Contents Chapter 1 Introduction What's New in Help........................1 Package Contents.......................... 2 KX III Device Photos and Features....................2 Hardware ..........................2 Software..........................3 Dominion KX3-832 ......................4 Dominion KX3-864 ......................6 Supported Number of Ports and Remote Users per Model ..........7 KX III Remote/Local Console Interfaces and User Station............
Page 4
Contents KX III Local Console Interface ..................... 29 Chapter 4 KX III Administration Overview ............................30 KX III Installation and Configuration .................... 31 Rack Mounting........................31 Factory Default Login Information ..................32 Step 1: Configuring Network Firewall Settings ..............33 Step 2: Configuring KVM Target Servers ................33 Step 3: Connecting the Equipment..................36 Step 4: Configuring the KX III ....................39 Step 5: Launching the KX III Remote Console..............50...
Page 5
Permissions and Dual Video Port Group Access ............243 Example Dual Port Video Group Configuration...............244 Dual Port Video Configuration Steps................245 Raritan Client Navigation when Using Dual Video Port Groups........248 Direct Port Access and Dual Port Video Groups.............249 Dual Port Video Groups Displayed on the Ports Page............249 Updating the LDAP Schema......................249...
Page 6
Contents CIMs Required for Virtual Media ..................258 Mounting Local Drives .......................259 Notes on Mounting Local Drives..................259 Supported Tasks Via Virtual Media ...................259 Supported Virtual Media Types ....................260 Conditions when Read/Write is Not Available ..............260 Supported Virtual Media Operating Systems ................260 Number of Supported Virtual Media Drives ................261 Connecting and Disconnecting from Virtual Media..............261 Access a Virtual Media Drive on a Client Computer ............261...
Page 7
Contents Optimize for: Selections....................275 Video Mode........................276 Noise Filter........................277 Connection Information......................278 Access and Copy Connection Information ..............278 USB Profiles..........................279 Keyboard............................280 Send Ctrl+Alt+Del Macro....................280 Send LeftAlt+Tab (Switch Between Open Windows on a Target Server).......280 Setting CIM Keyboard/Mouse Options ................280 Send Text to Target......................280 Keyboard Macros ......................281 Build a New Macro ......................281 Import Macros........................282...
Page 8
Adjusting Capture and Playback Buffer Size (Audio Settings)........313 Power Control Using VKC, VKCS, and AKC ................314 Version Information - Virtual KVM Client ...................314 Chapter 8 Dominion KX III User Station Overview ............................316 User Station Photo and Features ....................317 Operating the User Station ......................317 Chapter 9 Mobile KVM Client (MKC) Help Remotely Access Targets Using a Mobile Device..............319...
Page 9
Contents Discovering Devices on the Local Subnet...............338 Discovering Devices on the KX III Subnet...............339 Chapter 11 KX III Local Console Overview ............................341 Accessing a Target Server ......................341 Local Console Video Resolution Behavior.................342 Simultaneous Users........................342 Local Port Hot Keys and Connect Keys..................342 Return to the Local Console from a Target Device - Default Hot Key......343 Local Port Auto-Sense (Video Refresh) - Default Hot Key..........343 Connect Key Examples ....................343...
Page 10
Contents Import KX III Devices into dcTrack ..................368 Clone Existing KX III Devices ..................368 Build Data and Power Circuits for the KX III ................369 Submit an Add Item Request for the KX III................369 Manage the KX III Work Order ....................369 Visualize the KX III in a Cabinet Elevation and on the Floor Map ..........370 Managing the KX III Lifecycle ....................371 Move a KX III ........................371...
Page 11
Contents Java Not Loading Properly on Mac .................400 IPv6 Support Notes........................401 Operating System IPv6 Support Notes ................401 AKC Download Server Certification Validation IPv6 Support Notes .......401 Dual Stack Login Performance Issues..................402 CIM Notes ..........................402 Windows 3-Button Mouse on Linux Targets..............402 Windows 2000 Composite USB Device Behavior for Virtual Media........403 Target Video Picture Not Centered (Mouse Out of Synch) ..........404 Virtual Media Notes........................404...
Page 12
Contents Appendix F Frequently Asked Questions General FAQs ..........................417 Remote Access..........................419 Universal Virtual Media ......................422 Bandwidth and KVM-over-IP Performance................424 IPv6 Networking.........................428 Servers............................429 Blade Servers ..........................430 Installation..........................432 Local Port - KX IIII........................434 Extended Local Port........................435 Dual Power Supplies........................436 Intelligent Power Distribution Unit (PDU) Control ..............436 Ethernet and IP Networking.......................437 Local Port Consolidation, Tiering and Cascading..............439 Computer Interface Modules (CIMs)..................442...
Introduction Chapter 1 The Dominion KX III is an enterprise-class, secure, KVM-over-IP switch that provides 1, 2, 4 or 8 users with remote BIOS-level control of 8 to 64 servers. KX III comes with standard features such as DVI/HDMI/DisplayPort digital and analog video, audio, virtual media, smart card/CAC, blade server support, and mobile access.
Chapter 1: Introduction Package Contents Each KX III ships as a fully-configured stand-alone product in a standard 1U (2U for KX3-864) 19" rackmount chassis. Each KX III device ships with the following contents: 1 - KX III device 1 - KX III Quick Setup Guide ...
Chapter 1: Introduction ® ® Remote access and power management from an iPhone or iPad Support for tiering in which a base KX III device is used to access multiple other tiered devices Multiple user capacity (1/2/4/8 remote users; 1 local user) ...
Integration with Raritan's CommandCenter Secure Gateway (CC-SG) management unit CC Unmanage feature to remove device from CC-SG control Support of Raritan PX1 and PX2 appliances Support for remote IP access from the new Dominion KX III User Station Dominion KX3-832 KX3-832 Photos...
Page 17
Chapter 1: Introduction KX3-832 Features Diagram key Dual Power AC 100V/240V Dual 10/100/1000 Ethernet access Local USB ports DVI-D port 32 KVM ports for UTP Cabling (Cat5/5e/6) Tier port for tiering devices Modem port for external modems...
Chapter 1: Introduction Dominion KX3-864 KX3-864 Photos KX3-864 Features Diagram key Dual Power AC 100V/240V Dual 10/100/1000 Ethernet access Local USB ports DVI-D port 64 KVM ports for UTP Cabling (Cat5/5e/6) Tier port for optional tiering devices...
Functions" on page 227) and KX III Local Console Interface (on page 29), respectively. The Dominion User Station provides an alternative interface for IP access to the KX III's target servers. See Dominion KX III User Station (on page 315).
KX III. KVM Client help is provided as part of KX III online help. Online help is accompanied by the KX III Quick Setup Guide, which can be found on the Raritan Firmware, Upgrades and Documentation page of Raritan's website (http://www.raritan.com/support/firmware-and-documentation).
If you have not already done so, install and configure KX III. See the KX III Quick Setup Guide that came with the KX III device or download it from the Raritan Support website http://www.raritan.com/support. Allow Pop-Ups Regardless of the browser you are using, you must allow pop-ups in order to launch the KX III Remote Console.
When logging in to KX III, Java 1.7 or 1.8 prompts you to validate KX III, and to allow access to the application. Raritan recommends installing an SSL certificate in each KX III device in order to reduce Java warnings, and enhance security. SSL Certificates...
Chapter 2: Get Started Using KX III Installing a Certificate You may be prompted by the browser to accept and validate the KX III's SSL certificate. Depending on your browser and security settings, additional security warnings may be displayed when you log in to KX III. It is necessary to accept these warnings to launch the KX III Remote Console.
Page 24
Chapter 2: Get Started Using KX III Note: If you are not prompted by the browser, manually select Tools > Internet Options to open the Internet Options dialog. 1. Click the Content tab. 2. Click Certificates. The Certificate Import Wizard opens and walks you through each step.
Chapter 2: Get Started Using KX III Example 2: Add the KX III to Trusted Sites and Import the Certificate In this example, the KX III's URL is added as a Trusted Site, and the Self Signed Certificate is added as part of the process. 1.
Page 26
Chapter 2: Get Started Using KX III Next, import the Certificate. 1. Open an IE browser, then log in to KX III. 2. Click More Information on the first Java ™ security warning. 3. Click View Certificate Details on the More Information dialog. You are prompted to install the certificate.
Chapter 2: Get Started Using KX III Converting a Binary Certificate to a Base64-Encoded DER Certificate (Optional) KX III requires an SSL certificate in either Base64-Encoded DER format or PEM format. If you are using an SSL certificate in binary format, you cannot install it. However, you can convert your binary SSL certificate.
Page 28
Chapter 2: Get Started Using KX III 3. Click "Copy to File...". 4. The Certificate Export Wizard opens. Click Next to start the Wizard. 5. Select "Base-64 encoded X.509" in the second Wizard dialog. 6. Click Next to save the file as a Base-64 encoded X.509. You can now install the certificate on your KX III.
Chapter 2: Get Started Using KX III Logging In to KX III Log in to your KX III Remote Console from any workstation with network ™ connectivity. Java 1.7 is required to use the Java-based Virtual KVM Client (VKC). Java 1.8.0_40 is required to use the VKCS. VKCs requires Java 1.8.0_40 or later.
Page 30
Chapter 2: Get Started Using KX III To add the KX III switches and user credentials to the User Station: 1. Power on and log in to the User Station. 2. Click Main Menu > User Station Configuration > 3. Enter and save the following information. ...
Access targets from either the Remote or Local console from one of the supported KVM clients. If you have the Dominion User Station, you can also use it to access targets. See Dominion KX III User Station (on page 315). Alternatively, access targets from your mobile device. See Mobile KVM Client (MKC) Help (on page 319).
Chapter 3: KX III Interface and Navigation KX III Remote Console Interface The KX III Remote Console is a browser-based graphical user interface that allows you to log in to KVM target servers and serial targets connected to the KX III and to remotely administer the KX III. The KX III Remote Console provides a digital connection to your connected KVM target servers.
Chapter 3: KX III Interface and Navigation Port Access Page (Remote Console Display) After a successful login, the Port Access page opens listing all ports along with their status and availability. Ports connected to KVM target servers (blades and standard servers) are displayed in blue.
Page 34
Chapter 3: KX III Interface and Navigation Blade Chassis - Port Access Page The blade chassis is displayed in an expandable, hierarchical list on the Port Access page, with the blade chassis at the root of the hierarchy and the individual blades labeled and displayed below the root. Use the Expand Arrow icon next to the root chassis to display the individual blades.
Page 35
Chapter 3: KX III Interface and Navigation View by Group Tab The View by Group tab displays blade chassis, 'standard' port groups, and dual video port groups. Click the Expand Arrow icon next to a group to view the ports assigned to the port group. View by Search Tab The View by Search tab allows you to search by port name.
Chapter 3: KX III Interface and Navigation Port Action Menu When you click a Port Name in the Port Access list, the Port Action menu appears. Choose the desired menu option for that port to execute it. Note that only currently available options, depending on the port's status and availability, are listed in the Port Action menu.
Page 37
Chapter 3: KX III Interface and Navigation Switch From Switch From - Switches from an existing connection to the selected port (KVM target server) This menu item is available only for KVM targets, and only when a Virtual KVM Client is opened. Note: This menu item is not available on the KX III Local Console.
Page 38
Chapter 3: KX III Interface and Navigation Note: This menu item is not available on the KX III Local Console. The only way to disconnect from the switched target in the Local Console is to use the hot key. Power On ...
Chapter 3: KX III Interface and Navigation Power Cycle Power Cycle - Power cycles the target server through the associated outlets This option is visible only when there are one or more power associations to the target, and when the user has permission to operate this service.
Chapter 3: KX III Interface and Navigation Left Panel The left panel of the KX III interface contains the following information. Note that some information is conditional - meaning it is displayed based on your role, features being used and so on. Conditional information is noted here.
Chapter 3: KX III Interface and Navigation Information Description When displayed? PowerIn1 Status of the power 1 Always outlet connection. Either on or off, or Auto-detect PowerIn2 Status of the power 2 Always outlet connection. Either on or off, or Auto-detect Configured As If you are using a tiering When the KX III is...
KX III Administration Chapter 4 In This Chapter Overview....................30 KX III Installation and Configuration ............31 Rack PDU (Power Strip) Outlet Control ..........54 USB Profiles ....................56 User Management ...................64 Device Management................90 Security Management................192 Maintenance ..................210 Diagnostics ....................222 KX III Local Console - Administration Functions ........227 Command Line Interface (CLI) ..............232 Dual Video Port Groups.................240 Updating the LDAP Schema..............249...
KX III Installation and Configuration See the KX III Quick Setup Guide that came with your device or download it from Raritan's Support website for a quick reference to the basic, bear minimum setup steps. Additional information and optional steps included here but not in the QSG include: ...
Chapter 4: KX III Administration Rear Mount The steps correspond to the numbers shown in the rear rackmount diagrams. 1. Secure the cable-support bar to the front end of the side brackets, near the side brackets' “ears,” using two of the included screws. 2.
Chapter 4: KX III Administration Password = raritan All lowercase. IP address = 192.168.0.192 Important: For backup and business continuity purposes, it is strongly recommended you create a backup administrator username and password, and keep that information in a secure location.
Page 46
Chapter 4: KX III Administration Mouse Settings Raritan recommends using Absolute Mouse Synchronization to minimize mouse settings on target servers. Additional Supported Mouse Settings (on page 34). In this mode, absolute coordinates are used to keep the client and target cursors in synch, even when the target mouse is set to a different acceleration or speed.
Page 47
If you do not set this profile, the mouse does synch in OS X. To do this, do one of the following: 1. Connect to the Mac target from the Raritan KVM Client. 2. Select USB Profile > Other Profiles > Mac OS-X (10.4.9 and later).
Chapter 4: KX III Administration 5. Select 'Mac OS-X (10.4.9) and later' from the Available box, then click Add to add it to the Selected box. 6. Click on 'Mac OS-X (10.4.9) and later' in the Selected box. This automatically adds it to the Preferred Profile drop-down. 7.
Page 49
Chapter 4: KX III Administration A: AC Power 1. Use the power cords that came with KX III. Use both cords with AC power outlets for dual-power failover protection. Optional For details on enabling power supply autodetection from the Remote Console, see Specify Power Supply Autodetection in online help.
Page 50
A single link DVI cable is used to connect to a local DVI monitor or keyboard tray (not included with the KX III). Connect to the DVI port on Raritan's T1700-LED or T1900-LED keyboard tray. Use a required DVI-D to VGA converter to connect to VGA monitors.
VGA monitor and secure it by tightening the screws. Note: The DVI-D to VGA converter is not included with the KX III. Contact Raritan Sales for information. E. Connect Target Servers to KX III 1. Connect the keyboard, mouse and video plugs on the CIM to the corresponding ports on the target server.
Page 52
Chapter 4: KX III Administration 3. Enter the old password raritan, then enter and reenter a new password. 4. Passwords can be up to 64 characters in length consisting of English alphanumeric characters and special characters. 5. Click Apply. 6. Click OK on the Confirmation page.
Page 53
Chapter 4: KX III Administration 5. Enter the IPv4 IP Address, if needed. The default IP address is 192.168.0.192. 6. Enter the IPv4 Subnet Mask. The default subnet mask is 255.255.255.0. 7. The LAN1 settings are applied to LAN2 if failover occurs. 8.
Page 54
Chapter 4: KX III Administration Global/Unique IP Address - this is the IP address assigned to KX III. Prefix Length - this is the number of bits used in the IPv6 address. Gateway IP Address. Select Router Discovery to locate a Global or Unique IPv6 address instead of a Link-Local subnet.
Page 55
Chapter 4: KX III Administration 2. Set the IP Auto Configuration to None in the IPv4 section. 3. Ensure the "Enable Automatic Failover" checkbox is not selected. 4. If needed, manually specify the network parameters by entering the Default Gateway and then complete the steps that follow. Alternatively, if you do not want to set a static IP, see Disable or Enable DHCP in KX III.
Page 56
Chapter 4: KX III Administration 9. Enter the LAN2 IPv4 Default Gateway and Subnet Mask. 10. Complete the IPv6 sections, if applicable. 11. Select the IP Auto Configuration. If None is selected, you must manually specify - Global/Unique IP Address - this is the IP address assigned to KX III.
Page 57
Chapter 4: KX III Administration 12. Select "Use the Following DNS Server Addresses" and enter the Primary DNS Server IP Address and Secondary DNS Server IP Address. The secondary addresse is used if the primary DNS server connection is lost due to an outage. Note: "Obtain DNS Server Address Automatically"...
Page 58
Chapter 4: KX III Administration Specify Power Supply Autodetection KX III provides dual power supplies. When both power supplies are used, KX III automatically detects them and notifies you of their status. Additionally, both the Powerln1 and Powerln2 Auto Detect checkboxes are automatically selected on the Power Supply Setup page.
Page 59
Chapter 4: KX III Administration Select the Powerln2 Auto Detect option if you are plugging power input into power supply number two. (The right-most power supply at the back of the device when you are facing rear of the device.) Click OK.
Page 60
Chapter 4: KX III Administration Configure Date/Time Settings The date and time settings impact SSL certificate validation if LDAPS is enabled. Configuring the date and time also ensures your audit logs will be timestamped correctly. There are two ways to do this: ...
Page 61
For additional information about CC-SG authentication, see the CommandCenter Secure Gateway User Guide, Administrator Guide, or Deployment Guide, which can be downloaded from the Support section of the Raritan website http://www.raritan.com. Supported Protocols To simplify management of usernames and passwords, the KX III provides the ability to forward authentication requests to an external authentication server.
3. You are always redirected to the IP address from HTTP to HTTPS. 4. Enter your username and password. Click Login. Tip: If you have a Dominion KX III User Station, you can use it to remotely access the KX III target servers. See...
Page 63
Chapter 4: KX III Administration Access and Control Target Servers Remotely The KX III Port Access page provides a list of all KX III ports. The page also lists all of the target servers connected to the KX III along with their status and availability.
Chapter 4: KX III Administration DKX3-808 Fast Switching DKX3-808 maintains the video connections to the servers, enabling faster connections to servers and faster switching between channels. Some Video Settings do not apply to DKX3-808 targets: Automatic Color Calibration Video Sensing: Best possible video mode/Quick sense video mode Disconnect from a Target Server To disconnect a target:...
The DCIM-SUSB performs a reset (power cycle). Verify that the characters are correct. Step 7: Create and Install an SSL Certificate Raritan strongly recommends you install your own SSL Certificate in each KX III device. ™ This security best practice reduces the number of Java warning messages, and avoids man-in-the-middle attacks.
Rack PDU (Power Strip) Outlet Control Overview You can control Raritan PX and RPC series rack PDU (power strip) outlets connected to the KX III through a D2CIM-PWR. Once connected to the KX III, the rack PDU and its outlets are controlled from the Powerstrip page, which is accessed by clicking on the Power menu at the top of the page.
Chapter 4: KX III Administration Association - The ports associated with the outlet If you have privileges, you can also control power from AKC, VKC, VKCs, and the Admin client. See Remote Power Management via Virtual KVM Client (VKC) or Active KVM Client (AKC) (see "Power Control Using VKC, VKCS, and...
To change settings in the BIOS menu or boot from a virtual media drive, depending on the target server model, a BIOS profile may be more appropriate. Should none of the standard USB profiles provided by Raritan work with a given KVM target, please contact Raritan Technical Support for assistance.
The current release of the KX III comes with the selection of USB profiles described in the following table. New profiles are included with each firmware upgrade provided by Raritan. As new profiles are added, they will be documented in the help.
Page 70
Chapter 4: KX III Administration USB profile Description BIOS Dell Optiplex 790 Use this profile for Dell Optiplex 790 when using Keyboard Keyboard Only Macros during BIOS operations. Only keyboard is enabled with this profile. Restrictions: Mouse is disabled. ...
Page 71
Chapter 4: KX III Administration USB profile Description BIOS Generic BIOS Generic Use this profile when Generic OS profile does not work on the BIOS. WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected. Restrictions: USB bus speed limited to full-speed (12 MBit/s) ...
Page 72
Chapter 4: KX III Administration USB profile Description BIOS Lenovo ThinkPad T61 BIOS Lenovo ThinkPad T61 and X61 (boot from virtual media) & X61 Use this profile to boot the T61 and X61 series laptops from virtual media. Restrictions: USB bus speed limited to full-speed (12 MBit/s) Generic The generic USB profile resembles the behavior of the original ®...
Page 73
Chapter 4: KX III Administration USB profile Description when using the Mac Boot Menu MAC OS X ® 10.4.9 (and later) Mac OS X version 10.4.9 (and later) This profile compensates the scaling of mouse coordinates introduced in recent versions of Mac OS X. Select this if the remote and local mouse positions get out of sync near the desktop borders.
Page 74
Chapter 4: KX III Administration USB profile Description Keyboard and Mouse (Type 2) first Mass Storage USB bus speed limited to full-speed (12 MBit/s) Virtual CD-ROM and disk drives cannot be used simultaneously WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected.
Chapter 4: KX III Administration Mouse Modes when Using the Mac Boot Menu When working with the "BIOS Mac" USB profile, to use the mouse in the Mac Boot Menu, you must use Single Mouse mode since Absolute Mouse Mode is not supported in the BIOS. To configure the mouse to work at the Boot menu: 1.
Chapter 4: KX III Administration User Management User Groups The KX III stores an internal list of all user profiles and user groups to determine access authorization and permissions. This information is stored internally in an encrypted format. All users must be authenticated to access KX III. KX III can be configured to authenticate users locally and/or remotely using LDAP/LDAPS or RADIUS.
Page 77
Chapter 4: KX III Administration User Group List User groups are used with local and remote authentication (via RADIUS or LDAP/LDAPS). It is a good idea to define user groups before creating individual users since, when you add a user, you must assign that user to an existing user group.
Page 78
Chapter 4: KX III Administration 2. Type a descriptive name for the new user group into the Group Name field (up to 64 characters). 3. Select the checkboxes next to the permissions you want to assign to all of the users belonging to this group. See Setting Permissions (on page 66) 4.
Page 79
Chapter 4: KX III Administration their own. Carefully consider granting these permissions. Permission Description Device Access Allows users and user groups with this While Under permission to directly access the KX III. The KX CC-SG III is accessed using an IP address when Local Management Access is enabled for the device in CC-SG.
Page 80
Chapter 4: KX III Administration Permission Description consistent across all devices. Setting Port Permissions For each server port, you can specify the access type the group has, as well as the type of port access to the virtual media and the power control. Please note that the default setting for all permissions is Deny.
Page 81
Chapter 4: KX III Administration VM access Power control access option Description Deny Deny power control to the target server Access Full permission to power control on a target server For blade chassis, the port access permission will control access to the URLs that have been configured for that blade chassis.
Page 82
Chapter 4: KX III Administration Use the IP ACL section of the Group page to add, insert, replace, and delete IP access control rules on a group-level basis. To add (append) rules: 1. Type the starting IP address in the Starting IP field. 2.
Page 83
Chapter 4: KX III Administration 2. Click Delete. 3. When prompted to confirm the deletion, click OK. Important: ACL rules are evaluated in the order in which they are listed. For instance, in the example shown here, if the two ACL rules were reversed, Dominion would accept no communication at all.
Chapter 4: KX III Administration 2. Click Delete. 3. When prompted to confirm the deletion, click OK. Users Users must be granted user names and passwords to gain access to the KX III. This information is used to authenticate users attempting to access your KX III.
Page 85
Chapter 4: KX III Administration 6. To activate the new user, leave the Active checkbox selected. Click View the KX III Users List The User List page displays a list of all users including their user name, full name, and user group. The list can be sorted on any of the columns by clicking on the column name.
Page 86
Chapter 4: KX III Administration Username - username for user logins and target connections Access From - IP address of client PC accessing the KX III Status - current Active or Inactive status of the connection To view users by port: ...
Page 87
Chapter 4: KX III Administration Logging Users Off the KX III (Force Logoff) If you are an administrator, you are able to log off any authenticated user who is logged on to the KX III. Users can also be disconnected at the port level.
Chapter 4: KX III Administration Authentication Settings Authentication is the process of verifying that a user is who he says he is. Once a user is authenticated, the user's group is used to determine his system and port permissions. The user's assigned privileges determine what type of access is allowed.
Page 89
Chapter 4: KX III Administration Implementing LDAP/LDAPS Remote Authentication Lightweight Directory Access Protocol (LDAP/LDAPS) is a networking protocol for querying and modifying directory services running over TCP/IP. A client starts an LDAP session by connecting to an LDAP/LDAPS server (the default TCP port is 389). The client then sends operation requests to the server, and the server sends responses in turn.
Page 90
LDAP database you want to begin searching for user information. Up to 64 characters can be used. An example base search value might be: cn=Users,dc=raritan,dc=com. Consult your authentication server administrator for the appropriate values to enter into these fields.
Page 91
Chapter 4: KX III Administration 11. If you entered a Distinguished Name for the Administrative User, you must enter the password that will be used to authenticate the Administrative User's DN against the remote authentication server. Enter the password in the Secret Phrase field and again in the Confirm Secret Phrase field (up to 128 characters).
Page 92
Chapter 4: KX III Administration 15. Select the Enable LDAPS Server Certificate Validation checkbox to use the previously uploaded root CA certificate file to validate the certificate provided by the server. If you do not want to use the previously uploaded root CA certificate file, leave this checkbox deselected.
Page 93
KX III policies and user group privileges that are applied locally to AD user groups. IMPORTANT: If you are an existing Raritan, Inc. customer, and have already configured the Active Directory server by changing the AD...
Page 94
Chapter 4: KX III Administration 4. From the KX III, enable and configure your AD server properly. See Implementing LDAP/LDAPS Remote Authentication (on page 77). Important Notes Group Name is case sensitive. The KX III provides the following default groups that cannot be changed or deleted: Admin and <Unknown>.
Page 95
Chapter 4: KX III Administration 8. The Timeout is recorded in seconds and default timeout is 1 second, but can be changed as required. The timeout is the length of time the KX III waits for a response from the RADIUS server before sending another authentication request. 9.
Page 96
Chapter 4: KX III Administration CHAP - With CHAP, authentication can be requested by the server at any time. CHAP provides more security than PAP.
Page 97
RADIUS Attribute: Filter-ID Attribute Type: String Attribute Value: Raritan:G{KVM_Admin} (where KVM_Admin is group name created locally on Dominion KVM Switch). Case sensitive. Configure Session Conditions (Date and Time) (Required) - Policy Elements > Session Conditions > Date and Time ...
Page 98
Your remote RADIUS server can provide these user group names by returning an attribute, implemented as a RADIUS FILTER-ID. The FILTER-ID should be formatted as follows: Raritan:G{GROUP_NAME} where GROUP_NAME is a string denoting the name of the group to which the user belongs.
Page 99
Chapter 4: KX III Administration Attribute Data Log out Accounting-Request(4) Acct-Status (40) Stop(2) - Stops the accounting NAS-Port-Type (61) VIRTUAL (5) for network connections. NAS-Port (5) Always 0. NAS-IP-Address (4) The IP address for the KX III. User-Name (1) The user name entered at the login screen. Acct-Session-ID (44) Session ID for accounting.
Page 100
Chapter 4: KX III Administration User Authentication Process Remote authentication follows the process specified in the flowchart below:...
Chapter 4: KX III Administration Changing a Password To change your KX III password: 1. Choose User Management > Change Password. The Change Password page opens. 2. Type your current password in the Old Password field. 3. Type a new password in the New Password field. Retype the new password in the Confirm New Password field.
Chapter 4: KX III Administration Device Management Network Settings Choose Failover or Isolation Mode Configure KX III for Dual LAN Failover Mode (on page 40) Configure KX III for Dual LAN Isolation Mode (on page 42) Configure KX III for Dual LAN Failover Mode LAN1 and LAN2 share the same IP address to support automatic failover.
Page 103
Chapter 4: KX III Administration 7. The LAN1 settings are applied to LAN2 if failover occurs. 8. Complete the IPv6 sections, if applicable. 9. Select the IP Auto Configuration. If None is selected, you must manually specify - Global/Unique IP Address - this is the IP address assigned to KX III.
Page 104
Chapter 4: KX III Administration Link-Local IP Address - this address is automatically assigned to the device. It is used for neighbor discovery or when no routers are present. Zone ID - Identifies the device the address is associated with. Read-Only 10.
Page 105
Chapter 4: KX III Administration 3. Ensure the "Enable Automatic Failover" checkbox is not selected. 4. If needed, manually specify the network parameters by entering the Default Gateway and then complete the steps that follow. Alternatively, if you do not want to set a static IP, see Disable or Enable DHCP in KX III.
Page 106
Chapter 4: KX III Administration 9. Enter the LAN2 IPv4 Default Gateway and Subnet Mask. 10. Complete the IPv6 sections, if applicable. 11. Select the IP Auto Configuration. If None is selected, you must manually specify - Global/Unique IP Address - this is the IP address assigned to KX III.
Page 107
Chapter 4: KX III Administration 12. Select "Use the Following DNS Server Addresses" and enter the Primary DNS Server IP Address and Secondary DNS Server IP Address. The secondary addresse is used if the primary DNS server connection is lost due to an outage. Note: "Obtain DNS Server Address Automatically"...
Page 108
Chapter 4: KX III Administration "Use the Following DNS Server Addresses" a. Select "Obtain DNS Server Address Automatically" if DHCP is selected. The DNS information is then provided by the DHCP server that is used. When finished, click OK. Your KX III device is now network accessible.
Chapter 4: KX III Administration View and Edit LAN Interface Settings Choose Device Settings > Network to open the Network Settings page. The LAN Interface Settings are in the right column. The current LAN and LAN2 parameter settings are identified.
Page 110
(on page 40). Note: Because a failover port is not activated until after a failover has actually occurred, Raritan recommends that you do not monitor the port or only monitor the port after a failover occurs. Click OK to apply the setting.
Chapter 4: KX III Administration Change the Bandwidth Limit, if needed. The default is No Limit. This sets the maximum amount of bandwidth that can be consumed by the KX III device (for all sessions). Note: Lower bandwidth may result in slower performance. Click OK to apply the setting.
Chapter 4: KX III Administration 2. Click "Reset to Defaults" at the bottom of the page. Configuring Ports Access the Port Configuration Page To access a port configuration: 1. Choose Device Settings > Port Configuration. The Port Configuration Page opens. This page is initially displayed in port number order, but can be sorted on any of the fields by clicking on the column heading.
Page 113
Chapter 4: KX III Administration For rack PDUs, the Port page for rack PDUs (power strips) is opened. From this page, you can name the rack PDUs and their outlets. Port Configuration Page The Port Configuration page displays a list of the KX III ports. When a port's status is down, Not Available is displayed as its status.
Page 114
Chapter 4: KX III Administration Port Name If a KX III port has no CIM connected or is connected to a CIM with no name, a default port name of Dominion_KX3_Port# is assigned to the port. Dominion_KX3 is the device model and Port# is the number of the KX III physical port.
Page 115
Chapter 4: KX III Administration Port Type Port type includes: DCIM - Dominion CIM TierDevice - Tiered device Not Available - No CIM connected DVM-DP - Display Port CIM DVM-HDMI - HDMI CIM DVM-DVI - DVI CIM ...
Page 116
Chapter 4: KX III Administration 6. Click OK. Configuring KVM Switches The KX III also supports use of hot key sequences to switch between targets on a KVM switch. KVM switching is supported by blade chassis and in tiered configurations. Important: For user groups to see the KVM switch that you create, you must first create the switch and then create the group.
Page 117
Chapter 4: KX III Administration 7. In the KVM Switch Name field, enter the name you want to use to refer to this port connection. 8. Activate the targets that the KVM switch hot key sequence will be applied to. Indicate that the KVM switch ports have targets attached by selecting ‘Active’...
Page 118
URL. For example username=admin, where username is the username field. Password Field - Enter the password parameter that will be used in the URL. For example password=raritan, where password is the password field. 10. Click OK. To change the active status/deactivate a KVM switch port or URL: 1.
Page 119
Chapter 4: KX III Administration 3. Next - Configure the CIM Settings (on page 107) Configure the CIM Power Associations (on page 107) Configure the CIM Target Settings (on page 107) Apply Selected Profiles to Other CIMs (on page 108) ...
Page 120
Chapter 4: KX III Administration 3. For digital CIMs, to set the target's video resolution to match your monitor's native display resolution, select the resolution from the Display Native Resolution drop-down. For a complete list of supported video resolutions from the remote console, see KX III Supported Local Port DVI Resolutions page 378)
Page 121
KX III allows you to connect rack PDUs (power strips) to KX III ports. KX III rack PDU configuration is done from the KX III Port Configuration page. Note: Raritan recommends no more than eight (8) rack PDUs (power strips) be connected to a KX III at once since performance may be affected.
Page 122
Chapter 4: KX III Administration 5. Power on the device. Diagram key PX rack PDU with serial port D2CIM-PWR KX III D2CIM-PWR to rack PDU serial port connection D2CIM-PWR to KX III target device port via Cat5 cable...
Page 123
Note: PX rack PDUs (power strips) can be named in the PX as well as in the KX III. Once a Raritan remote rack PDU is connected to the KX III, it will appear on the Port Configuration page. Click on the power port name on that page to access it.
Page 124
Chapter 4: KX III Administration 3. Click OK.
Page 125
Port Access page. To use this feature, you will need: Raritan remote rack PDU(s) Power CIMs (D2CIM-PWR) Make a Power Association...
Page 126
Chapter 4: KX III Administration 4. Click OK. That rack PDU/outlet association is removed and a confirmation message is displayed. To remove a rack PDU association if the rack PDU has been removed from the target: 1. Click Device Settings > Port Configuration and then click on the active target.
Page 127
Chapter 4: KX III Administration 3. On the Port Configuration page, click on the name of the blade chassis you want to configure. The Port page will open. 4. Select the Blade Chassis radio button. The page will then display the necessary fields to configure a blade chassis.
Page 128
Chapter 4: KX III Administration Username - Not applicable. Password - Not applicable. Port Number - The default port number for the blade chassis is 22. Not applicable. 7. Change the blade chassis name, if needed. 8. Check the Installed checkbox next to each slot that has a blade installed.
Page 129
Chapter 4: KX III Administration URL - Enter the URL to the interface. Required Username - Enter the username used to access the interface. Optional Password - Enter the password used to access the interface. Optional Note: Leave the username and password fields blank for DRAC, ILO, and RSA web applications or the connection will fail.
Page 130
Chapter 4: KX III Administration Tips for Adding a Web Browser Interface (on page 132) for tips on adding a web browser interface. 10. In the Target Settings section, select "640x480 or 720x400 Compensation" if you are experiencing display issues when the target is using this resolution.
Page 131
Chapter 4: KX III Administration 14. Select 'Use international keyboard for scan code set 3' if connecting to the target with a DCIM-PS2 and require the use of scan code set 3 with an international keyboard. 15. Click OK to save the configuration. Blade Chassis Configuration Options ®...
Page 132
Chapter 4: KX III Administration Manual and Auto-Discovery Blade Chassis Configuration Two modes of operation are provided for blade chassis: manual configuration and auto-discovery, depending on the blade chassis capabilities. Configure the mode by selecting Device Services > Port Configuration to open the Port page.
Page 133
Chapter 4: KX III Administration Hot Key Sequences to Access Blade Chassis The use of hot key sequences to switch KVM access to a blade chassis is supported. For blade chassis that allow users to select a hot key sequence, those options will be provided on the Port Configuration page.
Page 134
Chapter 4: KX III Administration Link to a Blade Chassis Interface - Blade Chassis Managed Links You are able to configure the connection to a blade chassis web browser interface if one is available. Configure links when adding a blade by selecting Device Services > Port Configuration, and entering the link information in the Blade Chassis Managed Links section of the page.
Page 135
Chapter 4: KX III Administration Managing Blade Chassis Blade chassis can be managed from the Virtual KVM Client (VKC), Active KVM Client (AKC), and CC-SG. Managing blade severs via VKC and AKC is the same as managing standard target servers. Virtual KVM Client (VKC) Help (see "Virtual KVM Client (VKC...
Page 136
Chapter 4: KX III Administration To configure a Dell PowerEdge M1000e: ™ 1. If you selected Dell PowerEdge M1000e, auto-discovery is available. Configure the blade chassis as applicable. Prior to configuring a blade chassis that can be auto-discovered, it must be configured to enable SSH connections on the designated port number (see Device Services...
Page 137
Chapter 4: KX III Administration Click the Blade Chassis Managed Links icon to expand the section on the page. The first URL link is intended for use to connect to the blade chassis Administration Module GUI. Note: Access to the URL links entered in this section of the page is governed by the blade chassis port permissions.
Page 138
Chapter 4: KX III Administration 10. Select the CIMs native, display resolution from the Display Native Resolution drop-down. This is the preferred resolution and timing mode of the digital CIM. Once a resolution is selected, it is applied to the CIM. If no selection is made, the default 1024x1280@60Hz resolution is used.
Page 139
Chapter 4: KX III Administration a. Active - To activate the link once it is configured, select the Active checkbox. Leave the checkbox deselected to keep the link inactive. Entering information into the link fields and saving can still be done even if Active is not selected. Once Active is selected, the URL field is required.
Page 140
Chapter 4: KX III Administration 3. On the Port Configuration page, click on the name of the blade chassis you want to configure. The Port page will open. 4. Select the Blade Chassis radio button. The page will then display the necessary fields to configure a blade chassis.
Page 141
Chapter 4: KX III Administration 5. In the Blade Chassis Managed Links section of the page, you are able to configure the connection to a blade chassis web browser interface if one is available. Click the Blade Chassis Managed Links icon to expand the section on the page.
Page 142
Chapter 4: KX III Administration 6. If applicable, define the USB profile for the blade chassis or select an existing USB profile. Click the USB Profiles Select USB Profiles for Port icon or the Apply Select Profiles to Other Ports icon expand these sections of the page.
Page 143
Chapter 4: KX III Administration a. Active - To activate the link once it is configured, select the Active checkbox. Leave the checkbox deselected to keep the link inactive. Entering information into the link fields and saving can still be done even if Active is not selected. Once Active is selected, the URL field is required.
Page 144
Chapter 4: KX III Administration Tips for Adding a Web Browser Interface You can add a Web Browser Interface to create a connection to a device with an embedded web server. A Web Browser interface can also be used to connect to any web application, such as the web application associated with an RSA, DRAC or ILO Processor card.
Page 145
Chapter 4: KX III Administration HP and Cisco UCS Blade Chassis Configuration (Port Group Management) The KX III supports the aggregation of ports connected to certain types of blades into a group representing the blade chassis. Specifically, ® ® ® ™...
Page 146
Chapter 4: KX III Administration 4. Select the Blade Server Group checkbox. If you want to designate that these ports are attached to blades housed in a blade chassis (for example, HP c3000 or Dell PowerEdge 1855), select the Blade Server Group checkbox. Note: This is especially important to CC-SG users who want HP blades to be organized on a chassis basis, although each blade has its own connection to a port on the KX III.
Page 147
Chapter 4: KX III Administration Supported Blade Chassis Models This table contains the blade chassis models that are supported by the KX III and the corresponding profiles that should be selected per chassis model when configuring them in the KX III application. A list of these models can be selected on the Port Configuration page from the Blade Server Chassis Model drop-down, which appears when the Blade Chassis radio button is selected.
Page 148
Chapter 4: KX III Administration Blade chassis Connection method Recommended CIM(s) DCIM-PS2 Generic If a D2CIM-VUSB or D2CIM-DVUSB is used when connecting to a blade-chassis configured DCIM-USBG2 as Generic, you will be able to select the USB profiles from the Port Configuration page and the client's USB Profile menu.
Page 149
Chapter 4: KX III Administration Blade chassis Connection method Recommended CIM(s) VGA monitors with DDC support. Source: Dell Chassis Management Controller, Firmware Version 1.0, User Guide ® BladeSystem The HP c-Class Blade SUV Cable enables you DCIM-USBG2 c3000 to perform blade chassis administration, ...
Page 150
Note: Audio is disabled for all KVM switch targets. Required and Recommended Blade Chassis Configurations This table contains information on limitations and constraints that apply to configuring blade chassis to work with the KX III. Raritan recommends that all of the information below is followed. Blade chassis Required/recommended action ...
Page 151
Exit the iKVM GUI menu before attaching Dell's chassis to a Raritan CIM. iKVM may not work correctly if this is not done. Configure the iKVM GUI Main menu to select target blades by Slot, not by Name. iKVM may not work correctly if this is not done.
Page 152
The SSH port configured on the blade chassis management module and the port number entered on the Port Configuration page must match. Raritan KX III virtual media is supported only on IBM IBM KX3 Virtual ® BladeCenter Models H and E.
Page 153
Chapter 4: KX III Administration Blade chassis Sample URL format Password: calvin Password Field: TEXT_PASSWORD ® http://192.168.84.217/private/welcome.ssi ® BladeCenter or H Configuring USB Profiles (Port Page) You choose the available USB profiles for a port in the Select USB Profiles for Port section of the Port page.
Page 154
Chapter 4: KX III Administration Ctrl-Click to select several discontinuous profiles. 2. Click Add. The selected profiles appear in the Selected list. These are the profiles that can be used for the KVM target server connected to the port. To specify a preferred USB profile: 1.
Page 155
Chapter 4: KX III Administration Configuring KX III Local Port Settings Note: Some changes you make to the settings on the Local Port Settings page restart the browser you are working in. If a browser restart occurs when a setting is changed, it is noted in the steps provided here. To configure the local port settings: ...
Page 156
Chapter 4: KX III Administration Configure the Local Port Scan Mode Settings 1. If needed, configure the Local Port Scan Mode settings. These settings apply to Scan Settings feature, which is accessed from the Port page. In the "Display Interval (10-255 sec):" field, specify the number of seconds you want the target that is in focus to display in the center of the Port Scan window.
Page 157
Local language input is not supported at this time for KX III Local Console functions. Note: If using a Turkish keyboard, you must connect to a target server through the Active KVM Client (AKC). It is not supported by other Raritan clients. Select the Local Port Hotkey 1.
Page 158
Chapter 4: KX III Administration Select the Local Port Connect Key Select the Local Port Connect key. Use a connect key sequence to connect to a target and switch to another target without returning to the GUI. Then use the hot key to disconnect and return to the local port GUI Once the local port connect key is created, it will appear in the Navigation panel of the GUI so you can use it as a reference.
Chapter 4: KX III Administration b. Set the amount of time (in minutes) in which Power Save Mode will be initiated. Select the Local User Authentication 1. Choose the type of local user authentication. Local/LDAP/RADIUS. This is the recommended option. ...
Page 160
Chapter 4: KX III Administration 3. Enter the SSH Port information. The standard SSH TCP port number is 22 but the port number can be changed to provide a higher level of security operations. 4. Click OK. HTTP and HTTPS Port Settings You are able to configure HTTP and/or HTTPS ports used by the KX III.
Page 161
Chapter 4: KX III Administration Configuring and Enabling Tiering The tiering feature allows you to access KX III targets and PDUs through one base KX III device. Devices can be added and removed from a tiering configuration as needed up to a maximum of two tiered levels. When setting up the devices, you will use specific CIMS for specific configurations.
Page 162
Chapter 4: KX III Administration Unsupported and Limited Features on Tiered Targets The following features are not supported on tiered targets: Blade chassis on tiered devices Audio on tiered devices Smart cards on tiered devices Virtual media tiered devices ...
Page 163
Chapter 4: KX III Administration Steps KX III Base device KX III Tiered device CIM to connect the target server to KX III the Tiered device. Target server Base device Tier port to Tiered device Tier port connection: Connect one end of a Cat5/5e/6 cable into a target server port on the KX III Base device.
Page 164
Chapter 4: KX III Administration In the Tier Secret field, enter the same secret word you entered for the base device on the Device Settings page. Click OK. Once devices are enabled and configured, they appear on the Port Access page. When the KX III is configured to function as a base device or tiered device, they will be displayed as: ...
Page 165
Chapter 4: KX III Administration Power Control from Tiered Devices You can power on and off targets that are a part of the tiered configuration. These targets are accessed from the Port Access page. If targets and outlets are associated, power control is available from the Port Access page.
Page 166
Chapter 4: KX III Administration Username and password are optional. If username and password are not provided, a login dialog will be displayed and, after being authenticated, the user will be directly connected to the target. The port may be a port number or port name. If you are using a port name, the name must be unique or an error is reported.
Page 167
Chapter 4: KX III Administration Username and password are optional. If username and password are not provided, a login dialog will be displayed and, after being authenticated, the user will be directly connected to the target. The port may be a port number or port name. If you are using a port name, the name must be unique or an error is reported.
Page 168
Chapter 4: KX III Administration Enabling the AKC Download Server Certificate Validation If you are using the AKC client, you can choose to use the Enable AKC Download Server Certificate Validation feature or opt not to use this feature. Note: When operating in IPv4 and IPv6 dual stack mode with 'Enable AKC Download Server Certificate Validation' feature, Microsoft ®...
Page 169
Chapter 4: KX III Administration ® 2. Launch Internet Explorer using the KX III IP address as the URL. A Certificate Error message will be displayed. 3. Select View Certificates. 4. On the General tab, click Install Certificate. The certificate is then installed in the Trusted Root Certification Authorities store.
Page 170
Chapter 4: KX III Administration Configuring SNMP Agents SNMP-compliant devices, called agents, store data about themselves in Management Information Bases (MIBs) and return this data to the SNMP managers. See Viewing the KX III MIB (on page 178) for information on viewing the KX III MIB.
Page 171
Chapter 4: KX III Administration Privacy Protocol - if applicable, the AES or DES algorithm used to encrypt PDU and context data. a. Privacy Passphrase - if applicable, the pass phrase used to access the privacy protocol algorithm (up to 64 characters). 6.
Page 172
Chapter 4: KX III Administration Configuring Modem Settings Certified Modems (on page 391) for information on certified modems that work with the KX III. For information on settings that will give you the best performance when connecting to the KX III via modem, see Configuring Connection Properties (on page 273).
Page 173
KX III via the modem. Sierra Wireless Software and Firmware Versions Sierra Wireless must have at least ALEOS Software Version 4.4.1.014 Raritan has tested this configuration with the Verizon Wireless MC7750 Radio Module using firmware version 3.05.10.13. Connect the External, Wireless Modem...
Page 174
USB Device Mode must be set to "USBNET". Change Default Username For security reasons, Raritan recommends you change the default Admin account username to a new name before using the Sierra Wireless . Assign User Groups Modem Access Permissions...
Page 175
Chapter 4: KX III Administration Following are settings applied in KX III. Modem Access permission is assigned to a user group on the Group page, and the user is then assigned to the group on the User page. For more information, see User Profiles and Groups. Enable/Disable Broadband Modem Access Use this feature to enable or disable access to an external Sierra Wireless modem.
Page 176
Chapter 4: KX III Administration KX III is now accessible using the Sierra Wireless modem. External Modem Connection Status and Checks The connection event is logged in the KX III audit log. Once the devices are on and the connection is active, the gateway IP address is displayed in the Remote Console in the left panel under the Network section.
Page 177
Chapter 4: KX III Administration For modem access through direct port access, you must configure settings in: The KX III remote console ® On the client machine in the Java Control Panel and in your browser (Microsoft Internet Explorer ®...
Page 178
Chapter 4: KX III Administration Steps For better modem performance, deselect the “Apply Encryption Mode to KVM and Virtual Media (Forced in FIPS 140-2 Mode)” setting if it is enabled on the Security Settings page (select Security > Security Settings). Optional ®...
Page 179
Chapter 4: KX III Administration Steps ® Access the Java Control Panel from the Microsoft Windows Control Panel. In the Java Control Panel, open to the General tab. Click Settings. Select "Keep temporary files on my computer". Click OK. You can now close the Java Control Panel and Microsoft Control Panel. Configure the following browser settings on your client machine, depending on the browser you use.
Page 180
Chapter 4: KX III Administration Steps ® For Microsoft Internet Explorer , click Tools > Internet Options. The steps here follow Internet Explorer 9. Click on the General tab. Click Settings in the Browser History section to open the Windows Database Settings dialog. Click the "Caches and Databases"...
Page 181
Chapter 4: KX III Administration Steps ® For Firefox , click Tools > Options. Click on Privacy. Set the History to "Firefox will" to "Remember history". Click OK to apply the settings. Finally, you need to perform the following steps the first time you access each target server via the Virtual KVM Client (VKC) from KX III.
Page 182
Chapter 4: KX III Administration Steps In VKC, click Connection > Properties to open the Connection Properties dialog. Set the Video Mode to “Greyscale 2” so you use the least bandwidth. Click OK. It may be necessary to set the “Noise Filter” to greater than 2 if the modem connection is slow after you test it.
Page 183
Chapter 4: KX III Administration Note: If DHCP is selected for the Network Settings on the Network page, the NTP server IP address is automatically retrieved from the DHCP server by default. Manually enter the NTP server IP address by selecting the Override DHCP checkbox. 6.
Page 184
Chapter 4: KX III Administration Destination IP/Hostname - the IP or hostname of the SNMP manager. Up to five (5) SNMP managers can be created Note: IPv6 addresses cannot exceed 80 characters in length for the host name. a. Port Number - the port number used by the SNMP manager b.
Page 185
Chapter 4: KX III Administration Use the Link to SNMP Agent Configuration link to quickly navigate to the Devices Services page from the Event Management - Settings page. The events that are captured once an SNMP trap is configured are selected on the Event Management - Destination page.
Page 186
Chapter 4: KX III Administration Use the reset to factory defaults feature to remove the SNMP configuration and set the KX III to its original factory default. To reset to factory defaults: Click Reset To Defaults. WARNING: When using SNMP traps over UDP, it is possible for the KX III and the router that it is attached to fall out of synchronization when the KX III is rebooted, preventing the reboot completed SNMP trap from being logged.
Page 187
Chapter 4: KX III Administration Trap Name Description ipConflictResolved An IP Address conflict was resolved. networkFailure An Ethernet interface of the product can no longer communicate over the network. networkParameterChanged A change has been made to the network parameters. passwordSettingsChanged Strong password settings have changed.
Page 188
Chapter 4: KX III Administration Trap Name Description userDeleted A user account has been deleted. userForcedLogout A user was forcibly logged out by Admin userLogin A user has successfully logged into the KX III and has been authenticated. userLogout A user has successfully logged out of the KX III properly.
Page 189
Chapter 4: KX III Administration 2. Go to the SMTP Settings panel and select the Enable SMTP Server checkbox. 3. Type the email address of the SMTP subscriber in the New Email Subscriber Address field and then click Add. 4. Click OK. Configure and Test SMTP Server Settings Enter the information required for a connection to your SMTP server on the SMTP Server Settings page.
Page 190
Chapter 4: KX III Administration It is important that the SMTP server information be accurate so that the KX III appliance can send messages using that SMTP server. This test sends an email using the settings displayed on the page in the SMTP Settings pane.
Page 191
Chapter 4: KX III Administration 2. Click the 'Click here to view the 'SNMP MIB' link. The MIB file opens in a browser window. SysLog Configuration 1. Choose Device Settings > Event Management - Settings. The Event Management - Settings page opens. 2.
Page 192
Chapter 4: KX III Administration To reset to factory defaults: Click Reset To Defaults. WARNING: When using SNMP traps over UDP, it is possible for the KX III and the router that it is attached to fall out of synchronization when the KX III is rebooted, preventing the reboot completed SNMP trap from being logged.
Chapter 4: KX III Administration Power Supply Setup KX III provides dual power supplies, and can automatically detect and provide notification regarding the status of these power supplies. When both power supplies are used, KX III automatically detects them and notifies you of their status. Additionally, both the Powerln1 and Powerln2 Auto Detect checkboxes are automatically selected on the Power Supply Setup page.
Page 194
Chapter 4: KX III Administration 2. If you are plugging power input into power supply number one (left-most power supply at the back of the unit), then select the Powerln1 Auto Detect option. 3. If you are plugging power input into power supply number two (right-most power supply at the back of the unit), then select the Powerln2 Auto Detect option.
Chapter 4: KX III Administration Connect and Disconnect Scripts The KX III provides the ability to execute key macro scripts when connecting to or disconnecting from a target. You can create and edit your own scripts on the Connection Script page to perform additional actions when connecting to or disconnecting from targets.
Page 196
Chapter 4: KX III Administration 3. In the Apply Selected Scripts to Ports section, select the target(s) you want to apply the script to using Select All or clicking on the checkbox to the left of each target to apply the script to only select targets.
Page 197
Chapter 4: KX III Administration For example, select F1-F16 to display the function key set in the Add box. Select a function key and add it to the Script box. Next, select Letters from the Key Set drop-down and add a letter key to the script. 8.
Page 199
Chapter 4: KX III Administration Modifying Scripts To modify existing scripts: 1. Click Device Settings > Connection Scripts. The Connection Scripts page opens. 2. In the Available Connection Scripts section, select the script you want to modify and click Modify. The page is then in Edit mode. 3.
Chapter 4: KX III Administration 5. Click Import. The Configuration Scripts page opens and the imported scripts are displayed. To export a disconnect script: 1. Click Device Settings > Configuration Scripts. The Configuration Scripts page opens. 2. In the Available Connection Scripts section, select the script you want to export and click Export.
Page 201
Chapter 4: KX III Administration Creating Port Groups The KX III supports the aggregation of multiple ports into a single port group. Port groups consist solely of ports configured as standard KVM ports. A port may only be a member of a single group. Ports that are available to be included in a port group are displayed in the Select Port for Group >...
Page 202
Chapter 4: KX III Administration Creating a Dual Video Port Group The dual video port groups feature allows you to group two video ports into one group. Use this feature when you need to connect to a server with two video cards/ports, and you want to access both ports from the same remote client at the same time.
Page 203
Chapter 4: KX III Administration 2. Click Add. The Port Group page opens, and all available ports are displayed in the Select Ports for Group section. Note: If a port is already a part of blade server port group, another dual video port group, or 'standard' port group, the port is not an option since ports can only belong to a single port group at a time.
From the Security Settings page, you can specify login limitations, user blocking, password rules, and encryption and share settings. Raritan SSL certificates are used for public and private key exchanges, and provide an additional level of security. Raritan web server certificates are self-signed.
Page 205
Chapter 4: KX III Administration To reset back to defaults: Click Reset to Defaults. Login Limitations Using login limitations, you can specify restrictions for single login, password aging, and the logging out idle users. Limitation Description Enable single login When selected, only one login per user name is limitation allowed at any time.
Page 206
Chapter 4: KX III Administration Limitation Description Enter the number of days after which a password change is required. The default is 60 days. Log out idle users, Select the "Log off idle users" checkbox to After (1-365 automatically disconnect users after the amount minutes) of time you specify in the "After (1-365 minutes)"...
Page 207
Chapter 4: KX III Administration Strong Passwords Strong passwords provide more secure local authentication for the system. Using strong passwords, you can specify the format of valid KX III local passwords such as minimum and maximum length, required characters, and password history retention. Strong passwords require user-created passwords to have a minimum of 8 characters with at least one alphabetical character and one nonalphabetical character (punctuation character or number).
Page 208
Chapter 4: KX III Administration User Blocking The User Blocking options specify the criteria by which users are blocked from accessing the system after the specified number of unsuccessful login attempts. The three options are mutually exclusive: Option Description Disabled The default option.
Page 209
Chapter 4: KX III Administration Option Description Users are denied access to the system for the Timer Lockout specified amount of time after exceeding the specified number of unsuccessful login attempts. When selected, the following fields are enabled: Attempts - The number of unsuccessful login attempts after which the user will be locked out.
Page 210
Chapter 4: KX III Administration Encryption & Share Using the Encryption & Share settings you can specify the type of encryption used, PC and VM share modes, and the type of reset performed when the KX III Reset button is pressed. WARNING: If you select an encryption mode that is not supported by your browser, you will not be able to access the KX III from your browser.
Page 211
Chapter 4: KX III Administration Auto This is the recommended option. The KX III autonegotiates to the highest level of encryption possible. You must select Auto in order for the device and client to successfully negotiate the use of FIPS compliant algorithms. AES-128 The Advanced Encryption Standard (AES) is a National Institute of Standards and Technology specification for the encryption of electronic...
Page 212
Reset (default) defaults. Enable Local Admin Resets the local administrator password only. Password Reset The password is reset to raritan. Disable All Local No reset action is taken. Resets Checking Your Browser for AES Encryption If you do not know if your browser uses AES, check with the browser manufacturer or navigate to the https://www.fortify.net/sslcheck.html...
Page 213
Chapter 4: KX III Administration Enabling FIPS 140-2 For government and other high security environments, enabling FIPS 140-2 mode may be required. The KX III uses an embedded FIPS 140-2-validated cryptographic ® module running on a Linux platform per FIPS 140-2 Implementation Guidance section G.5 guidelines.
Page 214
Chapter 4: KX III Administration FIPS 140-2 Support Requirements The KX III supports the use of FIPS 140-2 approved encryption algorithms. This allows an SSL server and client to successfully negotiate the cipher suite used for the encrypted session when a client is configured for FIPS 140-2 only mode.
Chapter 4: KX III Administration Configuring IP Access Control Using IP access control, you control access to your KX III. Note that IP access control restricts traffic of any kind from accessing the KX III, so NTP servers, RADIUS hosts, DNS hosts and so on must be granted access to the KX III.
Page 216
Chapter 4: KX III Administration 3. Choose the Policy from the drop-down list. 4. Click Insert. If the rule # you just typed equals an existing rule #, the new rule is placed ahead of the exiting rule and all rules are moved down in the list.
Chapter 4: KX III Administration SSL Certificates KX III uses the Secure Socket Layer (SSL) protocol for any encrypted network traffic between itself and a connected client. When establishing a connection, KX III has to identify itself to a client using a cryptographic certificate.
Page 218
Chapter 4: KX III Administration Country (ISO code) - The country where the organization is located. This is the two-letter ISO code, e.g. DE for Germany, or US for the U.S. g. Challenge Password - Some certification authorities require a challenge password to authorize later changes on the certificate (e.g.
Page 219
Chapter 4: KX III Administration b. A message containing all of the information you entered appears. c. The CSR and the file containing the private key used when generating it can be downloaded by clicking Download CSR. d. Send the saved CSR to a CA for certification. You will get the new certificate from the CA.
Chapter 4: KX III Administration Security Banner KX III provides you with the ability to add a security banner to the KX III login process. This feature requires users to either accept or decline a security agreement before they can access the KX III. The information provided in a security banner will be displayed in a Restricted Service Agreement dialog after users access KX III using their login credentials.
Page 221
Chapter 4: KX III Administration Note: You cannot upload a text file from the local port.
Chapter 4: KX III Administration Maintenance Audit Log A log is created of KX III system events. The audit log can contain up to approximately 2K worth of data before it starts overwriting the oldest entries. To avoid losing audit log data, export the data to a syslog server or SNMP manager.
Device Information The Device Information page provides detailed information about your KX III device and the CIMs in use. This information is helpful should you need to contact Raritan Technical Support. To view information about your KX III and CIMs: ...
Chapter 4: KX III Administration D2CIM-DVUSB-DVI D2CIM-DVUSB-HDMI D2CIM-DVUSB Note: Only the numeric portion of the serial numbers are displayed for the DCIM-USB, DCIM-PS2 and DCIM-USB G2 CIMs. For example, XXX1234567 is displayed. The serial number prefix GN is displayed for CIMs that have field configured serial numbers.
Page 225
Chapter 4: KX III Administration Create a Backup File Note: Backups are always complete system backups. Restores can be complete or partial depending on your selection. ® If you are using Internet Explorer 7 or later, to back up your KX III: 1.
Page 226
Chapter 4: KX III Administration Restore Your KX III Using a Restore File WARNING: Exercise caution when restoring your KX III to an earlier version. Usernames and password in place at the time of the backup will be restored. If you do not remember the old administrative usernames and passwords, you will be locked out of the KX III.
Chapter 4: KX III Administration User and Group Restore - This option includes only user and group information. This option does not restore the certificate and the private key files. Use this option to quickly set up users on a different KX III. ...
Raritan tech support. These profiles are designed to address the needs of your target server’s configuration, in the event that the set of standard profiles does not already address them. Raritan tech support will provide the custom profile and work with you to verify the solution for your target server’s specific needs.
Chapter 4: KX III Administration Note: If an error or warning is displayed during the upload process (for example. overwriting an existing custom profile), you may continue with the upload by clicking Upload or cancel it by clicking on Cancel. To delete a custom profile to your KX III: 1.
- doing so will likely result in damage to the appliance or CIMs. To upgrade your KX III appliance: 1. Click the Show Latest Firmware link to locate the appropriate Raritan firmware distribution file (*.RFP) on the Raritan website http://www.raritan.com...
Chapter 4: KX III Administration Note: At this point, connected users are logged out, and new login attempts are blocked. 6. Click Upgrade. Please wait for the upgrade to complete. Status information and progress bars are displayed during the upgrade. Upon completion of the upgrade, the appliance reboots (1 beep sounds to signal that the reboot has completed).
Page 232
Chapter 4: KX III Administration To reboot your KX III: 1. Choose Maintenance > Reboot. The Reboot page opens. 2. Click Reboot. You are prompted to confirm the action. Click Yes to proceed with the reboot.
Chapter 4: KX III Administration Stopping CC-SG Management While KX III is under CC-SG management, if you try to access the device directly, you are notified that the device is under CC-SG management. If you are managing KX III through CC-SG and connectivity between CC-SG and the KX III is lost after the specified timeout interval (typically 10 minutes), you are able to end the CC-SG management session from the KX III console.
Chapter 4: KX III Administration Diagnostics Network Interface Page The KX III provides information about the status of your network interface. To view information about your network interface: Choose Diagnostics > Network Interface. The Network Interface page opens. The following information is displayed: ...
Page 235
Chapter 4: KX III Administration Statistics - Produces a page similar to the one displayed here. Interfaces - Produces a page similar to the one displayed here.
Chapter 4: KX III Administration Route - Produces a page similar to the one displayed here. Ping Host Page Ping is a network tool used to test whether a particular host or IP address is reachable across an IP network. Using the Ping Host page, you can determine if a target server or another KX III is accessible.
Chapter 4: KX III Administration 4. Select the interface in the Network Interface drop-down box to ping on a specified interface. Optional Note: In Isolation mode, choose to ping on Auto, LAN1 only, or LAN2 only. Trace Route to Host Page Trace route is a network tool used to determine the route taken to the provided hostname or IP address.
Page 238
Chapter 4: KX III Administration 5. Select the interface in the Network Interface drop-down box to trace route on a specified interface. Optional...
Chapter 4: KX III Administration Device Diagnostics Note: This page is for use by Raritan Field Engineers or when you are directed by Raritan Technical Support. Use this feature to download diagnostic information from the KX III to the client machine.
Chapter 4: KX III Administration Security and Authentication In order to use the KX III Local Console, you must first authenticate with a valid username and password. The KX III provides a fully-integrated authentication and security scheme, whether your access is via the network or the local port. In either case, the KX III allows access only to those servers to which a user has access permissions.
Page 241
Local language input is not supported at this time for KX III Local Console functions. Note: If using a Turkish keyboard, you must connect to a target server through the Active KVM Client (AKC). It is not supported by other Raritan clients. Select the Local Port Hotkey 1.
Page 242
Chapter 4: KX III Administration Hot key: Take this action: Double Click Scroll Lock Press Scroll Lock key twice quickly Double Click Num Lock Press Num Lock key twice quickly Double Click Caps Lock Press Caps Lock key twice quickly Double Click Left Alt key Press the left Alt key twice quickly Double Click Left Shift key...
Page 243
Chapter 4: KX III Administration Select the Local Port Connect Key Select the Local Port Connect key. Use a connect key sequence to connect to a target and switch to another target without returning to the GUI. Then use the hot key to disconnect and return to the local port GUI Once the local port connect key is created, it will appear in the Navigation panel of the GUI so you can use it as a reference.
Chapter 4: KX III Administration Select the Local User Authentication 1. Choose the type of local user authentication. Local/LDAP/RADIUS. This is the recommended option. None. There is no authentication for Local Console access. This option is recommended for secure environments only. Command Line Interface (CLI) Overview The Command Line Interface(CLI) can be used to configure the KX III...
Chapter 4: KX III Administration Accessing the KX III Using CLI Access the KX III by using one of the following methods: SSH (Secure Shell) via IP connection A number of SSH clients are available and can be obtained from the following locations: ...
Logging In To log in, enter the user name admin as shown: 1. Log in as admin 2. The Password prompt appears. Enter the default password: raritan The welcome message displays. You are now logged on as an administrator. After reviewing the following...
Page 247
Chapter 4: KX III Administration CLI Syntax -Tips and Shortcuts Tips Commands are listed in alphabetical order. Commands are not case sensitive. Parameter names are a single word without an underscore. Commands without arguments default to show current settings for the command.
1. Reset the administrator password. All KX III devices are shipped with the same default password. Therefore, to avoid security breaches it is imperative that you change the admin password from raritan to one customized for the administrators who will manage the KX III device.
Chapter 4: KX III Administration CLI Prompts The Command Line Interface prompt indicates the current command level. The root portion of the prompt is the login name. admin is the root portion of a command when you establish a direct admin serial port connection via a terminal emulation application.
Chapter 4: KX III Administration Command Description help Display overview of commands. history Display the current session's command line history. interface Set/get network parameters. ipv6_interface Set/get IPv6 network parameters. logout Logout of the current CLI session. name Device name configuration. quit Return to previous menu.
Page 251
Chapter 4: KX III Administration Commands Description ethernetfailover Interface Command The Interface command is used to configure the KX III network interface. The syntax of the interface command is: interface [ipauto <none|dhcp>] [ip <ipaddress>] [mask <subnetmask>] [gw <ipaddress>] [mode <mode>] Set/Get ethernet parameters ipauto <none|dhcp>...
Chapter 4: KX III Administration Name Command The name command is used to configure the Device Name and preferred hostname. The syntax of the name is: name [devicename <devicename>] [hostname <hostname>] Device name configuration devicename <devicename> Device Name hostname <hostname> Preferred host name (DHCP only) Name Command Example...
Client PC’s primary and secondary displays Raritan device’s dual video port group configuration Target server’s primary and secondary displays Only the following Client Launch Settings will be applied to dual port video displays: ...
Linux Intelligent and Linux users may experience Standard Mouse display and mouse movement Modes issues using single mouse mode. Raritan recommends Linux users do not use Single Mouse mode. ® operating Single Mouse Mode For Mac targets with multiple system monitors, use a standard mouse in Single-Cursor mode.
Chapter 4: KX III Administration Other - Enable Single Mouse Cursor setting will NOT be applied Other - Enable Scale Video setting will be applied Other - Pin Menu Toolbar setting will be applied Dragging and moving items between windows on the primary and secondary target requires a release and press of the mouse button as the item is moved from one window to the other.
Chapter 4: KX III Administration Example Dual Port Video Group Configuration The following is a general example. Your configuration may vary in the type of CIMs used, the port you designate as the primary port, the ports you are connecting to and so on. In this example, we are using: ...
Chapter 4: KX III Administration Diagram key Connection from the target's primary (first) video port to the KX III Connection from the target's secondary (second) video port to the KX III IP connection between the KX III and remote client Target server - configure the display settings and launch the dual port video group Display settings are the same on the remote client and...
Page 258
USB cables to available USB ports on the target. 3. Connect each CIM to the Raritan device using a CAT5/6 cable. 4. If you have not already done so: a. Connect the Raritan device to an AC power source using the provided power cable b.
Page 259
9. If security warnings appear, accept and/or allow access. Step 3: Configure the Mouse Mode and Ports Once you have connected the target server to the Raritan device through the target server video ports, it detects the connection and displays the ports on the Port Configuration page.
For example, if you are using extended desktop mode, the port windows can be moved between monitors. Raritan Client Navigation when Using Dual Video Port Groups When using full screen mode in the clients, switch between ports by: ...
Chapter 4: KX III Administration Direct Port Access and Dual Port Video Groups Direct Port Access allows users to bypass having to use the KX III's Login dialog and Port Access page. This feature also provides the ability to enter a username and password directly to proceed to the target, if the username and password is not contained in the URL.
Page 262
Chapter 4: KX III Administration From LDAP/LDAPS When an LDAP/LDAPS authentication is successful, the KX III determines the permissions for a given user based on the permissions of the user's group. Your remote LDAP server can provide these user group names by returning an attribute named as follows: rciusergroup attribute type: string...
Chapter 4: KX III Administration Setting the Registry to Permit Write Operations to the Schema To allow a domain controller to write to the schema, you must set a registry entry that permits schema updates. To permit write operations to the schema: 1.
Chapter 4: KX III Administration 3. Click New and then choose Attribute. When the warning message appears, click Continue and the Create New Attribute dialog appears. 4. Type rciusergroup in the Common Name field. 5. Type rciusergroup in the LDAP Display Name field. 6.
Page 265
Chapter 4: KX III Administration 2. Scroll to the user class in the right pane and right-click it. 3. Choose Properties from the menu. The user Properties dialog appears. 4. Click the Attributes tab to open it. 5. Click Add.
Chapter 4: KX III Administration 6. Choose rciusergroup from the Select Schema Object list. 7. Click OK in the Select Schema Object dialog. 8. Click OK in the User Properties dialog. Updating the Schema Cache To update the schema cache: ®...
Page 267
Chapter 4: KX III Administration 3. Go to the directory where the support tools were installed. Run adsiedit.msc. The ADSI Edit window opens. 4. Open the Domain. 5. In the left pane of the window, select the CN=Users folder.
Page 268
Chapter 4: KX III Administration 6. Locate the user name whose properties you want to adjust in the right pane. Right-click the user name and select Properties. 7. Click the Attribute Editor tab if it is not already open. Choose rciusergroup from the Attributes list.
Virtual Media Chapter 5 In This Chapter Overview....................257 Prerequisites for Using Virtual Media ............258 Mounting Local Drives ................259 Supported Tasks Via Virtual Media ............259 Supported Virtual Media Types .............260 Supported Virtual Media Operating Systems ........260 Number of Supported Virtual Media Drives...........261 Connecting and Disconnecting from Virtual Media .......261 Virtual Media in a Windows XP Environment ........263 Virtual Media in a Linux Environment............264...
Chapter 5: Virtual Media Prerequisites for Using Virtual Media KX III Virtual Media Prerequisites For users requiring access to virtual media, the KX III permissions must be set to allow access to the relevant ports, as well as virtual media access (VM Access port permission) for those ports.
Chapter 5: Virtual Media Mounting Local Drives This option mounts an entire drive, which means the entire disk drive is mounted virtually onto the target server. Use this option for hard drives and external drives only. It does not include network drives, CD-ROM, or DVD-ROM drives. Notes on Mounting Local Drives KVM target servers running the Windows XP ®...
USB mass storage devices PC hard drives ISO images (disk images) ISO9660 is the standard supported by Raritan. However, other ISO standards can be used. Digital audio devices* Conditions when Read/Write is Not Available Virtual media Read/Write is not available in the following situations: ...
Chapter 5: Virtual Media Number of Supported Virtual Media Drives With the virtual media feature, you can mount up to two drives (of different types) that are supported by the USB profile currently applied to the target. These drives are accessible for the duration of the KVM session.
You can access the media just like any other drive. Mounting CD-ROM/DVD-ROM/ISO Images This option mounts CD-ROM, DVD-ROM, and ISO images. Note: ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work. To access a CD-ROM, DVD-ROM, or ISO image: 1.
Chapter 5: Virtual Media 4. For remote ISO images on a file server: a. Choose the Remote Server ISO Image option. b. Choose Hostname and Image from the drop-down list. The file servers and image paths available are those that you configured using the File Server Setup page.
Chapter 5: Virtual Media Virtual Media in a Linux Environment Active System Partitions You cannot mount active system partitions from a Linux client. Linux Ext3/4 drive partitions need to be unmounted via umount /dev/<device label> prior to a making a virtual media connection. Drive Partitions The following drive partition limitations exist across operating systems: ...
Virtual Media File Server Setup (File Server ISO Images Only) This feature is only required when using virtual media to access file server ISO images. ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work.
"Virtual KVM Client (VKC and VKCs) Help" on page 270). Recommended Minimum Active KVM Client (AKC) Requirements Raritan recommends the Active KVM Client (AKC) machines meet the following minimum requirements for use with KX III. Client machine with either a - ...
Since .NET is required to run AKC, if you do not have .NET installed or you have an unsupported version of .NET installed, you will receive a message instructing you to check the .NET version. Note: Raritan recommends Windows XP ® operating system users verify you have a working version of .NET 4.0 or 4.5 already installed before...
Windows Vista , Windows 7 and Windows 2008 server users should ensure that Protected Mode is not on when accessing the Raritan device. Enable AKC Download Server Certificate Validation If the Raritan device (or CC-SG) administrator has enabled the Enable AKC Download Server Certificate Validation option: ...
Chapter 6: Active KVM Client (AKC) Help a. Select Control Panel > Java. b. On the General tab, click Network Settings. The Network Settings dialog opens. c. Select "Use Proxy Server". d. Click Advanced. The Advanced Network Settings dialog opens. e.
Virtual KVM Client (VKC and VKCs) Chapter 7 Help In This Chapter Overview....................271 Recommended Minimum Virtual KVM Client (VKC) Requirements..271 Virtual KVM Client Java Requirements - KX III ........272 Proxy Server Configuration for Use with VKC, VKCS, and AKC ..272 Connect to a Target from Virtual KVM Client (VKC), Standalone VKC (VKCs), or Active KVM Client (AKC) .............273 Configuring Connection Properties ............273...
IMPORTANT: Refreshing your browser closes the Virtual KVM Client connection. Recommended Minimum Virtual KVM Client (VKC) Requirements Raritan recommends the Virtual KVM Client (VKC) machines meet the following minimum requirements for use with KX III. Client machine with either a - ...
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Virtual KVM Client Java Requirements - KX III ™ Java 1.7 or 1.8 is required to use the Java-based Virtual KVM Client (VKC). Java 1.8.0_40 is required to use the VKCS. Proxy Server Configuration for Use with VKC, VKCS, and AKC When the use of a Proxy Server is required, a SOCKS proxy must also be provided and configured on the remote client PC.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Connect to a Target from Virtual KVM Client (VKC), Standalone VKC (VKCs), or Active KVM Client (AKC) Once you have logged on to the KX III Remote Console, access target servers via the Virtual KVM Client (VKC), Standalone VKC (VKCs), or Active KVM Client (AKC).
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Access Connection Properties To access connection properties: Click Connection > Properties, or click the Connection... icon to open the Connection Properties dialog. Default Connection Property Settings - Optimized for Best Performance The KX III comes configured to provide optimal performance for the majority of video streaming conditions.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Click Reset on the Connection Properties dialog at any time to return to the default settings. Tip: Use the Connection Information dialog to monitor the connection in real-time. See Access and Copy Connection Information (on page 278) Optimize for: Selections...
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Video Mode The Video Mode slider controls each video frame's encoding, affecting video quality, frame rate and bandwidth. In general, moving the slider to the left results in higher quality at the cost of higher bandwidth and, in some cases, lower frame rate.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Noise Filter Unless there is a specific need to do so, do not change the noise filter setting. The default setting is designed to work well in most situations. The Noise Filter controls how much interframe noise is absorbed by the KX III.
Horizontal Resolution - The target server horizontal resolution. Vertical Resolution - The target server vertical resolution. Refresh Rate - Refresh rate of the target server. Protocol Version - Raritan communications protocol version. Access and Copy Connection Information...
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Steps Click Connection > Info... to open the Connection Info dialog. Click Copy to Clipboard. Paste the information as needed. USB Profiles Set a USB profile for a target server from the Virtual KVM Client (VKC) by clicking USB Profile in the menu, then selecting from the menu choices.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Keyboard Send Ctrl+Alt+Del Macro Due to its frequent use, a Ctrl+Alt+Delete macro is preprogrammed. Selecting Keyboard > Send Ctrl+Alt+Del, or clicking on the Ctrl+Alt+Delete button in the toolbar sends this key sequence to the server or to the KVM switch to which you are currently connected.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help 4. Click OK. Keyboard Macros Keyboard macros ensure that keystroke combinations intended for the target server are sent to and interpreted only by the target server. Otherwise, they might be interpreted by the computer on which the Virtual KVM Client (VKC) is running (your client PC).
Chapter 7: Virtual KVM Client (VKC and VKCs) Help a. To remove a step in the sequence, select it and click Remove. b. To change the order of steps in the sequence, click the step and then click the up or down arrow buttons to reorder them as needed.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Click Yes to replace the existing macro with the imported version. Click Yes to All to replace the currently selected and any other duplicate macros that are found. Click No to keep the original macro and proceed to the next macro ...
Chapter 7: Virtual KVM Client (VKC and VKCs) Help 4. Select the folder to save the macro file to, enter a name for the file and click Save. If the macro already exists, you receive an alert message. 5. Select Yes to overwrite the existing macro or No to close the alert without overwriting the macro.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Calibrating Color Use the Calibrate Color command to optimize the color levels (hue, brightness, saturation) of the transmitted video images. The color settings are on a target server-basis. Note: When color is successfully calibrated, the values are cached and reused each time you switch to the target.
Page 298
Warning: Exercise caution when changing the Clock and Phase settings. Doing so may result in lost or distorted video and you may not be able to return to the previous state. Contact Raritan Technical Support before making any changes. Horizontal Offset - Controls the horizontal positioning of the target server display on your monitor.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Note: Some Sun background screens, such as screens with very dark borders, may not center precisely on certain Sun servers. Use a different background or place a lighter colored icon in the upper left corner of the screen.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Mouse Options You can operate in either single mouse mode or dual mouse mode. When in a dual mouse mode, and provided the option is properly configured, the mouse cursors align. When controlling a target server, the Remote Console displays two mouse cursors - one belonging to your KX III client workstation, and the other belonging to the target server.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Dual Mouse Modes Absolute Mouse Synchronization In this mode, absolute coordinates are used to keep the client and target cursors in synch, even when the target mouse is set to a different acceleration or speed.
Page 302
To be sure to avoid any problems with this function, Raritan recommends you do not have file icons or folder icons in the upper left corner of your desktop.
Page 303
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Standard Mouse Mode Standard Mouse mode uses a standard mouse synchronization algorithm. The algorithm determines relative mouse positions on the client and target server. In order for the client and target mouse cursors to stay in synch, mouse acceleration must be disabled.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Single Mouse Mode Single Mouse mode uses only the target server mouse cursor; the client mouse cursor no longer appears onscreen. Note: Single mouse mode does not work on Windows or Linux targets when the client is running on a Virtual Machine.
Page 305
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Japanese United Kingdom Korean (Korea) French (Belgium) Norwegian (Norway) Portuguese (Portugal) Danish (Denmark) Swedish (Sweden) German (Switzerland) Hungarian (Hungary) Spanish (Spain) ...
Page 306
Turkish Keyboards If using a Turkish keyboard, you must connect to a target server through the Active KVM Client (AKC). It is not supported by other Raritan clients. Slovenian Keyboards The < key does not work on Slovenian keyboards due to a JRE limitation.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Language Configuration method Japanese System Settings (Control Center) System Settings (Control Center) Korean System Settings (Control Center) Belgian Keyboard Indicator Norwegian Keyboard Indicator Danish Keyboard Indicator Swedish Keyboard Indicator Hungarian System Settings (Control Center) Spanish System Settings (Control Center) Italian...
Page 308
Chapter 7: Virtual KVM Client (VKC and VKCs) Help b. Use 'Select From Detected Monitors' to select from a list of monitors that are currently detected by the application. If a previously selected monitor is no longer detected, 'Currently Selected Monitor Not Detected' is displayed. ...
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Configuring Port Scan Settings in VKC/VKCS and AKC Configuring port scan options in VKC/VKCS and AKC applies to scanning from the KX III Remote Console. To configure port scan options for the Local Console, see Configure Local Console Scan Settings (on page 348)
The "snapshot" function generate log files and image files from the target. It then bundles these files in a zip file that can be sent to Raritan Technical Support in order to help diagnose technical problems you may be encountering.
Page 311
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Log.txt file: These are the client logs. Note that the logs are included even if you have not enabled information to be captured in them. VKC uses internal memory to capture the information in this case.
Page 312
Chapter 7: Virtual KVM Client (VKC and VKCs) Help To capture a diagnostic snapshot: Steps Access a target, and then click Tools > Collect a Diagnostic Snapshot. Several messages are displayed as the information is collected. You are prompted to save the zip file containing the diagnostic files.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help The zip file containing the diagnostic files that were collecting opens. View Options View Toolbar You can use the Virtual KVM client with or without the toolbar display. To toggle the display of the toolbar (on and off): ...
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Full Screen Mode When you enter Full Screen mode, the target's full screen is displayed and acquires the same resolution as the target server. The hot key used for exiting this mode is specified in the Options dialog, Tool Options (on page 292).
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Smart Cards Using the KX III, you are able to mount a smart card reader onto a target server to support smart card authentication and related applications. For a list of supported smart cards, smart card readers, and additional system requirements, see Smart Card Minimum System Requirements, CIMs and Supported/Unsupported Smart Card...
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Smart Card Reader Detected After a KVM session is established with a target server, a Smart Card menu and button are available in VKC and AKC. Once the Smart Card button is selected or Smart Card is selected from the menu, the smart card readers that are detected as attached to the remote client are displayed in a dialog.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Update a Smart Card Reader To update the smart card in the Select Smart Card Reader dialog: Click Refresh List if a new smart card reader has been attached to the client PC.
Note: Audio CDs are not supported by virtual media so they do not work with the audio feature. Before you begin using the audio feature, Raritan recommends you review the audio related information documented in the following sections of Help: ...
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Digital Audio VKC and AKC Icons Audio Icon name Description icons Speaker These icons are located in status bar at the bottom of the client window. Green, blinking waves indicate an audio playback session is currently streaming.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Recommendations for Audio Connections when PC Share Mode is Enabled If you are using the audio feature while running PC Share mode, audio playback and capture are interrupted if an additional audio device is connected to the target.
Page 321
Chapter 7: Virtual KVM Client (VKC and VKCs) Help In practice, the bandwidth used when an audio device connects to a target is higher due to the keyboard and video data consumed when opening and using an audio application on the target. A general recommendation is to have at least a 1.5MB connection before running playback and capture.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Saving Audio Settings Audio device settings are applied on a per KX III device basis. Once the audio devices settings are configured and saved on the KX III, the same settings are applied to it. ®...
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Operating System Audio Playback Support Review the table shown here to see which Raritan client works with audio playback/capture for each operating system: Operating system Audio playback and capture supported ...
Page 324
Chapter 7: Virtual KVM Client (VKC and VKCs) Help 6. Select the audio format for the playback device from the Format: drop-down. Note: Select the format that you wish to use based on the available network bandwidth. Formats with lower sampling rates consume less bandwidth and may tolerate more network congestion.
Chapter 7: Virtual KVM Client (VKC and VKCs) Help Adjusting Capture and Playback Buffer Size (Audio Settings) Once an audio device is connected, the capture and playback buffer size can be adjusted as needed. This feature is useful for controlling the quality of the audio, which may be impacted by bandwidth limitations or network spikes.
Version Information - Virtual KVM Client This menu command provides version information about the Virtual KVM Client, in case you require assistance from Raritan Technical Support. To obtain version information: 1. Choose Help > About Raritan Virtual KVM Client.
To use a standalone appliance for remote access to KX III target servers instead of using the VKC or AKC clients on a PC or laptop, purchase Dominion User Stations from Raritan. The User Station is perfect for environments like labs, studios and control rooms where a PC or laptop is not wanted.
Chapter 8: Dominion KX III User Station Overview The Dominion User Station (DKX3-UST) is designed to access servers and computer devices connected to KX III's from your LAN/WAN networks. ALL KX III models are supported. KX III Release 3.2 and above is required.
Connect the User Station to the LAN/WAN network. 2. Power on and log in to the User Station. For initial login, use Raritan's default username and password: admin and raritan. 3. Add KX III's data. See Logging In to KX III...
Page 330
Chapter 8: Dominion KX III User Station 4. The added KX III's are displayed in the Port Navigator window. 5. Click a KX III to show a list of its servers. 6. Click a target server, and a KVM Client opens, showing the target video.
Mobile KVM Client (MKC) Help Chapter 9 In This Chapter Remotely Access Targets Using a Mobile Device.........319 Connect to a Target Using the Mobile KVM Client........320 Touch Mouse Functions ................320 Using the MKC Toolbar .................321 Display Mobile Device Keyboard............323 Display Connection Info.................323 Set Keyboard Type................324 Manage Mobile Client Keyboard Macros ..........325 Launch Keyboard Macro ...............325...
Chapter 9: Mobile KVM Client (MKC) Help Connect to a Target Using the Mobile KVM Client Mobile access using the Mobile Access Client requires the use of CommandCenter Secure Gateway (CC-SG). Enable pop-ups in your mobile device browser before accessing Mobile KVM Client (MKC) or CC-SG Mobile Access Client.
Chapter 9: Mobile KVM Client (MKC) Help Using the MKC Toolbar The MKC toolbar may not be completely visible at one time, depending on the resolution of your mobile device. To view the whole toolbar: Touch and swipe to move the toolbar icons to the left and right, bringing different icons into view.
Page 334
Chapter 9: Mobile KVM Client (MKC) Help Touch and swipe the toolbar to the left, to view the F5 through F12 icons. Swipe the toolbar back to the right to return to the default view. On a mobile phone device, such as an iPhone, you will see fewer icons. Use the same touch-and-swipe motion left and right to view additional icons.
Chapter 9: Mobile KVM Client (MKC) Help Display Mobile Device Keyboard Toggle on and off the MKC keyboard to display or hide it. The keyboard is configured on the mobile device. For example, on iPad choose Settings > General > Keyboard > International Keyboards to see the available keyboards or to add a keyboard.
Chapter 9: Mobile KVM Client (MKC) Help Set Keyboard Type The default keyboard in MKC is US/International English. Select the language keyboard to match the language keyboard setting of the target you are accessing. This is required to provide the correct keyboard mapping in the target.
Chapter 9: Mobile KVM Client (MKC) Help Manage Mobile Client Keyboard Macros Each user must import their user-defined keyboard macros to make them available for use while connected to targets using the Mobile KVM Client (MKC). Export the file from Virtual KVM Client (VKC), then import it using the desktop Access Client.
Chapter 9: Mobile KVM Client (MKC) Help 2. Touch Mouse Mode, then touch Absolute, Intelligent, or Standard. Absolute Mouse Mode In this mode, absolute coordinates are used to keep the client and target cursors in synch, even when the target mouse is set to a different acceleration or speed.
Chapter 9: Mobile KVM Client (MKC) Help Sync Mouse in Intelligent or Standard Mouse Mode In Intelligent or Standard mouse mode, the Sync Mouse command forces realignment of the target server mouse pointer with the MKC mouse pointer. To sync mouse: 1.
Chapter 9: Mobile KVM Client (MKC) Help View MKC Help Descriptions of the touchscreen techniques can be accessed in MKC. To view MKC help: Touch the Help icon (?) icon in the toolbar. The help opens. Touch Mouse Functions (on page 320) to view this information.
Chapter 10 KX III Remote Console In This Chapter Overview....................329 Scanning Ports - Remote Console ............330 Changing a Password ................335 Managing Favorites ................336 Overview When you log in to the KX III via a network connection, you access the Remote Console. The first page accessed is the Port Access page. Logging In to the KX III (see "Logging In to KX...
Chapter 10: KX III Remote Console Scanning Ports - Remote Console Use the port scanning feature to search for selected targets and display them in individual thumbnails as part of a slide show. This feature allows you to monitor up to 32 targets at one time since you can view each target server individually as it is displayed during the slide show.
Chapter 10: KX III Remote Console Scanning Ports Slide Show - Remote Console When you start a scan, the Port Scan window opens. As each target is found, it is displayed as a thumbnail in a slide show. The slide show scrolls through the target thumbnails based on the default interval of 10 seconds or according to the interval you specify.
Chapter 10: KX III Remote Console Target Status Indicators During Port Scanning - Remote Console The status of each target is indicated by green, yellow and red lights that are displayed below the target thumbnail. As the target is the focus of the rotation, the indicator is in the task bar also shows the status.
Chapter 10: KX III Remote Console Using Scan Port Options Following are options available to you while scanning targets. With the exception of the Expand/Collapse icon, all of these options are selected from the Options menu in the upper left of the Port Scan viewer. The options will return to their defaults when you close the window.
Chapter 10: KX III Remote Console Scan for Targets To scan for targets: 1. Click the Set Scan tab on the Port Access page. 2. Select the targets you want to include in the scan by selecting the checkbox to the left of each target, or select the checkbox at the top of the target column to select all targets.
Chapter 10: KX III Remote Console Changing a Password To change your KX III password: 1. Choose User Management > Change Password. The Change Password page opens. 2. Type your current password in the Old Password field. 3. Type a new password in the New Password field. Retype the new password in the Confirm New Password field.
Chapter 10: KX III Remote Console Managing Favorites A Favorites feature is provided so you can organize and quickly access the devices you use frequently. The Favorite Devices section is located in the lower left sidebar of the Port Access page and provides the ability to: ...
Chapter 10: KX III Remote Console Access and Display Favorites To access a favorite KX III devices: Click on a KX III listed beneath Favorite Devices in the left of the Remote Console. To display favorite KX IIIs by name: ...
The KX III Remote Console automatically discovers the KX III devices, and any other Raritan device, in the subnet of the KX III. To discover devices on the device subnet: 1. Choose Manage > Discover Devices - KX III Subnet.
Page 352
Chapter 10: KX III Remote Console To access a discovered device: Click the device name or IP address for that device. A new browser opens to that device.
Chapter 11 KX III Local Console In This Chapter Overview....................341 Accessing a Target Server ..............341 Local Console Video Resolution Behavior ..........342 Simultaneous Users ................342 Local Port Hot Keys and Connect Keys ..........342 Scanning Ports - Local Console ............345 Local Console Smart Card Access............349 Local Console USB Profile Options............351 KX III Local Console Factory Reset ............352 Resetting the KX III Using the Reset Button on the Device ....353...
Chapter 11: KX III Local Console Local Console Video Resolution Behavior By default, monitors are typically set to the highest resolution they support. Once a monitor is connected to the KX III Local Console, KX III detects the monitor's native resolution. As long as the native resolution is supported by the Local Console, KX III uses that resolution.
Chapter 11: KX III Local Console Return to the Local Console from a Target Device - Default Hot Key Press the Scroll Lock hot key twice rapidly The video display switches from the target device interface to the KX III Local Console interface.
Chapter 11: KX III Local Console Special Sun Key Combinations ™ The following key combinations for Sun Microsystems server’s special keys operate on the Local Console port. These special keys are available from the Keyboard menu when you connect to a Sun target device: Sun key Local port key combination...
Chapter 11: KX III Local Console Scanning Ports - Local Console Use the port scanning feature to search for selected targets and display them in individual thumbnails as part of a slide show. This feature allows you to monitor up to 32 targets at one time since you can view each target server individually as it is displayed during the slide show.
Chapter 11: KX III Local Console Scanning Port Slide Show - Local Console When you start a scan, the Port Scan window opens. As each target is found, it is displayed as a thumbnail in a slide show. The slide show scrolls through the target thumbnails based on the default interval of 10 seconds or according to the interval you specify.
Chapter 11: KX III Local Console Target Status Indicators During Port Scanning - Local Console In thumbnail view on the Local Console, the status of each target is indicated below the thumbnail on the page until it is the focus of the slide show view.
Chapter 11: KX III Local Console Display Interval - changes the scan display interval. Interval Between Ports - change interval between switching different port during scan. Scan for Targets - Local Console To scan for targets: 1. Click the Set Scan tab on the Port Access page. 2.
Page 362
Chapter 11: KX III Local Console 2. From the Local Console, click Tools. 3. Select the smart card reader from the Card Readers Detected list. Select None from the list if you do not want a smart card reader mounted. 4.
Chapter 11: KX III Local Console Local Console USB Profile Options From the USB Profile Options section of the Tools page, you can choose from the available USB profiles. The ports that can be assigned profiles are displayed in the Port Name field and the profiles that are available for a port appear in the Select Profile To Use field after the port is selected.
Chapter 11: KX III Local Console KX III Local Console Factory Reset Note: It is recommended that you save the audit log prior to performing a factory reset. The audit log is deleted when a factory reset is performed and the reset event is not logged in the audit log.
Chapter 11: KX III Local Console Resetting the KX III Using the Reset Button on the Device On the back panel of the device, there is a Reset button. It is recessed to prevent accidental resets (you need a pointed object to press this button).
An extended local port extends the reach of the local port beyond the rack the KX II is located, for example to another KVM switch. This can be achieved by configuring a KX III to work with a Raritan Cat5 Reach DVI transmitter and receiver, which are then connected to a remote console or other device.
4. Connect the local console ports of the KVM switch to the transmitter. a. Plug one end of the Raritan-provided DVI cable into the DVI-I IN port on the transmitter, and the other end into the KVM switch's video port.
Page 368
Appendix A: Connecting a KX III and Cat5 Reach DVI - Provide Extended Local Port Functionality 5. Turn on the KVM switch. Tip: The local or remote console can be equipped with a KVM drawer instead of a set of keyboard, mouse and monitor. See the illustration below.
Page 369
Appendix A: Connecting a KX III and Cat5 Reach DVI - Provide Extended Local Port Functionality 5. Turn on both KVM switches. To increase the distance between any computer and a KVM switch: 1. Set up an optional local console with the transmitter. 2.
Appendix B Accessing a Paragon II from the KX In This Chapter Overview....................358 Supported Paragon II CIMS and Configurations ........359 Connecting the Paragon II to the KX III..........364 Overview Connect the Paragon II system to a KX III device that is managed by CC-SG so that Paragon II is accessible from CC-SG.
Appendix B: Accessing a Paragon II from the KX III When you access the Paragon II system from KX III or CC-SG (if the KX III is managed by CC-SG), the Paragon II OSUI login screen appears for you to log in. In this integration, you can perform any OSUI functions implemented with current Paragon II firmware or any KX III function implemented with current KX III firmware except for the virtual media feature.
Page 372
Appendix B: Accessing a Paragon II from the KX III Paragon CIM Supports Does not support Servers with USB- or P2CIM-AUSBDUAL Virtual media ™ USB-type Smart cards keyboard and mouse Absolute Mouse ports mode Automatic skew ...
Appendix B: Accessing a Paragon II from the KX III KX III-to-KX III Paragon CIM Guidelines The following system configuration guidelines should be followed when you are using Paragon CIMs in a KX III-to-KX III configuration: Concurrent Access Both KX III KVM switches should be configured with the same policy for concurrent access to targets - both PC-Share or both Private.
Appendix B: Accessing a Paragon II from the KX III If a connection to the target is in place from the other KX III, the availability is checked when a connection is attempted. Access is denied or allowed consistent with the PC-Share policy in place for the KX III. Until that time, the availability is not be updated on the other KX III.
Appendix B: Accessing a Paragon II from the KX III Paragon II Mode description Supported? operation mode port can be selected and Timeout, which is configured controlled by more than on the Paragon II, is not one user, but only one supported.
Appendix B: Accessing a Paragon II from the KX III Connecting the Paragon II to the KX III To connect the Paragon II system to a KX III: 1. Check whether the Paragon II user station that you want to connect to the KX III is implemented with version 4.6 firmware (or later).
Visualize the KX III in a Cabinet Elevation and on the Floor Map..370 Managing the KX III Lifecycle ..............371 Overview ® Raritan's dcTrack is a complete Data Center Infrastructure Management (DCIM) solution that provides you with real-time information about your facilities, networks and IT.
Appendix C: Managing KX III in dcTrack Locate Space in a Cabinet for the KX III Use dcTrack's Capacity Management functionality to locate space in a cabinet in your data center for the KX III. Search by: Rack units - dcTrack looks for a cabinet with enough rack units open to accommodate the KX III...
Appendix C: Managing KX III in dcTrack Make and model - dcTrack looks for a cabinet with enough available space in the cabinet based on the KX III's dimensions, connectors, and so on See Capacity Management - Locating and Reserving Cabinet Space for an Item in dcTrack Help.
Import KX III Devices into dcTrack If you are adding a large number of KX IIIs, complete the 02_Items_-_All_Other_Classes_for_3.x.xls spreadsheet, which is provided by Raritan, with the KX III information, then import the ® spreadsheet into dcTrack using the Import Wizard.
Appendix C: Managing KX III in dcTrack Note that entire cabinets, along with the items in the cabinet and their connections and child devices, can also be cloned. So if you added a KX III to a cabinet and use the same cabinet configuration throughout your data center, you can clone the cabinet.
Appendix C: Managing KX III in dcTrack Visualize the KX III in a Cabinet Elevation and on the Floor Map ® When you add the KX III to dcTrack , you place it in a cabinet. Provided the data center location the cabinet belongs to has a floor map associated with it, and the cabinet the KX III is housed in is linked to a cabinet object on the floor map, you can access the floor map from the KX III page in dcTrack.
Appendix C: Managing KX III in dcTrack See Locate an Item on the Floor Map and Items List (Web Client) in dcTrack Help. You can also view the KX III in the cabinet elevation from the floor map. See Cabinet Elevations - Floor Map (Web Client) in dcTrack Help. Managing the KX III Lifecycle Once the KX III is installed, manage its lifecycle in your data center.
Appendix C: Managing KX III in dcTrack Decommission a KX III to Storage Submit a request to decommission the KX III to storage if you plan to temporarily move it to an off-site location. See Submit a Request to Decommission an Item to Storage in dcTrack Help.
Appendix D Specifications In This Chapter Hardware ....................373 Software....................395 Hardware KX III Dimensions and Physical Specifications Dominion KX Description Power & Dimensions Weight Operating Humidity III model heat (WxDxH) temp dissipation 8 server DKX3-108 Dual Power 17.3" x 8.60lbs 0º...
Page 386
Appendix D: Specifications Dominion KX Description Power & Dimensions Weight Operating Humidity III model heat (WxDxH) temp dissipation port for use at the rack 32 server DKX3-232 Dual Power 17.3" x 9.08lbs 0º - 45º C 0-85 % ports 110V/240V, 13.15'' x 50-60Hz...
Page 387
Appendix D: Specifications Dominion KX Description Power & Dimensions Weight Operating Humidity III model heat (WxDxH) temp dissipation use at the rack 32 server DKX3-832 Dual Power 17.3" x 9.96lbs 0º - 45º C 0-85 % ports 110V/240V, 13.15'' x 50-60Hz 1.73'' ...
Appendix D: Specifications KX III Supported Target Server Video Resolutions When using digital CIMs, you set the target's video resolution to match your monitor's native display resolution. The native display resolution is set when configuring ports for digital CIMs (see Configure the CIM Target Settings (on page 107)).
KX III. Note: Due to the multiplicity of server manufacturers and types, OS versions, video drivers, and so on, as well as the subjective nature of video quality, Raritan cannot guarantee performance across all distances in all environments.
Appendix D: Specifications Supported Computer Interface Module (CIMs) Specifications Digital CIMs support Display Data Channels (DDC) and Enhanced Extended Display Identification Data (E-EDID). Note: Both plugs must be plugged in for the HDMI and DVI CIMs. CIM model Description Dimensions Weight (WxDxH) ...
Page 392
Appendix D: Specifications CIM model Description Dimensions Weight (WxDxH) 1.7" x 3.5" x 0.8" 0.25lb D2CIM-DVUSB-DP Digital CIM that provides digital-to-analog conversion and 43 x 90 x 19mm 0.11kg support for: BIOS virtual media Smartcard/CAC ...
Appendix D: Specifications CIM model Description Dimensions Weight (WxDxH) 1.3" x 3.0" x 0.6" 0.20lb DCIM-PS2 CIM for PS2 33 x 76 x 15mm 0.09kg 1.3" x 3.0" x 0.6" 0.20lb DCIM-USBG2 CIM for USB and Sun USB ...
Appendix D: Specifications If the Mac’s HDMI or DisplayPort video has a mini connector, a passive adapter cable may be required to connect to the full sized HDMI and DisplayPort plugs on the digital CIMs. Alternatively, use the Mac VGA adapter with the D2CIM-VUSB or D2CIM-DVUSB.
Appendix D: Specifications Digital CIM Established Modes 720x400@70Hz IBM, VGA 640x480@60Hz IBM, VGA ® 640x480@67Hz Apple Mac 640x480@72Hz VESA 640x480@75Hz VESA 800x600@56Hz VESA 800x600@60Hz VESA 800x600@72Hz VESA 800x600@75Hz VESA 832x624@75Hz Apple Mac II ...
KX III and LAN Switch to Autodetect (recommended), or set both to a fixed speed/duplex such as 100MB/s/Full. Dell Chassis Cable Lengths and Video Resolutions In order to maintain video quality, Raritan recommends using the following cable lengths and video resolutions when you are connecting to ®...
Page 398
Raritan device. CCID Requirements If the Raritan D2CIM-DVUSB VM/CCID is not recognized as a smart card reader by your Linux target, you may need to update the CCID driver version to 1.3.8 or above and update the driver configuration file (Info.plist).
® client, the following requirements must be met to use smart card readers with the Raritan device. Note: User login to client, on smart card insertion, may take longer when 1 or more KVM sessions are actively in place to targets. As the login process to these targets is also under way.
SCM Microsystems firmware v5.25. Unsupported Smart Card Readers This table contains a list of readers that Raritan has tested and found not to work with the Raritan device, therefore they are unsupported. If a smart card reader does not appear in the supported smart card readers table or in the unsupported smart card readers table, Raritan cannot guarantee it will function with the device.
Appendix D: Specifications Audio Playback and Capture Recommendations and Requirements Audio Level Set the target audio level to a mid-range setting. ® For example, on a Windows client, set the audio to 50 or lower. This setting must be configured through the playback or capture audio device, not from the client audio device control.
Appendix D: Specifications In practice, the bandwidth used when an audio device connects to a target is higher due to the keyboard and video data consumed when opening and using an audio application on the target. A general recommendation is to have at least a 1.5MB connection before running playback and capture.
KX III Local Console functions. For more information about non-US keyboards, see Informational Notes (on page 399). Note: Raritan strongly recommends that you use system-config-keyboard to change languages if you are working in a Linux environment. Language Regions Keyboard layout...
Appendix D: Specifications Language Regions Keyboard layout Danish Denmark Danish Swedish Sweden Swedish Hungarian Hungary Hungarian Slovenian Slovenia Slovenian Italian Italy Italian Spanish Spain and most Spanish Spanish speaking countries Portuguese Portugal Portuguese Mac Mini BIOS Keystroke Commands ® The following BIOS commands have been tested on Intel-based Mac ®...
Appendix D: Specifications Keystroke Description Virtual Media CIM Dual Virtual Mac Lion Server Media CIM HDMI CIM button optical disc Press N during Start up from a startup compatible network server (NetBoot) Press T during Start up in Target Disk startup mode Press Shift during...
Page 406
KX III (Raritan This port is used to discover other Dominion devices and for KVM-over-IP) communication between Raritan devices and systems, including Protocol, CC-SG for devices that CC-SG management is available. Configurable Port By default, this is set to Port 5000, but you may configure it to use any 5000 TCP port not currently in use.
Appendix D: Specifications Software Supported Operating Systems, Browsers and Java Versions Operating Systems Browsers Java Windows 10 Windows Edge Java 1.7 or later for VKC ® Internet Explorer Java 1.8.0_40 or Chrome 46 later for VKCs ® Firefox ® ® Windows 7 Home Premium SP1 64-bit Internet Explorer...
Page 408
Certain versions of Safari block Java for security reasons. Since Java is ® required to use KX III, Raritan recommends you use Firefox instead. Additionally, you may be required to navigate through a number of messages. Select 'Do Not Block' if these messages are displayed.
Appendix D: Specifications Virtual KVM Client (VKC), VKCS, and Active KVM Client (AKC) Requirements ® Microsoft .NET 4.0 (or later) is required to use KX III with the Microsoft ® Windows -based Active KVM Client (AKC). ™ Java 1.7 or 1.8 is required to use the Java-based . Java 1.8.0_40 is required to use the VKCS.
Appendix D: Specifications ™ ® Note that a JRE plug-in is available for the Windows 32-bit and 64-bit operating systems. Java Runtime Environment (JRE) Notes (on page 399) for additional information. Multi-Language Keyboard JRE Requirement In order for multi-language keyboards to work in the KX III and Virtual ™...
Help link in the KX III Remote Console interface. Note: Some topics in this section reference other multiple Raritan appliances because various appliances are impacted by the information. Java Runtime Environment (JRE) Notes...
Appendix E: Informational Notes c. Deselect the Enable Caching checkbox if it is already checked. d. Click OK. 4. To clear the Java cache: a. From the Temporary Files Settings dialog, click the Delete Files button. The Delete Temporary Files dialog appears. b.
Appendix E: Informational Notes Dual Stack Login Performance Issues If you are using the KX III in a dual stack configuration, it is important you configured the domain system (DNS) correctly in the KX III in order to avoid delays when logging in. Tips for Adding a Web Browser Interface (on page 132) for information on configuring your DNS in KX III.
As a result, the “Safely Remove Hardware” system tray icon does not appear for drives mapped by the D2CIM-VUSB and a warning message may appear when disconnecting the device. Raritan has not observed any problems or issues from this message, however.
Appendix E: Informational Notes Target Video Picture Not Centered (Mouse Out of Synch) At certain resolutions when using an HDMI or DVI CIM with the KX III: The video display may not be centered properly - black rectangles can be seen at the edges of the screen ...
Appendix E: Informational Notes Virtual Media via VKC and AKC in a Windows Environment Windows XP ® operating system administrator and standard user ® privileges vary from those of the Windows Vista operating system and ® the Windows 7 operating system. When enabled in Vista or Windows 7, User Access Control (UAC) provides the lowest level of rights and privileges a user needs for an application.
Appendix E: Informational Notes Virtual Media Support on Windows 7, Windows 2008 and Windows XP Targets Virtual media is not supported on a Windows 7, Windows 2008 or Windows XP target server when connecting via VKC and AKC from Windows 2008 or Windows 2012. Virtual Media Not Refreshed After Files Added After a virtual media drive has been mounted, if you add a file(s) to that drive, those files may not be immediately visible on the target server.
Appendix E: Informational Notes 2. Restart the target. Virtual Media Connection Failures Using High Speed for Virtual Media Connections Under certain circumstances it may be necessary to select the "Use Full Speed for Virtual Media CIM" when a target has problems with "High Speed USB"...
Page 420
The USB Profile Menu selections are configurable via the Console Device Settings > Port Configuration page. Should none of the standard USB profiles provided by Raritan meet your target server requirements, Raritan Technical Support can work with you to arrive at a solution tailored for that target. Raritan recommends that you do the following: 1.
Appendix E: Informational Notes Changing a USB Profile when Using a Smart Card Reader There may be certain circumstances under which you will need to change the USB profile for a target server. For example, you may need to change the connection speed to "Use Full Speed for Virtual Media CIM"...
2. If using a digital CIM, then change the Display Native Resolution on the Port Configuration page to another resolution, or 3. If using the HDMI CIM, use the DVI Compatibility Mode. Contact Raritan Technical Support for additional assistance. Sun Composite Synch Video ™...
Appendix E: Informational Notes Keyboard Notes French Keyboard Caret Symbol (Linux Clients Only) The Virtual KVM Client (VKC) do not process the key combination of Alt ® Gr + 9 as the caret symbol (^) when using French keyboards with Linux clients.
® Because the Sun on Linux has problems generating the correct KeyEvents for foreign-language keyboards configured using System Preferences, Raritan recommends that you configure foreign keyboards using the methods described in the following table. Language Configuration method US Intl Default...
Appendix E: Informational Notes Note: The Keyboard Indicator should be used on Linux systems using Gnome as a desktop environment. When using a Hungarian keyboard from a Linux client, the Latin letter U with Double Acute and the Latin letter O with Double Acute work only with JRE 1.6 (and later).
Appendix E: Informational Notes Mac Keyboard Keys Not Supported for Remote Access ® ® When a Mac is used as the client, the following keys on the Mac ™ ™ keyboard are not captured by the Java Runtime Environment (JRE ...
Features that May Interrupt an Audio Connection If you use any of the following features while connected to an audio device, your audio connection may be interrupted. Raritan recommends you do not use these features if you are connected to an audio device: ...
“Version Unknown”. Moving Between Ports on a Device If you move a between ports on the same Raritan device and resume management within one minute, CC-SG may display an error message. If you resume management, the display will be updated.
Appendix F Frequently Asked Questions In This Chapter General FAQs..................417 Remote Access ..................419 Universal Virtual Media................422 Bandwidth and KVM-over-IP Performance ...........424 IPv6 Networking ..................428 Servers ....................429 Blade Servers ..................430 Installation .....................432 Local Port - KX IIII .................434 Extended Local Port ................435 Dual Power Supplies ................436 Intelligent Power Distribution Unit (PDU) Control........436 Ethernet and IP Networking ..............437...
Page 430
OS-independent; users can troubleshoot and reconfigure servers even when servers are down. At the rack, Dominion KX III provides the same functionality, convenience, and space and cost savings as traditional analog KVM switches. However, Dominion KX III also integrates the industry’s highest performing KVM-over-IP...
How large is the Dominion KX III? Dominion KX III is only 1U high (except the KX3-864 and KX3-464, which are 2U), fits in a standard 19" rack mount and is only 11.4" (29 cm) deep.
Page 432
"ports." The local port can the local port? access the same server using the PC-Share feature. In order to access Dominion KX III Because Dominion KX III is completely from a client, what hardware, Web-accessible, it doesn’t require customers...
Page 433
Dominion KX access Dominion KX III is approximately 500KB III? How long does it take to in size. The following chart describes the time retrieve? required to retrieve Dominion KX III’s applet at different network speeds: 100Mbps Theoretical .05 seconds...
How do I access servers You can access servers at the rack or via connected to Dominion KX III if the modem. network ever becomes Dominion KX III offers a dedicated modem port unavailable? for attaching an external modem. Universal Virtual Media Question...
Page 435
Appendix F: Frequently Asked Questions Question Answer What is required for virtual media? A Dominion KX III virtual media CIM is required. There are two VGA-based CIMs: a D2CIM-VUSB or D2CIM-DVUSB. The D2CIM-VUSB has a single USB connector and is for customers who will use virtual media at the OS level.
Appendix F: Frequently Asked Questions Question Answer Why would I use a USB profile? USB profiles are most often required at the BIOS level where there may not be full support for the USB specification when accessing virtual media drives. However, profiles are sometimes used at the OS level, for example, for mouse synchronization for Mac and Linux servers.
Page 437
Appendix F: Frequently Asked Questions Question Answer How is bandwidth used in Dominion KX III offers totally new video KVM-over-IP systems? processing that provides flexible, high performance video, efficient use of bandwidth and anytime/anywhere access via LAN, WAN or Internet.
Page 438
Appendix F: Frequently Asked Questions Question Answer What factors affect bandwidth? There are many factors that determine how much bandwidth will be used. The primary factor, noted above, is the amount of change in the target server’s video display. This is dependent on the user’s task and actions.
Page 439
Appendix F: Frequently Asked Questions Question Answer How do I optimize performance KX III provides a variety of settings in our and bandwidth? remote clients for the user to optimize bandwidth and performance. The default settings will provide an at-the-rack level of performance in standard LAN/WAN environments with economical use of bandwidth.
Appendix F: Frequently Asked Questions Question Answer What is the maximum remote (over The Dominion KX III is the first and only IP) video resolution supported? KVM-over-IP switch to support full high definition (HD) remote video resolution – 1920x1080 at frame rates up to 30 frames per second with digital audio.
Windows server to operate? KVM infrastructure to always be available in any scenario whatsoever (as they will likely need to use the KVM infrastructure to fix problems), Dominion KX III is designed to be completely independent from any external server.
What comes in the Dominion KX III The following is included: (1) Dominion KX III box? appliance, (2) Quick Setup Guide, (3) standard 19" rack mount brackets, (4) user manual CD-ROM, (6) localized AC line cord and (7) warranty certificate and other documentation.
Page 443
With the Dominion KX III, you don’t have to use these hotkeys. Just click on the name of the blade server, and the Dominion KX III will automatically switch to that blade without the explicit use of the hotkey.
Installation Question Answer Besides the appliance itself, what Each server that connects to Dominion KX III do I need to order from Raritan to requires a Dominion or Paragon computer install Dominion KX III? interface module (CIM), an adapter that connects directly to the keyboard, video and mouse ports of the server.
Page 445
How many servers can be Dominion KX III models range from 8, 16 or 32 connected to each Dominion KX III server ports in a 1U chassis, to 64 server ports appliance? in a 2U chassis.
Raritan’s Dominion SX line of secure console servers. Dominion SX offers more serial functionality at a better price point than Dominion KX III. This SX is easy to use, configure and manage, and can be completely integrated with a Dominion series deployment.
This means that: If the Dominion KX III is configured to interact with an external RADIUS, LDAP or Active Directory ® server, users attempting to access the local port will authenticate against the same server.
50–60 Hz. If a power supply or input fails, will The Dominion KX III front panel LED will notify I be notified? the user of a power failure. An entry will also be sent to the audit log and displayed on the KX remote client user interface.
These come in many outlet, connector and amp variations. Note that you should not connect the PM series of power strips to the Dominion KX III as these power strips do not provide outlet-level switching. How many PDUs can be...
Page 450
Appendix F: Frequently Asked Questions Question Answer Can I access Dominion Yes. Dominion KX III not only uses standard KX III over a wireless connection? Ethernet, but also very conservative bandwidth with very high quality video. Thus, if a wireless...
Appendix F: Frequently Asked Questions Question Answer I’m having problems connecting to The Dominion KX III relies on your LAN/WAN the Dominion KX III over my IP network. Some possible problems include: network. What could be the Ethernet auto-negotiation. On some...
Page 452
Question Answer How do I physically connect To physically connect multiple KX III multiple Dominion KX III appliances appliances together for consolidated local together into one solution? access, you can connect the Tiering ports of multiple "tiered" (or "cascaded") KX III switches to a "base"...
Page 453
Can I connect an existing analog Yes. Analog KVM switches can be connected KVM switch to Dominion KX III? to one of Dominion KX III’s server ports. Simply use a USB computer interface module (CIM), and attach it to the user ports of the existing analog KVM switch.
Dominion KX III, Paragon CIMs transmit video at a distance of up to 150 feet (46 m), the same as Dominion KX III CIMs – not at 1,000 feet (304 m), as they do when connected to Paragon.
Page 455
128-bit encryption, both in its SSL communications as well as its own data stream. Literally no data is transmitted between remote clients and Dominion KX III that is not completely secured by encryption. Does Dominion KX III support AES Yes. The Dominion KX III utilizes the Advanced encryption as recommended by Encryption Standard (AES) for added security.
Yes. Customers can upload self-signed or certificate to the Dominion KX IIKX certificate authority-provided digital certificates IIII? to the Dominion KX III for enhanced authentication and secure communication. Does the KX III support a Yes. For government, military and other...
CommandCenter? CommandCenter. For the local port, connect a compatible smart card reader to the USB port of the Dominion KX III. Manageability Question Answer Can Dominion KX III be remotely Yes.
Can Dominion KX III integrate with Yes. In addition to Dominion KX III’s own syslog? internal logging capabilities, Dominion KX III can send all logged events to a centralized syslog server.
DisplayPort video standards are supported with the digital video CIMs. How long is the hardware warranty The Dominion KX III comes with a standard for the KX III? two-year warranty, which can be extended to 5 years of warranty coverage.
Page 460
In general, KX II customers can continue to How do I migrate from the use their existing switches for many years. As Dominion KX II to Dominion KX III? their data centers expand, customers can purchase and use the new KX III models.
Index AKC Supported Operating Systems • 267 Allow Cookies • 267 Allow Pop-Ups • 9 Apple Mac Mouse Settings • 35 AC Power • 37 Apply a Native Display Resolution to Other About the Cat5 Reach DVI • 354 CIMs • 107, 109 Absolute Mouse Mode •...
Page 462
Index Configure KX III for Dual LAN Failover Mode • 40, 90, 98 Configure KX III for Dual LAN Isolation Mode • 40, 42, 90, 92 Local User Port (Local Console) • 38 Configure Local Console Scan Settings • 297, Calibrating Color •...
Page 463
188, 190, 247, 249 Documentation and Support • 446 Creating a KX III Backup and Restore File • Dominion KX III User Station • 1, 7, 8, 19, 50, Creating a New Attribute • 251 Dominion KX3-832 • 4 Creating Port Groups • 188, 189 Dominion KX3-864 •...
Page 464
Index From Microsoft Active Directory • 250 Full Screen Mode • 302 E. Connect Target Servers to KX III • 39 Editing rciusergroup Attributes for User Members • 254 G. Connect the Modem (Optional) • 39 Enable AKC Download Server Certificate General FAQs •...
Page 465
Index Intelligent Power Distribution Unit (PDU) KX II-to-KX III Unsupported Backup/Restore Control • 436 File Settings and Functions • 214, 215, 216 Interface Command • 239 KX3-832 Features • 5 Introduction • 1 KX3-832 Photos • 4 IPv6 Command • 240 KX3-864 Features •...
Page 466
RADIUS Communication Exchange Number of Supported Audio/Virtual Media and Specifications • 86 Smartcard Connections • 390 Raritan Client Navigation when Using Dual Number of Supported Virtual Media Drives • Video Port Groups • 248 Rear Mount • 32 Numeric Keypad • 411 Rebooting the KX III •...
Page 467
Index Recommended Minimum Virtual KVM Client Security Issues • 238 (VKC) Requirements • 271 Security Management • 192 Refreshing the Screen • 284 Security Settings • 72, 192 Relationship Between Users and Groups • 65 Security Warnings and Validation Messages • Remote Access •...
Page 468
Index SSH Access from a Windows PC • 233 Supported Tasks Via Virtual Media • 259 SSH Connection to the KX III • 233 Supported Virtual Media Operating Systems • SSL Certificates • 1, 10, 53, 205 Standard Mouse Mode • 291, 325, 326 Supported Virtual Media Types •...
Page 469
Index Unsupported and Limited Features on Tiered Virtual KVM Client Version Not Known from Targets • 150 CC-SG Proxy Mode • 416 Unsupported Smart Card Readers • 349, 388 Virtual Media • 257, 302 Update a Smart Card Reader • 305 Virtual Media Connection Failures Using High Updating the LDAP Schema •...
For CommandCenter Secure Gateway: Press 6, then Press 2 Phone: +31-10-2844040 Fax: 732-764-8887 Email: tech.europe@raritan.com Email for CommandCenter NOC: tech-ccnoc@raritan.com Email for all other products: tech@raritan.com United Kingdom Monday - Friday 8:30 a.m. to 5 p.m. GMT China Phone +44(0)20-7090-1390...