (and later)  Solaris 10 (and later) ...
  • Page 414: Dual Stack Login Performance Issues

    Appendix E: Informational Notes Dual Stack Login Performance Issues If you are using the KX III in a dual stack configuration, it is important you configured the domain system (DNS) correctly in the KX III in order to avoid delays when logging in. Tips for Adding a Web Browser Interface (on page 132) for information on configuring your DNS in KX III.
  • Page 415: Windows 2000 Composite Usb Device Behavior For Virtual Media

    As a result, the “Safely Remove Hardware” system tray icon does not appear for drives mapped by the D2CIM-VUSB and a warning message may appear when disconnecting the device. Raritan has not observed any problems or issues from this message, however.
  • Page 416: Target Video Picture Not Centered (Mouse Out Of Synch)

    Appendix E: Informational Notes Target Video Picture Not Centered (Mouse Out of Synch) At certain resolutions when using an HDMI or DVI CIM with the KX III:  The video display may not be centered properly - black rectangles can be seen at the edges of the screen ...
  • Page 417: Virtual Media Via Vkc And Akc In A Windows Environment

    Appendix E: Informational Notes Virtual Media via VKC and AKC in a Windows Environment Windows XP ® operating system administrator and standard user ® privileges vary from those of the Windows Vista operating system and ® the Windows 7 operating system. When enabled in Vista or Windows 7, User Access Control (UAC) provides the lowest level of rights and privileges a user needs for an application.
  • Page 418: Virtual Media Not Refreshed After Files Added

    Appendix E: Informational Notes Virtual Media Support on Windows 7, Windows 2008 and Windows XP Targets Virtual media is not supported on a Windows 7, Windows 2008 or Windows XP target server when connecting via VKC and AKC from Windows 2008 or Windows 2012. Virtual Media Not Refreshed After Files Added After a virtual media drive has been mounted, if you add a file(s) to that drive, those files may not be immediately visible on the target server.
  • Page 419: Virtual Media Connection Failures Using High Speed For Virtual Media Connections

    Appendix E: Informational Notes 2. Restart the target. Virtual Media Connection Failures Using High Speed for Virtual Media Connections Under certain circumstances it may be necessary to select the "Use Full Speed for Virtual Media CIM" when a target has problems with "High Speed USB"...
  • Page 420 The USB Profile Menu selections are configurable via the Console Device Settings > Port Configuration page. Should none of the standard USB profiles provided by Raritan meet your target server requirements, Raritan Technical Support can work with you to arrive at a solution tailored for that target. Raritan recommends that you do the following: 1.
  • Page 421: Changing A Usb Profile When Using A Smart Card Reader

    Appendix E: Informational Notes Changing a USB Profile when Using a Smart Card Reader There may be certain circumstances under which you will need to change the USB profile for a target server. For example, you may need to change the connection speed to "Use Full Speed for Virtual Media CIM"...
  • Page 422: Black Stripe/Bar(S) Displayed On The Local Port

    2. If using a digital CIM, then change the Display Native Resolution on the Port Configuration page to another resolution, or 3. If using the HDMI CIM, use the DVI Compatibility Mode. Contact Raritan Technical Support for additional assistance. Sun Composite Synch Video ™...
  • Page 423: Keyboard Notes

    Appendix E: Informational Notes Keyboard Notes French Keyboard Caret Symbol (Linux Clients Only) The Virtual KVM Client (VKC) do not process the key combination of Alt ® Gr + 9 as the caret symbol (^) when using French keyboards with Linux clients.
  • Page 424: Keyboard Language Preference (Fedora Linux Clients)

    ® Because the Sun on Linux has problems generating the correct KeyEvents for foreign-language keyboards configured using System Preferences, Raritan recommends that you configure foreign keyboards using the methods described in the following table. Language Configuration method US Intl Default...
  • Page 425: Macros Not Saving On Linux Targets

    Appendix E: Informational Notes Note: The Keyboard Indicator should be used on Linux systems using Gnome as a desktop environment. When using a Hungarian keyboard from a Linux client, the Latin letter U with Double Acute and the Latin letter O with Double Acute work only with JRE 1.6 (and later).
  • Page 426: Mouse Notes

    Appendix E: Informational Notes Mac Keyboard Keys Not Supported for Remote Access ® ® When a Mac is used as the client, the following keys on the Mac ™ ™ keyboard are not captured by the Java Runtime Environment (JRE ...
  • Page 427: Audio

    Features that May Interrupt an Audio Connection If you use any of the following features while connected to an audio device, your audio connection may be interrupted. Raritan recommends you do not use these features if you are connected to an audio device: ...
  • Page 428: Smart Card Notes

    “Version Unknown”. Moving Between Ports on a Device If you move a between ports on the same Raritan device and resume management within one minute, CC-SG may display an error message. If you resume management, the display will be updated.
  • Page 429: In This Chapter General Faqs

    Appendix F Frequently Asked Questions In This Chapter General FAQs..................417 Remote Access ..................419 Universal Virtual Media................422 Bandwidth and KVM-over-IP Performance ...........424 IPv6 Networking ..................428 Servers ....................429 Blade Servers ..................430 Installation .....................432 Local Port - KX IIII .................434 Extended Local Port ................435 Dual Power Supplies ................436 Intelligent Power Distribution Unit (PDU) Control........436 Ethernet and IP Networking ..............437...
  • Page 430 OS-independent; users can troubleshoot and reconfigure servers even when servers are down. At the rack, Dominion KX III provides the same functionality, convenience, and space and cost savings as traditional analog KVM switches. However, Dominion KX III also integrates the industry’s highest performing KVM-over-IP...
  • Page 431: Remote Access

    How large is the Dominion KX III? Dominion KX III is only 1U high (except the KX3-864 and KX3-464, which are 2U), fits in a standard 19" rack mount and is only 11.4" (29 cm) deep.
  • Page 432 "ports." The local port can the local port? access the same server using the PC-Share feature. In order to access Dominion KX III Because Dominion KX III is completely from a client, what hardware, Web-accessible, it doesn’t require customers...
  • Page 433 Dominion KX access Dominion KX III is approximately 500KB III? How long does it take to in size. The following chart describes the time retrieve? required to retrieve Dominion KX III’s applet at different network speeds: 100Mbps Theoretical .05 seconds...
  • Page 434: Universal Virtual Media

    How do I access servers You can access servers at the rack or via connected to Dominion KX III if the modem. network ever becomes Dominion KX III offers a dedicated modem port unavailable? for attaching an external modem. Universal Virtual Media Question...
  • Page 435 Appendix F: Frequently Asked Questions Question Answer What is required for virtual media? A Dominion KX III virtual media CIM is required. There are two VGA-based CIMs: a D2CIM-VUSB or D2CIM-DVUSB. The D2CIM-VUSB has a single USB connector and is for customers who will use virtual media at the OS level.
  • Page 436: Bandwidth And Kvm-Over-Ip Performance

    Appendix F: Frequently Asked Questions Question Answer Why would I use a USB profile? USB profiles are most often required at the BIOS level where there may not be full support for the USB specification when accessing virtual media drives. However, profiles are sometimes used at the OS level, for example, for mouse synchronization for Mac and Linux servers.
  • Page 437 Appendix F: Frequently Asked Questions Question Answer How is bandwidth used in Dominion KX III offers totally new video KVM-over-IP systems? processing that provides flexible, high performance video, efficient use of bandwidth and anytime/anywhere access via LAN, WAN or Internet.
  • Page 438 Appendix F: Frequently Asked Questions Question Answer What factors affect bandwidth? There are many factors that determine how much bandwidth will be used. The primary factor, noted above, is the amount of change in the target server’s video display. This is dependent on the user’s task and actions.
  • Page 439 Appendix F: Frequently Asked Questions Question Answer How do I optimize performance KX III provides a variety of settings in our and bandwidth? remote clients for the user to optimize bandwidth and performance. The default settings will provide an at-the-rack level of performance in standard LAN/WAN environments with economical use of bandwidth.
  • Page 440: Ipv6 Networking

    Appendix F: Frequently Asked Questions Question Answer What is the maximum remote (over The Dominion KX III is the first and only IP) video resolution supported? KVM-over-IP switch to support full high definition (HD) remote video resolution – 1920x1080 at frame rates up to 30 frames per second with digital audio.
  • Page 441: Servers

    Windows server to operate? KVM infrastructure to always be available in any scenario whatsoever (as they will likely need to use the KVM infrastructure to fix problems), Dominion KX III is designed to be completely independent from any external server.
  • Page 442: Blade Servers

    What comes in the Dominion KX III The following is included: (1) Dominion KX III box? appliance, (2) Quick Setup Guide, (3) standard 19" rack mount brackets, (4) user manual CD-ROM, (6) localized AC line cord and (7) warranty certificate and other documentation.
  • Page 443 With the Dominion KX III, you don’t have to use these hotkeys. Just click on the name of the blade server, and the Dominion KX III will automatically switch to that blade without the explicit use of the hotkey.
  • Page 444: Installation

    Installation Question Answer Besides the appliance itself, what Each server that connects to Dominion KX III do I need to order from Raritan to requires a Dominion or Paragon computer install Dominion KX III? interface module (CIM), an adapter that connects directly to the keyboard, video and mouse ports of the server.
  • Page 445 How many servers can be Dominion KX III models range from 8, 16 or 32 connected to each Dominion KX III server ports in a 1U chassis, to 64 server ports appliance? in a 2U chassis.
  • Page 446: Local Port - Kx Iiii

    Raritan’s Dominion SX line of secure console servers. Dominion SX offers more serial functionality at a better price point than Dominion KX III. This SX is easy to use, configure and manage, and can be completely integrated with a Dominion series deployment.
  • Page 447: Extended Local Port

    This means that: If the Dominion KX III is configured to interact with an external RADIUS, LDAP or Active Directory ® server, users attempting to access the local port will authenticate against the same server.
  • Page 448: Dual Power Supplies

    50–60 Hz. If a power supply or input fails, will The Dominion KX III front panel LED will notify I be notified? the user of a power failure. An entry will also be sent to the audit log and displayed on the KX remote client user interface.
  • Page 449: Ethernet And Ip Networking

    These come in many outlet, connector and amp variations. Note that you should not connect the PM series of power strips to the Dominion KX III as these power strips do not provide outlet-level switching. How many PDUs can be...
  • Page 450 Appendix F: Frequently Asked Questions Question Answer Can I access Dominion Yes. Dominion KX III not only uses standard KX III over a wireless connection? Ethernet, but also very conservative bandwidth with very high quality video. Thus, if a wireless...
  • Page 451: Local Port Consolidation, Tiering And Cascading

    Appendix F: Frequently Asked Questions Question Answer I’m having problems connecting to The Dominion KX III relies on your LAN/WAN the Dominion KX III over my IP network. Some possible problems include: network. What could be the  Ethernet auto-negotiation. On some...
  • Page 452 Question Answer How do I physically connect To physically connect multiple KX III multiple Dominion KX III appliances appliances together for consolidated local together into one solution? access, you can connect the Tiering ports of multiple "tiered" (or "cascaded") KX III switches to a "base"...
  • Page 453 Can I connect an existing analog Yes. Analog KVM switches can be connected KVM switch to Dominion KX III? to one of Dominion KX III’s server ports. Simply use a USB computer interface module (CIM), and attach it to the user ports of the existing analog KVM switch.
  • Page 454: Computer Interface Modules (Cims)

    Dominion KX III, Paragon CIMs transmit video at a distance of up to 150 feet (46 m), the same as Dominion KX III CIMs – not at 1,000 feet (304 m), as they do when connected to Paragon.
  • Page 455 128-bit encryption, both in its SSL communications as well as its own data stream. Literally no data is transmitted between remote clients and Dominion KX III that is not completely secured by encryption. Does Dominion KX III support AES Yes. The Dominion KX III utilizes the Advanced encryption as recommended by Encryption Standard (AES) for added security.
  • Page 456: Smart Cards And Cac Authentication

    Yes. Customers can upload self-signed or certificate to the Dominion KX IIKX certificate authority-provided digital certificates IIII? to the Dominion KX III for enhanced authentication and secure communication. Does the KX III support a Yes. For government, military and other...
  • Page 457: Manageability

    CommandCenter? CommandCenter. For the local port, connect a compatible smart card reader to the USB port of the Dominion KX III. Manageability Question Answer Can Dominion KX III be remotely Yes.
  • Page 458: Documentation And Support

    Can Dominion KX III integrate with Yes. In addition to Dominion KX III’s own syslog? internal logging capabilities, Dominion KX III can send all logged events to a centralized syslog server.
  • Page 459: Miscellaneous

    DisplayPort video standards are supported with the digital video CIMs. How long is the hardware warranty The Dominion KX III comes with a standard for the KX III? two-year warranty, which can be extended to 5 years of warranty coverage.
  • Page 460 In general, KX II customers can continue to How do I migrate from the use their existing switches for many years. As Dominion KX II to Dominion KX III? their data centers expand, customers can purchase and use the new KX III models.
  • Page 461: Index

    Index AKC Supported Operating Systems • 267 Allow Cookies • 267 Allow Pop-Ups • 9 Apple Mac Mouse Settings • 35 AC Power • 37 Apply a Native Display Resolution to Other About the Cat5 Reach DVI • 354 CIMs • 107, 109 Absolute Mouse Mode •...
  • Page 462 Index Configure KX III for Dual LAN Failover Mode • 40, 90, 98 Configure KX III for Dual LAN Isolation Mode • 40, 42, 90, 92 Local User Port (Local Console) • 38 Configure Local Console Scan Settings • 297, Calibrating Color •...
  • Page 463 188, 190, 247, 249 Documentation and Support • 446 Creating a KX III Backup and Restore File • Dominion KX III User Station • 1, 7, 8, 19, 50, Creating a New Attribute • 251 Dominion KX3-832 • 4 Creating Port Groups • 188, 189 Dominion KX3-864 •...
  • Page 464 Index From Microsoft Active Directory • 250 Full Screen Mode • 302 E. Connect Target Servers to KX III • 39 Editing rciusergroup Attributes for User Members • 254 G. Connect the Modem (Optional) • 39 Enable AKC Download Server Certificate General FAQs •...
  • Page 465 Index Intelligent Power Distribution Unit (PDU) KX II-to-KX III Unsupported Backup/Restore Control • 436 File Settings and Functions • 214, 215, 216 Interface Command • 239 KX3-832 Features • 5 Introduction • 1 KX3-832 Photos • 4 IPv6 Command • 240 KX3-864 Features •...
  • Page 466 RADIUS Communication Exchange Number of Supported Audio/Virtual Media and Specifications • 86 Smartcard Connections • 390 Raritan Client Navigation when Using Dual Number of Supported Virtual Media Drives • Video Port Groups • 248 Rear Mount • 32 Numeric Keypad • 411 Rebooting the KX III •...
  • Page 467 Index Recommended Minimum Virtual KVM Client Security Issues • 238 (VKC) Requirements • 271 Security Management • 192 Refreshing the Screen • 284 Security Settings • 72, 192 Relationship Between Users and Groups • 65 Security Warnings and Validation Messages • Remote Access •...
  • Page 468 Index SSH Access from a Windows PC • 233 Supported Tasks Via Virtual Media • 259 SSH Connection to the KX III • 233 Supported Virtual Media Operating Systems • SSL Certificates • 1, 10, 53, 205 Standard Mouse Mode • 291, 325, 326 Supported Virtual Media Types •...
  • Page 469 Index Unsupported and Limited Features on Tiered Virtual KVM Client Version Not Known from Targets • 150 CC-SG Proxy Mode • 416 Unsupported Smart Card Readers • 349, 388 Virtual Media • 257, 302 Update a Smart Card Reader • 305 Virtual Media Connection Failures Using High Updating the LDAP Schema •...
  • Page 470: United Kingdom

    For CommandCenter Secure Gateway: Press 6, then Press 2 Phone: +31-10-2844040 Fax: 732-764-8887 Email: tech.europe@raritan.com Email for CommandCenter NOC: tech-ccnoc@raritan.com Email for all other products: tech@raritan.com United Kingdom Monday - Friday 8:30 a.m. to 5 p.m. GMT China Phone +44(0)20-7090-1390...

Table of Contents