Contents Chapter 1 Introduction KSX II Overview ... 2 KSX II Help ... 4 Related Documentation ... 4 KSX II Client Applications ... 4 Virtual Media ... 5 Product Features ... 5 Hardware ... 5 Software ... 6 External Product Overview ... 7 Terminology ...
Page 4
Contents Video Properties ... 63 Mouse Options... 68 VKC Virtual Media ... 73 Smart Cards ... 74 Tool Options ... 76 View Options ... 79 Help Options ... 80 Active KVM Client (AKC) ... 80 Overview ... 80 AKC Supported .NET Framework, Operating Systems and Browsers ... 81 Prerequisites for Using AKC ...
Page 5
Users ... 120 User List ... 120 Adding a New User ... 121 Modifying an Existing User ... 122 Logging a User Off (Force Logoff) ... 122 Authentication Settings ... 123 Implementing LDAP/LDAPS Remote Authentication ... 124 Returning User Group Information from Active Directory Server ... 127 Implementing RADIUS Remote Authentication ...
Page 6
Contents Configuring IP Access Control ... 199 SSL Certificates ... 201 Security Banner ... 203 Chapter 10 Maintenance Maintenance Features (Local/Remote Console) ... 205 Audit Log ... 206 Device Information ... 207 Backup and Restore ... 208 USB Profile Management ... 210 Handling Conflicts in Profile Names ...
Page 7
Target Connections and the CLI ... 236 Setting Emulation on a Target ... 236 Port Sharing Using CLI ... 237 Administering the KSX II Console Server Configuration Commands ... 237 Configuring Network ... 237 Interface Command ... 238 Name Command ... 238 Connect Commands ...
Page 8
Contents Resetting the KSX II Using the Reset Button ... 256 Chapter 14 Modem Configuration Certified Modems for UNIX, Linux and MPC ... 257 Low Bandwidth KVM Settings ... 258 Client Dial-Up Networking Configuration ... 259 Windows 2000 Dial-Up Networking Configuration ... 259 Windows Vista Dial-Up Networking Configuration ...
Page 9
Setting the Registry to Permit Write Operations to the Schema ... 296 Creating a New Attribute ... 296 Adding Attributes to the Class ... 297 Updating the Schema Cache ... 299 Editing rciusergroup Attributes for User Members ... 299 Appendix C Informational Notes Overview ...
Page 10
Contents Appendix D FAQs General Questions ... 316 Serial Access ... 318 Universal Virtual Media ... 323 USB Profiles ... 324 IPv6 Networking ... 326 Remote Access ... 327 Ethernet and IP Networking ... 329 Servers ... 333 Blade Servers ... 334 Installation ...
Chapter 1: Introduction KSX II Overview Raritan's Dominion KSX II is an enterprise-class, secure digital device that provides a single integrated solution for remote KVM (keyboard, video, mouse) server access and serial device management, as well as power control from anywhere in the world from a web browser. At the rack, the KSX II provides control of all KVM server and serial targets from a single keyboard, monitor, and mouse.
Page 13
Diagram key Cat5 cable Computer Interface Module (CIM) KSX II Remote KVM and serial devices Modem access Remote (network) access Chapter 1: Introduction Remote virtual media USB drive(s) Rack PDU (power strip) Local access IP LAN/WAN PSTN...
Chapter 1: Introduction KSX II Help The KSX II help provides information on how to install, set up, and configure the KSX II. It also includes information on accessing target servers and power strips, using virtual media, managing users and security, and maintaining and diagnosing the KSX II.
Virtual Media All KSX II models support virtual media. The benefits of virtual media - mounting of remote drives/media on the target server to support software installation and diagnostics - are now available in all of the KSX II models. Virtual media sessions can be secured by using 128-bit and 256-bit AES or RC4 encryption.
Chapter 1: Introduction Software Local serial port (RS232) for CLI-based administration and serial target access Integrated power control Dual dedicated power control ports LED indicators for network activity, and remote KVM user status Hardware reset button Internal modem...
External Product Overview The following diagram indicates the external components of the KSX II. Note that the KSX II 144 will have 4 KVM ports and 4 serial ports as compared to the KSX II 188 used in the diagram, which has 8 KVM ports and 8 serial ports.
Page 18
Chapter 1: Introduction Item Description AC power cord plug Power Control information. Power on/off switch LAN 3 port Note: The LAN 3 port is reserved for future use. LAN1 and LAN2 ports See Step 3: Connect the Equipment for additional information.
Chapter 1: Introduction Terminology This manual uses the following terminology for the components of a typical KSX II configuration:...
Page 20
Chapter 1: Introduction Diagram key TCP/IP IPv4 and/or IPv6 KVM (Keyboard, Video, Mouse) UTP Cable (Cat5/5e/6) KSX II Local Access Console Local User - an optional user console (consisting of a keyboard, mouse, and multi-sync VGA monitor) attached directly to the KSX II to control KVM target servers and serial targets locally (directly at the rack, not through the network).
1U 19" rackmount chassis. Each KSX II device ships with the following contents: Amount included Item Dominion KSX II device Dominion KSX II Quick Setup Guide Rackmount Kit AC Power Cord Cat5 Network Cable Cat5 Network Crossover Cable Set of 4 Rubber Feet (for desktop use)
Chapter 2 Installation and Configuration In This Chapter Overview ... 12 Default Login Information ... 12 Getting Started ... 13 Overview This section provides a brief overview of the installation process. Each step is further detailed in the remaining sections of this chapter. To install and configure the KSX II: ...
Getting Started Step 1: Configure KVM Target Servers KVM target servers are the computers that will be accessed and controlled via the KSX II. Before installing the KSX II, configure all KVM target servers to ensure optimum performance. This configuration applies only to KVM target servers, not to the client workstations (remote PCs) used to access the KSX II remotely.
Page 24
Chapter 2: Installation and Configuration Operating System Mouse and Video Settings This section provides video mode and mouse information specific to the operating system in use on the target server. Windows XP, Windows 2003 and Windows 2008 Settings 1. Configure the mouse settings: 2.
Page 25
Windows Vista Settings To configure KVM target servers running Windows Vista operating system: 1. Configure the mouse settings: a. Choose Start > Settings > Control Panel > Mouse. b. Select "Advanced system settings" from the left navigation panel. The System Properties dialog opens. c.
Page 26
Chapter 2: Installation and Configuration 2. Disable animation and fade effects: 3. Click OK and Close the Control Panel. Windows 2000 Settings 1. Configure the mouse settings: 2. Disable transition effects: Set the mouse motion speed setting to exactly the middle speed.
Page 27
Deselect the "Use the following transition effect for menus and tooltips" option. 3. Click OK and close the Control Panel. Linux Settings (Red Hat 4) Note: The following settings are optimized for Standard Mouse mode only. To configure KVM target servers running Linux interface): 1.
Page 28
Chapter 2: Installation and Configuration SUSE Linux 10.1 Settings Note: Do not attempt to synchronize the mouse at the SUSE Linux prompt. You must be connected to the target server to synchronize the mouse cursors. 1. Choose Desktop > Control Center. The Desktop Preferences dialog 2.
Page 29
Tip: If you do not want to be prompted upon log out, follow these procedures instead. To make your settings permanent in Linux (no prompt): 1. Choose Desktop > Control Center > System > Sessions. 2. Click the Session Options tab. 3.
Page 30
Chapter 2: Installation and Configuration 3. KVM target servers running the Solaris operating system must output 1. Issue the Stop+A command to drop to bootprom mode. 2. Issue the following command to change the output resolution: setenv 3. Issue the boot command to reboot the server. You can also contact your Raritan representative to purchase a video output adapter: If you have:...
Page 31
4. Set the Threshold slider to 1.0. 5. Click OK. Accessing the Command Line 1. Right click. 2. Choose Tools > Terminal. A terminal window opens. (It is best to be at the root to issue commands.) Video Settings (POST) Sun systems have two different resolution settings: a POST resolution and a GUI resolution.
Chapter 2: Installation and Configuration IBM AIX 5.3 Settings Follow these steps to configure KVM target servers running IBM 5.3. 1. Go to Launcher. 2. Choose Style Manager. 3. Click Mouse. The Style Manager - Mouse dialog appears. 4. Use the sliders to set the Mouse acceleration to 1.0 and Threshold to 5.
To take advantage of the KSX II: The firewall must allow Web-access capabilities Automatic redirection of HTTP requests to HTTPS (so the more common “http://xxx.xxx.xxx.xxx” can be used instead of “https://xxx.xxx.xxx.xxx”) Network Settings (on page 136) for additional information about designating another discovery port.
Page 34
By default, only LAN1 is active and the automatic failover is disabled. When enabled, if the KSX II internal network interface or the network switch to which it is connected becomes unavailable, LAN2 will be enabled using the same IP address.
Page 35
UTP (Cat5/5e/6) cable, connect the CIM to an available server port on the back of your KSX II device. Note: The DCIM-USB G2 provides a small slide switch on the back of the CIM. Move the switch to P for PC-based USB target servers. Move the switch to S for Sun USB target servers.
Page 36
Chapter 2: Installation and Configuration 4. Connect the rack PDU to an AC power source. 5. Power on the KSX II device. Important: When using CC-SG, the power ports should be inactive before attaching rack PDUs that were swapped between the power ports.
Page 37
F. Serial Target Ports To connect a serial target to the KSX II, use a Cat5 cable with an appropriate serial adapter. The following table lists the necessary KSX II hardware (adapters and/or cables) for connecting the KSX II to common vendor/model combinations.
The KSX II ships with a default password. The first time you start the KSX II you are required to change that password. 1. Power on the KSX II using the power switch(s) at the back of the 2. Once the unit has booted, the KSX II Local Console is visible on the 3.
Page 39
Assigning an IP Address These procedures describe how to assign an IP address on the Network Settings page. For complete information about all of the fields and the operation of this page, see Network Settings. To assign an IP address: 1.
Page 40
Chapter 2: Installation and Configuration 5. Select Obtain DNS Server Address Automatically if DHCP is 6. If Use the Following DNS Server Addresses is selected, regardless 7. When finished, click OK. this section of the Network Settings page. Note: In some environments, the default LAN Interface Speed & Duplex setting Autodetect (autonegotiator) does not properly set the network parameters, which results in network issues.
Naming Target Servers To name the target servers: 1. Connect all of the target servers if you have not already done so. See Step 3: Connect the Equipment for a description of connecting the equipment. 2. Using the KSX II Local Console, choose Device Settings > Port Configuration.
Page 42
Chapter 2: Installation and Configuration Configuring Direct Port Access via Telnet, IP Address or SSH The information in this topic is specific to enabling direct port access for serial targets. Use the Enable Direct Port Access via URL option on the Device Services page to enable direct port access for a KVM/serial port connect to the KSX II.
Page 43
Chapter 2: Installation and Configuration 3. Click OK to save this information. Once you have created the direct port access, it can be connected in a client application such as PuTTY. Following is an example of how the direct port access information would appear in PuTTY. Note that PuTTY is not the only client application that can be used.
Page 44
Chapter 2: Installation and Configuration Note to CC-SG Users Note to CC-SG Users If you are using the KSX II in a CC-SG configuration, perform the installation steps, and when finished, consult the CommandCenter Secure Gateway User Guide, Administrator Guide, or Deployment Guide to proceed (all found on Raritan's website, www.raritan.com, under Support).
Del key on your keyboard. The Caps Lock light starts to blink, indicating that the CIM is in Layout Code Change mode. The text window displays: Raritan Computer, Inc. Current keyboard layout code = 22h (US5 UNIX). 3. Type the layout code desired (for example, 31 for the Japanese keyboard).
Chapter 3 Working with Target Servers In This Chapter Interfaces ... 36 Proxy Server Configuration for use with MPC, VKC and AKC ... 50 Virtual KVM Client (VKC) ... 51 Active KVM Client (AKC) ... 80 Multi-Platform Client (MPC) ... 82 Raritan Serial Console (RSC)...
The following sections of the user guide contain information about using specific interfaces to connect to the KSX II and manage targets: KSX II Local Console Interface: KSX II Devices Local Console: KSX II Devices" on page 37) KSX II Remote Console Interface ...
Chapter 3: Working with Target Servers KSX II Remote Console Interface The KSX II Remote Console is a browser-based graphical user interface that allows you to log in to KVM target servers and serial targets connected to the KSX II and to remotely administer the KSX II. The KSX II Remote Console provides a digital connection to your connected KVM target servers.
Page 49
Depending on your browser and security settings, you may see various security and certificate warnings. It is necessary to accept these warnings to launch the KSX II Remote Console. You can reduce the number of warning messages during subsequent log ins by checking the following options on the security and certificate warning messages: ...
Page 50
Chapter 3: Working with Target Servers Interface and Navigation KSX II Console Layout Both the KSX II Remote Console and the KSX II Local Console interfaces provide an HTML (web-based) interface for configuration and administration, as well as target server list and selection. The options are organized into various tabs.
Page 51
Left Panel The left panel of the KSX II interface contains the following information. Note that some information is conditional and will only be displayed if you are a certain of user, are using certain features, and so on. This conditional information is noted here.
Page 52
Chapter 3: Working with Target Servers Information Connected Users Online Help - User Guide Favorite Devices FIPS Mode Description When displayed? The users, identified by Always their username and IP address, who are currently connected to the KSX II. Links to online help. Always Managing Favorites Always...
Page 53
Port Access Page After successfully logging on to the KSX II Remote Console, the Port Access page appears. This page lists all of the KSX II ports, the connected KVM target servers, and their status and availability. The Port Access page provides access to the KVM target servers connected to the KSX II.
Page 54
Chapter 3: Working with Target Servers 3. Click View by Port, View by Group or View by Search to switch 4. Click the Port Name of the target server you want to access. The 5. Choose the desired menu command from the Port Action Menu.
Page 55
Power On - Powers on the target server through the associated outlet. This option is visible only when there are one or more power associations to the target. Power Off - Powers off the target server through the associated outlets.
Page 56
Chapter 3: Working with Target Servers Managing Favorites A Favorites feature is provided so you can organize and quickly access the devices you use frequently. The Favorite Devices section is located in the lower left side (sidebar) of the Port Access page and provides the ability to: ...
Page 57
Note: Both IPv4 and IPv6 addresses are supported. Manage Favorites Page To open the Manage Favorites page: Click the Manage button in the left panel. The Manage Favorites page appears and contains the following: Use: Favorites List Discover Devices - Local Subnet Discover Devices - KSX II Subnet Discover the Raritan devices on Add New Device to Favorites Favorites List Page...
Page 58
Chapter 3: Working with Target Servers 3. Click Refresh. The list of devices on the local subnet is refreshed. 1. Select the checkbox next to the device name/IP address. 2. Click Add. Tip: Use the Select All and Deselect All buttons to quickly select all (or deselect all) devices in the remote console subnet.
Page 59
Adding, Deleting and Editing Favorites To add a device to your favorites list: 1. Choose Manage > Add New Device to Favorites. The Add New Favorite page appears. 2. Type a meaningful description. 3. Type the IP Address/Host Name for the device. 4.
Chapter 3: Working with Target Servers Proxy Server Configuration for use with MPC, VKC and AKC When the use of a Proxy Server is required, a SOCKS proxy must also be provided and configured on the remote client PC. Note: If the installed proxy server is only capable of the HTTP proxy protocol, you cannot connect.
start javaw -Xmn128M -Xmx512M -XX:MaxHeapFreeRatio=70 -XX:MinHeapFreeRatio=50 -Dsun.java2d.noddraw=true -DsocksProxyHost=192.168.99.99 -DsocksProxyPort=1080 -classpath .\sdeploy.jar;.\sFoxtrot.jar;.\jaws.jar;.\sMpc.jar com.raritan.rrc.ui.RRCApplication %1 Virtual KVM Client (VKC) Please note this client is used by various Raritan products. As such, references to other products may appear in this section of help. Overview Whenever you access a target server using the Remote Console, a Virtual KVM Client (VKC) window opens.
Page 62
Chapter 3: Working with Target Servers Button Button Description Name Video Opens the Video Settings dialog, allowing you to Settings manually adjust video conversion parameters. Color Adjusts color settings to reduce excess color Calibration noise. Same as choosing Video > Color Calibrate. Note: Not available in KX II-101-V2.
2. Click the port name of the target you want to access. The Port Action menu appears. 3. Choose Switch From in the Port Action menu. The Virtual KVM Client window switches to the new target server you selected. Power Controlling a Target Server Note: These features are available only when you have made power associations.
Chapter 3: Working with Target Servers Disconnecting KVM Target Servers Note: This item is not available on the KSX II Local Console. The only way to disconnect from the switched target in the Local Console is to use the hot key. 1.
Connection Properties The dynamic video compression algorithms maintain KVM console usability under varying bandwidth constraints. The devices optimize KVM output not only for LAN use, but also for WAN use. These devices can also control color depth and limit video output, offering an optimal balance between video quality and system responsiveness for any bandwidth.
Page 66
Chapter 3: Working with Target Servers 3. Choose the Color Depth from the drop-down list. The device can 4. Use the slider to select the desired level of Smoothing (15-bit color 5. Click OK to set these properties. 256 Kb (Cable) ...
Connection Information To obtain information about your Virtual KVM Client connection: Choose Connection > Info... The Connection Info window opens. The following information is displayed about the current connection: Device Name - The name of the device. IP Address - The IP address of the device.
Page 68
Chapter 3: Working with Target Servers Import/Export Keyboard Macros Macros exported from Active KVM Client (AKC) cannot be imported into Multi-Platform Client (MPC) or Virtual KVM Client (VKC). Macros exported from MPC or VKC cannot be imported into AKC. Note: KX II-101 does not support AKC. 1.
Page 69
Click Yes to replace the existing macro with the imported version. Click Yes to All to replace the currently selected and any other duplicate macros that are found. Click No to keep the original macro and proceed to the next macro ...
Page 70
Chapter 3: Working with Target Servers 3. Click Ok. The Export Keyboard Macro. A dialog from which to locate 4. Select the folder to save the macro file to, enter a name for the file Building a Keyboard Macro 1. Click Keyboard > Keyboard Macros. The Keyboard Macros dialog 2.
Page 71
Press Left Ctrl Release Left Ctrl Press Esc Release Esc 8. Review the Macro Sequence field to be sure the macro sequence is defined correctly. a. To remove a step in the sequence, select it and click Remove. b. To change the order of steps in the sequence, click the step and then click the up or down arrow buttons to reorder them as needed.
Page 72
Chapter 3: Working with Target Servers Running a Keyboard Macro Once you have created a keyboard macro, execute it using the keyboard macro you assigned to it or by choosing it from the Keyboard menu. Run a Macro from the Menu Bar When you create a macro, it appears under the Keyboard menu.
3. Set the language and mouse settings. 4. Exit the menu to return to normal CIM functionality. Video Properties Refreshing the Screen The Refresh Screen command forces a refresh of the video screen. Video settings can be refreshed automatically in several ways: ...
Page 74
Chapter 3: Working with Target Servers Calibrating Color Use the Calibrate Color command to optimize the color levels (hue, brightness, saturation) of the transmitted video images. The color settings are on a target server-basis. Note: The Calibrate Color command applies to the current connection only.
Page 75
c. Brightness: Use this setting to adjust the brightness of the target server display. d. Brightness Red - Controls the brightness of the target server display for the red signal. e. Brightness Green - Controls the brightness of the green signal. Brightness Blue - Controls the brightness of the blue signal.
Page 76
Chapter 3: Working with Target Servers Note: Some Sun background screens, such as screens with very dark borders, may not center precisely on certain Sun servers. Use a different background or place a lighter colored icon in the upper left corner of the screen.
Page 77
Using Screenshot from Target You are able to take a screenshot of a target server using the Screenshot from Target server command. If needed, save this screenshot to a file location of your choosing as a bitmap, JPEG or PNG file.
Chapter 3: Working with Target Servers Changing the Maximum Refresh Rate If the video card you are using on the target uses custom software and you are accessing the target through MPC or VKC, you may need to change the maximum refresh rate of the monitor in order for the refresh rate to take effect on the target.
Page 79
Mouse Pointer Synchronization When remotely viewing a target server that uses a mouse, two mouse cursors are displayed: one belonging to your remote client workstation and the other belonging to the target server. When the mouse pointer lies within the Virtual KVM Client target server window, mouse movements and clicks are directly transmitted to the connected target server.
Page 80
Chapter 3: Working with Target Servers Additional Notes for Intelligent Mouse Mode Synchronize Mouse In dual mouse mode, the Synchronize Mouse command forces realignment of the target server mouse pointer with Virtual KVM Client mouse pointer. Note: This option is available only in Standard and Intelligent mouse modes.
Page 81
Intelligent Mouse Mode In Intelligent Mouse mode, the device can detect the target mouse settings and synchronize the mouse cursors accordingly, allowing mouse acceleration on the target. Intelligent mouse mode is the default for non-VM targets. In this mode, the mouse cursor does a “dance” in the top left corner of the screen and calculates the acceleration.
Page 82
Chapter 3: Working with Target Servers Please note that mouse configurations will vary on different target operating systems. Consult your OS guidelines for further details. Also note that intelligent mouse synchronization does not work with UNIX targets. Absolute Mouse Mode In this mode, absolute coordinates are used to keep the client and target cursors in sync, even when the target mouse is set to a different acceleration or speed.
Chapter 3: Working with Target Servers 2. Click the Single/Double Mouse Cursor button in the toolbar. To exit single mouse mode: 1. Press Ctrl+Alt+O on your keyboard to exit single mouse mode. VKC Virtual Media See the chapter on Virtual Media (on page 90) for complete information about setting up and using virtual media.
OS. When the KVM session is terminated, either because it has been closed or because you switch to a new target, the smart card reader will be automatically unmounted from the target server.
Page 85
4. A progress dialog will open. Check the 'Mount selected card reader automatically on connection to targets' checkbox to mount the smart card reader automatically the next time you connect to a target. Click OK to begin the mounting process. To update the smart card in the Select Smart Card Reader dialog: ...
Chapter 3: Working with Target Servers Tool Options From the Tools menu, you can specify certain options for use with the Virtual KVM Client, including logging, setting the keyboard type, and defining hot keys for exiting Full Screen mode and Single Cursor mode. Note: The KX II-101 and KX II-101-V2 do not support single cursor mode.
Page 87
4. Exit Full Screen Mode - Hotkey. When you enter Full Screen mode, the display of the target server becomes full screen and acquires the same resolution as the target server. This is the hot key used for exiting this mode. 5.
Page 88
Chapter 3: Working with Target Servers Language Japanese Korean Belgian Norwegian Danish Swedish Hungarian Spanish Italian Slovenian Portuguese Note: The Keyboard Indicator should be used on Linux systems using Gnome as a desktop environment. Configuration method System Settings (Control Center) System Settings (Control Center) System Settings (Control Center) Keyboard Indicator...
View Options View Toolbar You can use the Virtual KVM client with or without the toolbar display. To toggle the display of the toolbar (on and off): Choose View > View Toolbar. Scaling Scaling your target window allows you to view the entire contents of the target server window.
Chapter 3: Working with Target Servers Help Options About Raritan Virtual KVM Client This menu command provides version information about the Virtual KVM Client, in case you require assistance from Raritan Technical Support. 1. Choose Help > About Raritan Virtual KVM Client. 2.
Internet Explorer 6 or later If you attempt to open AKC from a browser other than IE 6 or later, you will receive an error message instructing you to check your browser and to switch to Internet Explorer. Chapter 3: Working with Target Servers...
Chapter 3: Working with Target Servers Prerequisites for Using AKC In order to use AKC: Enable AKC Download Server Certificate Validation If the device (or CC-SG) administrator has enabled the Enable AKC Download Server Certificate Validation option: ...
Note: The Alt+Tab command toggles between windows only on the local system. When MPC opens, the Raritan devices that were automatically detected and which are found on your subnet are displayed in the Navigator in tree format. 2. If your device is not listed by name in the navigator, add it manually: a.
Page 94
Chapter 3: Working with Target Servers 3. If you're using Dominion DSX: Note: Download the standalone Raritan Serial Console from the Raritan website (www.raritan.com) on the Support page. 1. Double-click the shortcut or use the Start menu to open the 2.
Page 95
Chapter 3: Working with Target Servers 5. Click OK to log on.
Chapter 4 Rack PDU (Power Strip) Outlet Control In This Chapter Overview ... 86 Turning Outlets On/Off and Cycling Power ... 87 Overview The KSX II allows you to control Raritan PX and RPC series rack PDU (power strip) outlets. Once a PX or RPC series is setup and then attached to the KSX II, the rack PDU and its outlets can be controlled from the Powerstrip page in the KSX II interface.
Initially, when you open the Powerstrip page, the power strips that are currently connected to the KSX II are displayed in the Powerstrip drop-down. Additionally, information relating to the currently selected power strip is displayed. If no power strips are connected to the KSX II, a message stating "No powerstrips found"...
Page 98
Chapter 4: Rack PDU (Power Strip) Outlet Control 5. Click OK to close the Power On confirmation dialog. The outlet will 1. Click Off. 2. Click OK on the Power Off dialog. 3. Click OK on the Power Off confirmation dialog. The outlet will be 1.
Page 99
2. Click OK. The outlet will then cycle (note that this may take a few seconds). 3. Once the cycling is complete the dialog will open. Click OK to close the dialog. Chapter 4: Rack PDU (Power Strip) Outlet Control...
Chapter 5 Virtual Media In This Chapter Overview ... 91 Prerequisites for Using Virtual Media ... 94 Using Virtual Media via VKC and AKC in a Windows Environment ... 95 Using Virtual Media ... 96 File Server Setup (File Server ISO Images Only) ... 98 Connecting to Virtual Media ...
Overview Virtual media extends KVM capabilities by enabling KVM target servers to remotely access media from a client PC and network file servers. With this feature, media mounted on a client PC and network file servers is essentially "mounted virtually" by the target server. The target server can then read from and write to that media as if it were physically connected to the target server itself.
Page 103
Diagram key Desktop PC KSX II Target server CD/DVD drive USB mass storage device PC hard drive Remote file server (ISO images) Chapter 5: Virtual Media...
Chapter 5: Virtual Media Prerequisites for Using Virtual Media With the virtual media feature, you can mount up to two drives (of different types) that are supported by the USB profile currently applied to the target. These drives are accessible for the duration of the KVM session.
Using Virtual Media via VKC and AKC in a Windows Environment Windows XP privileges vary from those of the Windows Vista the Windows 7 When enabled in Vista or Windows 7, User Access Control (UAC) provides the lowest level of rights and privileges a user needs for an application.
Chapter 5: Virtual Media Using Virtual Media With the KSX II virtual media feature, you can mount up to two drives (of different types). These drives are accessible for the duration of the KVM session. For example, you can mount a specific CD-ROM, use it, and then disconnect it when you are done.
Page 107
Target Server KVM target servers must support USB connected drives. KVM target servers running the Windows 2000 must have all of the recent patches installed. 1. USB 2.0 ports are both faster and preferred.. 2. If you plan to access file server ISO images, identify those file servers and images through the KSX II Remote Console File Server Setup page.
Chapter 5: Virtual Media File Server Setup (File Server ISO Images Only) Note: This feature is only required when using virtual media to access file server ISO images. ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work. Note: SMB/CIFS support is required on the file server.
Page 109
Chapter 5: Virtual Media Note: You cannot access a remote ISO image via virtual media using an IPv6 address due to technical limitations of third-party software used by the by the KX, KSX or KX101 G2 device. ® Note: If you are connecting to a Windows 2003 server and attempt to load an ISO image from the server, you may receive an error stating "Virtual Media mounting on port failed.
Chapter 5: Virtual Media Connecting to Virtual Media Local Drives This option mounts an entire drive, which means the entire disk drive is mounted virtually onto the target server. Use this option for hard drives and external drives only. It does not include network drives, CD-ROM, or DVD-ROM drives.
WARNING: Enabling Read/Write access can be dangerous! Simultaneous access to the same drive from more than one entity can result in data corruption. If you do not require Write access, leave this option unselected. 4. Click Connect. The media will be mounted on the target server virtually.
Page 112
Chapter 5: Virtual Media 2. For internal and external CD-ROM or DVD-ROM drives: 3. For ISO images: 4. For remote ISO images on a file server: Note: If you are working with files on a Linux command after the files are copied using virtual media in order to view the copied files.
Disconnecting Virtual Media To disconnect the virtual media drives: For local drives, choose Virtual Media > Disconnect Drive. For CD-ROM, DVD-ROM, and ISO images, choose Virtual Media > Disconnect CD-ROM/ISO Image. Note: In addition to disconnecting the virtual media using the Disconnect command, simply closing the KVM connection closes the virtual media as well.
Chapter 6 USB Profiles In This Chapter Overview ... 104 CIM Compatibility ... 105 Available USB Profiles ... 105 Selecting Profiles for a KVM Port ... 111 Overview To broaden the KSX II's compatibility with different KVM target servers, Raritan provides a standard selection of USB configuration profiles for a wide range of operating system and BIOS-level server implementations.
CIM Compatibility In order to make use of USB profiles, you must use a D2CIM-VUSB or D2CIM-DVUSB with updated firmware. A VM-CIM that has not had its firmware upgraded will support a broad range of configurations (Keyboard, Mouse, CD-ROM, and Removable Drive) but will not be able to make use of profiles optimized for particular target configurations.
Page 116
Chapter 6: USB Profiles USB profile BIOS DellPowerEdge Keyboard Only BIOS ASUS P4C800 Motherboard Description Restrictions: USB bus speed limited to full-speed (12 MBit/s) No virtual media support Dell PowerEdge BIOS Access (Keyboard Only) Use this profile to have keyboard functionality for the Dell PowerEdge BIOS when using D2CIM-VUSB.
Page 117
USB profile BIOS Generic ™ ® BIOS HP Proliant DL145 ® BIOS HP Compaq DC7100/DC7600 BIOS IBM ThinkCentre Lenovo IBM BladeCenter H with Advanced Management Chapter 6: USB Profiles Description BIOS Generic Use this profile when Generic OS profile does not work on the BIOS. WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected.
Page 118
Chapter 6: USB Profiles USB profile Module BIOS Lenovo ThinkPad T61 & X61 BIOS Mac Generic HP Proliant DL360/DL380 G4 (HP SmartStart CD) HP Proliant DL360/DL380 G4 (Windows 2003 Description D2CIM-DVUSB is connected to the Advanced Management Module. Restrictions: Virtual CD-ROM and disk drives cannot be used simultaneously BIOS Lenovo ThinkPad T61 and X61...
Page 119
USB profile Installation) ® Linux ® MAC OS X (10.4.9 and later) Mac OS-X, version 10.4.9 and later RUBY Industrial Mainboard (AwardBIOS) Supermicro Mainboard Phoenix (AwardBIOS) Chapter 6: USB Profiles Description Use this profile for the HP Proliant DL360/DL380 G4 series server when installing Windows 2003 Server without the help of HP SmartStart CD.
Page 120
Chapter 6: USB Profiles USB profile Suse 9.2 Troubleshooting 1 Troubleshooting 2 Troubleshooting 3 Description Restrictions: Virtual CD-ROM and disk drives cannot be used simultaneously SuSE Linux 9.2 Use this for SuSE Linux 9.2 distribution. Restrictions: Absolute mouse synchronization™ not supported ...
USB profile Use Full Speed for Virtual Media CIM Selecting Profiles for a KVM Port The KSX II comes with a set of USB profiles that you can assign to a KVM port based on the characteristics of the KVM target server it connects to.
Boot menu. The mouse will not respond at this point. The mouse will respond. Note: Mouse speed may be slow while in Single Mouse mode. system, exit Single Mouse mode and switch back to Absolute Mouse mode for better mouse performance. ®...
Chapter 7 User Management In This Chapter User Groups ... 113 Users ... 120 Authentication Settings ... 123 Changing a Password ... 135 User Groups The KSX II stores an internal list of all user and group names to determine access authorization and permissions. This information is stored internally in an encrypted format.
Chapter 7: User Management User Group List User groups are used with local and remote authentication (via RADIUS or LDAP/LDAPS). It is a good idea to define user groups before creating individual users since, when you add a user, you must assign that user to an existing user group.
Page 125
The Group page is organized into the following categories: Group, Permissions, Port Permissions, and IP ACL. 2. Type a descriptive name for the new user group into the Group Name field (up to 64 characters). 3. Set the permissions for the group. Select the checkboxes before the permissions you want to assign to all of the users belonging to this group.
Page 126
Chapter 7: User Management 3. Select the appropriate permissions. 4. Click OK. Note: See Alternate RADIUS Authentication Settings for information on additional settings if you are using Alternate RADIUS Authentication. Permissions Important: Selecting the User Management checkbox allows the members of the group to change the permissions of all users, including their own.
Page 127
Permission Description Management authentication (LDAP/LDAPS/RADIUS), login settings Port Permissions For each server port, you can specify the access type the group has, as well as the type of port access to the virtual media and the power control. Please note that the default setting for all permissions is Deny. Port access Option Description...
Page 128
Chapter 7: User Management Group-Based IP ACL (Access Control List) Important: Exercise caution when using group-based IP access control. It is possible to be locked out of your KSX II if your IP address is within a range that has been denied access. This feature limits access to the KSX II device by users in the selected group to specific IP addresses.
4. Click Insert. If the rule number you just typed equals an existing rule number, the new rule is placed ahead of the exiting rule and all rules are moved down in the list. To replace a rule: 1. Specify the rule number you want to replace. 2.
Chapter 7: User Management 4. Set the IP ACL (optional). This feature limits access to the KSX II 5. Click OK. Important: If you delete a group with users in it, the users are automatically assigned to the <unknown> user group. Tip: To determine the users belonging to a particular group, sort the User List by User Group.
Adding a New User It is a good idea to define user groups before creating KSX II users because, when you add a user, you must assign that user to an existing user group. Refer to Adding a New User Group information.
Chapter 7: User Management Modifying an Existing User 1. Open the User List page by choosing User Management > User List. 2. Locate the user from among those listed on the User List page. 3. Click the user name. The User page opens. 4.
Authentication Settings Authentication is the process of verifying that a user is who he says he is. Once a user is authenticated, the user's group is used to determine his system and port permissions. The user's assigned privileges determine what type of access is allowed. This is called authorization. When the KSX II is configured for remote authentication, the external authentication server is used primarily for the purposes of authentication, not authorization.
Chapter 7: User Management Implementing LDAP/LDAPS Remote Authentication Lightweight Directory Access Protocol (LDAP/LDAPS) is a networking protocol for querying and modifying directory services running over TCP/IP. A client starts an LDAP session by connecting to an LDAP/LDAPS server (through the default TCP port is 389). The client then sends operation requests to the server, and the server sends responses in turn.
Page 135
9. In the User Search DN field, enter the Distinguished Name of where in the LDAP database you want to begin searching for user information. Up to 64 characters can be used. An example base search value might be: cn=Users,dc=raritan,dc=com. Consult your authentication server administrator for the appropriate values to enter into these fields.
Page 136
Chapter 7: User Management 13. Select the Enable Secure LDAP checkbox if you would like to use 14. The default Port is 389. Either use the standard LDAP TCP port or 15. The default Secure LDAP Port is 636. Either use the default port or 16.
18. The KSX II provides you with the ability to test the LDAP configuration from the Authentication Settings page due to the complexity sometimes encountered with successfully configuring the LDAP server and KSX II for remote authentication. To test the LDAP configuration, enter the login name and password in the "Login for testing"...
Chapter 7: User Management 4. From the KSX II, enable and configure your AD server properly. See Important Notes Implementing RADIUS Remote Authentication Remote Authentication Dial-in User Service (RADIUS) is an AAA (authentication, authorization, and accounting) protocol for network access applications.
Page 139
The timeout is the length of time the KSX II waits for a response from the RADIUS server before sending another authentication request. 9. The default number of retries is 3 Retries. This is the number of times the KSX II will send an authentication request to the RADIUS server.
Page 140
Chapter 7: User Management CHAP - With CHAP, authentication can be requested by the server at any time. CHAP provides more security than PAP.
Page 141
RADIUS Attribute: Filter-ID Attribute Type: String Attribute Value: Raritan:G{KVM_Admin} (where KVM_Admin is group name created locally on Dominion KVM Switch). Case sensitive. Configure Session Conditions (Date and Time) (Required) - Policy Elements > Session Conditions > Date and Time ...
Chapter 7: User Management Returning User Group Information via RADIUS When a RADIUS authentication attempt succeeds, the KSX II determines the permissions for a given user based on the permissions of the user's group. Your remote RADIUS server can provide these user group names by returning an attribute, implemented as a RADIUS FILTER-ID.
Page 143
Attribute Data Log out Accounting-Request(4) Acct-Status (40) Stop(2) - Stops the accounting NAS-Port-Type (61) VIRTUAL (5) for network connections. NAS-Port (5) Always 0. NAS-IP-Address (4) The IP address for the KSX II. User-Name (1) The user name entered at the login screen. Acct-Session-ID (44) Session ID for accounting.
Changing a Password To change your password: 1. Choose User Management > Change Password. The Change Password page opens. 2. Type your current password in the Old Password field. 3. Type a new password in the New Password field. Retype the new password in the Confirm New Password field.
Chapter 8 Device Management In This Chapter Network Settings ... 136 Device Services ... 141 Configuring Modem Settings ... 147 Configuring Date/Time Settings ... 148 Event Management ... 149 Configuring Ports ... 155 Port Keywords ... 186 Port Group Management ... 188 Network Settings Use the Network Settings page to customize the network configuration (for example, the IP address, discovery port, and LAN interface...
Network Basic Settings These procedures describe how to assign an IP address on the Network Settings page. For complete information about all of the fields and the operation of this page, see Network Settings. To assign an IP address: 1. Choose Device Settings > Network. The Network Settings page opens.
Page 148
Chapter 8: Device Management 5. Select Obtain DNS Server Address Automatically if DHCP is 6. If Use the Following DNS Server Addresses is selected, regardless 7. When finished, click OK. e. Link-Local IP Address. This address is automatically assigned to the device.
LAN Interface Settings (on page 139) for information in configuring this section of the Network Settings page. Note: In some environments, the default LAN Interface Speed & Duplex setting Autodetect (autonegotiator) does not properly set the network parameters, which results in network issues. In these instances, setting the KSX II LAN Interface Speed &...
Page 150
Chapter 8: Device Management 3. Select the Enable Automatic Failover checkbox to allow the KSX II to 4. Select the Bandwidth. 5. Click OK to apply the LAN settings. Autodetect (default option) 10 Mbps/Half - Both LEDs blink ...
Device Services The Device Services page allows you to configure the following functions: Enabling Telnet Enabling SSH access Configuring HTTP and HTTPs port settings Enabling Serial Console Access Configuring the discovery port access Enabling direct port access ...
Chapter 8: Device Management HTTP and HTTPS Port Settings You are able to configure HTTP and/or HTTPS ports used by the KSX II. For example, if you are using the default HTTP port 80 for another purpose, changing the port will ensure the device does not attempt to use it.
Enabling Direct Port Access via URL Direct port access allows users to bypass having to use the device's Login dialog and Port Access page. This feature also provides the ability to enter a username and password directly and proceed to the target if the username and password is not contained in the URL.
Chapter 8: Device Management Configuring Direct Port Access via Telnet, IP Address or SSH The information in this topic is specific to enabling direct port access for serial targets. Use the Enable Direct Port Access via URL option on the Device Services page to enable direct port access for a KVM/serial port connect to the KSX II.
Page 155
Chapter 8: Device Management 3. Click OK to save this information. Once you have created the direct port access, it can be connected in a client application such as PuTTY. Following is an example of how the direct port access information would appear in PuTTY. Note that PuTTY is not the only client application that can be used.
Chapter 8: Device Management Enabling the AKC Download Server Certificate Validation If you are using the AKC client, you can choose to use the Enable AKC Download Server Certificate Validation feature or opt not to use this feature. Option 1: Do Not Enable AKC Download Server Certificate Validation (default setting) If you do not enable AKC Download Server Certificate Validation, all Dominion device users and CC-SG Bookmark and Access Client users...
3. Click OK. Configuring Modem Settings To configure modem settings: 1. Click Device Settings > Modem Settings to open the Modem Settings page. 2. Check Enable Modem, if needed. 3. Enter the PPP server IP address. The internet address assigned to the KSX II when a connection is established via dial-up.
Chapter 8: Device Management Configuring Date/Time Settings Use the Date/Time Settings page to specify the date and time for the KSX II. There are two ways to do this: 1. Choose Device Settings > Date/Time. The Date/Time Settings page 2.
Chapter 8: Device Management 6. Click OK. Event Management The KSX II Event Management feature allows you enable and disable the distribution of system events to SNMP Managers, the Syslog and the audit log. These events are categorized, and for each event you can determine whether you want the event sent to one or several destinations.
Chapter 8: Device Management Configuring Event Management Settings SNMP Configuration Simple Network Management Protocol (SNMP) is a protocol governing network management and the monitoring of network devices and their functions. KSX II offers SNMP Agent support through Event Management. 1. Choose Device Settings > Event Management - Settings. The Event 2.
Page 161
4. Type the Agent Community String (the device's string). An SNMP community is the group that devices and management stations running SNMP belong to. It helps define where information is sent. The community name is used to identify the group. The SNMP device or agent may belong to more than one SNMP community.
Chapter 8: Device Management Configuring Event Management - Destinations System events, if enabled, can generate SNMP notification events (traps), or can be logged to syslog or audit log. Use the Event Management - Destinations page to select which system events to track and where to send this information.
Page 163
SNMP Trap Configuration SNMP provides the ability to send traps, or notifications, to advise an administrator when one or more conditions have been met. The following table lists the KSX II SNMP traps: Trap name Description cimConnected A CIM is plugged into to the KSX II port. cimDisconnected A CIM is either unplugged from the KSX II port or powered-off.
Page 164
Chapter 8: Device Management Trap name networkParameterChanged passwordSettingsChanged portConnect portConnectionDenied portDisconnect portStatusChange powerNotification powerOutletNotification rebootCompleted rebootStarted securityViolation startCCManagement securityBannerChanged securityBannerAction setDateTime setPIPSMode bladeChassisCommError stopCCManagement sxPortAlert userAdded Description network. A change has been made to the network parameters. Strong password settings have changed.
Trap name userAuthenticationFailure userConnectionLost userDeleted userLogin userLogout userModified userPasswordChanged userSessionTimeout vmImageConnected vmImageDisconnected Configuring Ports The Port Configuration page displays a list of the KSX II ports. Ports connected to KVM target servers (blades and standard servers) and rack PDUs (power strips) are displayed in blue and can be edited. For ports with no CIM connected or with a blank CIM name, a default port name of Dominion_KSX2_Port# is assigned, where Port# is the number of the KSX II physical port.
Page 166
Chapter 8: Device Management 2. Click the Port Name for the port you want to edit. Port Name - The name assigned to the port. A port name displayed in black indicates that you cannot change the name and that the port cannot be edited; port names displayed in blue can be edited.
Page 167
Chapter 8: Device Management For serial ports, the Port page for serial ports is opened.
Chapter 8: Device Management Power Control Power control is configured on the Port page. The Port page opens when you select a port that is connected to a target server from the Port Configuration page. From the Port page, you can make power associations and change the port name to something more descriptive.
Page 169
Assigning a Name to the PX The Port page opens when you select a port on the Port Configuration page. The port appears on this page when connected to a Raritan remote rack PDU (power strip). The Type and the Name fields are prepopulated.
Chapter 8: Device Management 1. Select the appropriate rack PDU from the Power Strip Name 2. For that rack PDU, select the appropriate outlet from the Outlet 3. From the Outlet Name drop-down list, select None. 4. Click OK. The rack PDU/outlet association is removed and a Target Settings 1.
Configuring Blade Chassis In addition to standard servers and rack PDUs (power strips), you can control blade chassis that are plugged into a Dominion device port. Up to eight blade chassis can be managed at a given time. As with standard servers, blade chassis are autodetected once they are connected.
Page 172
Chapter 8: Device Management The use of hot key sequences to switch KVM access to a blade chassis is also supported. For blade chassis that allow users to select a hot key sequence, those options will be provided on the Port Configuration page.
Page 173
5. Select Generic from the Blade Server Chassis Model drop-down. 6. Configure the blade chassis as applicable. a. Switch Hot Key Sequence - Define the hot key sequence that will be used to switch from KVM to the blade chassis. The Switch Hot Key Sequence must match the sequence used by the KVM module in the blade chassis.
Page 174
Chapter 8: Device Management 10. USB profile information does not apply to a generic configuration. 11. In the Target Settings section, select 720x400 Compensation if you 12. Select 'Use international keyboard for scan code set 3' if connecting 13. Click OK to save the configuration. Dell Blade Chassis Configuration for Blade Chassis, and Configurations...
Page 175
Switch Hot Key Sequence - Select the hot key sequence that will be used to switch from KVM to the blade server. The Switch Hot Key Sequence must match the sequence used by the KVM module in the blade chassis.
Page 176
To configure a Dell PowerEdge 1855/1955: Configure the blade chassis as applicable. a. Switch Hot Key Sequence - Select the hot key sequence that will be used to switch from KVM to the blade server. Blade Chassis...
Page 177
b. Maximum Number of Slots - The default maximum number of slots available on the blade chassis is automatically entered. c. Administrative Module Primary IP Address/Host Name - Not applicable. d. Port Number - The default port number for the blade chassis is 22.
Page 178
The KSX II only supports auto-discovery for AMM[1]. a. Switch Hot Key Sequence - Predefined. b. Maximum Number of Slots - The default maximum number of slots available on the blade chassis is automatically entered.
Page 179
d. Port Number - The default port number for the blade chassis is 22. Change the port number if applicable. Required for auto-discovery mode e. Username - Enter the username used to access the blade chassis. Required for auto-discovery mode Password - Enter the password used to access the blade chassis.
Page 180
To configure a IBM BladeCenter (Other): available. Configure the blade chassis as applicable. a. Switch Hot Key Sequence - Select the hot key sequence that will be used to switch from KVM to the blade server. b. Administrative Module Primary IP Address/Host Name - Enter the primary IP address for the blade chassis.
Page 181
4. In the Blade Chassis Managed Links section of the page, you are able to configure the connection to a blade chassis web browser interface if one is available. Click the Blade Chassis Managed Links icon page. The first URL link is intended for use to connect to the blade chassis Administration Module GUI.
Page 182
Chapter 8: Device Management Tips for Adding a Web Browser Interface You can add a Web Browser Interface to create a connection to a device with an embedded web server. A Web Browser interface can also be used to connect to any web application, such as the web application associated with an RSA, DRAC or ILO Processor card.
Page 183
HP Blade Chassis Configuration (Port Group Management) The KSX II supports the aggregation of ports connected to certain types of blades into a group representing the blade chassis. Specifically, HP ® BladeServer blades and Dell PowerEdge Dell PowerEdge 1855/1955 is connected from each individual blade to a port on the KSX II.
Page 184
Chapter 8: Device Management 3. Enter a Port Group Name. The port group name is not case sensitive 4. Select the Blade Server Group checkbox. 5. Click on a port in the Available box in the Select Ports for Group 6.
Page 185
To delete a port group: 1. Click on the Port Group Management page, select the checkbox of the port group you want to delete. 2. Click the Delete button. 3. Click OK on the warning message. Supported Blade Chassis Models This table contains the blade chassis models that are supported by the KSX II and the corresponding profiles that should be selected per chassis model when configuring them in the KSX II application.
Page 186
™ Includes one of the three KVM modules Analog KVM Ethernet switch module (standard) Digital Access KVM switch module (optional) KVM switch module (standard on systems sold prior to April, 2005) These switches provide a custom connector that allows two PS/2 and one video device to be connected to the system.
Page 187
Blade chassis Connection method custom cable provided with the system). Source: Dell PowerEdge 1955 Owner's Manual Dell PowerEdge The KVM Switch Module (iKVM) is M1000e Integrated with this chassis. The iKVM is compatible with the following peripherals: USB keyboards, USB pointing devices ...
Page 188
Chapter 8: Device Management Blade chassis IBM BladeCenter E IBM BladeCenter T IBM BladeCenter HT Note: In order to support Auto-discovery, IBM BladeCenter Models H and E must use AMM with firmware version BPET36K or later. Note: In the case of IBM Blade Center Models E and H, the KSX II only supports auto-discovery for AMM[1] as the acting primary management module.
Page 189
Required and Recommended Blade Chassis Configurations This table contains information on limitations and constraints that apply to configuring blade chassis to work with the KSX II. Raritan recommends that all of the information below is followed. Blade chassis Required/recommended action ...
Page 190
Chapter 8: Device Management Blade chassis ® /Dell Auto-Discovery IBM KX2 Virtual Media Note: All IBM BladeCenters that use AMM must use AMM firmware version BPET36K or later to work with the KSX II. Note: In the case of IBM Blade Center Models E and H, the KSX II only supports auto-discovery for AMM[1] as the acting primary management module.
Blade chassis Sample URL format Username: root Username Field: TEXT_USER_NAME Password: calvin Password Field: TEXT_PASSWORD ® http://192.168.84.217/private/welcome.ssi ® BladeCenter or H Configuring USB Profiles (Port Page) You choose the available USB profiles for a port in the Select USB Profiles for Port section of the Port page.
Page 192
Chapter 8: Device Management 2. Click Add. The selected profiles appear in the Selected list. These are the profiles that can be used for the KVM target server connected to the port. To specify a preferred USB profile: 1.
2. Click Remove. The selected profiles appear in the Available list. These profiles are no longer available for a KVM target server connected to this port. To apply a profile selection to multiple ports: 1. In the Apply Selected Profiles to Other Ports section, select the Apply checkbox for each KVM port you want to apply the current set of selected USB profiles to.
Page 194
Double Click Left Ctrl key Press the left Ctrl key twice quickly connect to a target and switch to another target. You can then use the hot key to disconnect from the target and return to the local port GUI. The connect key works for both standard servers and blade chassis.
Page 195
a. Select the Power Save Mode checkbox. b. Set the amount of time (in minutes) in which Power Save Mode will be initiated. 8. Choose the resolution for the KSX II Local Console from the drop-down list. The browser will be restarted when this change is made.
Chapter 8: Device Management Port Keywords Port keywords work as a filter. If a keyword is detected, a corresponding message be logged in a local port log and a corresponding trap will be sent via SNMP (if configured). Defining keywords guarantees that only messages that contain those keywords are logged for the local port.
Page 197
2. Define a keyword for the first time, by clicking the Add button on the Port Keyword List page. The Add Keyword page will then open. Follow steps 3 - 5 to create new keywords. 3. Type a keyword in the Keyword field and then click the Add button. The keyword will be added to the page directly under the Keyword field and will appear on the Port Keyword List page once OK is selected.
Chapter 8: Device Management Port Group Management This function is specific to HP blade chassis configuration. See Blade Chassis Configuration (Port Group Management) 173). (on page...
Chapter 9 Security Management In This Chapter Security Settings ... 189 Configuring IP Access Control ... 199 SSL Certificates ... 201 Security Banner ... 203 Security Settings From the Security Settings page, you can specify login limitations, user blocking, password rules, and encryption and share settings. Raritan SSL certificates are used for public and private key exchanges, and provide an additional level of security.
Chapter 9: Security Management To reset back to defaults: Click Reset to Defaults. Login Limitations Using login limitations, you can specify restrictions for single login, password aging, and the logging out idle users. Limitation Enable single login limitation Enable password aging Description When selected, only one login per user name is...
Page 201
Limitation Description change is required. The default is 60 days. Log out idle users, Select the "Log off idle users" checkbox to After (1-365 automatically disconnect users after the amount minutes) of time you specify in the "After (1-365 minutes)" field.
Chapter 9: Security Management Strong Passwords Strong passwords provide more secure local authentication for the system. Using strong passwords, you can specify the format of valid KSX II local passwords such as minimum and maximum length, required characters, and password history retention. Strong passwords require user-created passwords to have a minimum of 8 characters with at least one alphabetical character and one nonalphabetical character (punctuation character or number).
User Blocking The User Blocking options specify the criteria by which users are blocked from accessing the system after the specified number of unsuccessful login attempts. The three options are mutually exclusive: Option Description Disabled The default option. Users are not blocked regardless of the number of times they fail authentication.
Page 204
Chapter 9: Security Management Option Timer Lockout Deactivate User-ID When selected, this option specifies that the user Description Users are denied access to the system for the specified amount of time after exceeding the specified number of unsuccessful login attempts. When selected, the following fields are enabled: ...
Encryption & Share Using the Encryption & Share settings you can specify the type of encryption used, PC and VM share modes, and the type of reset performed when the KSX II Reset button is pressed. WARNING: If you select an encryption mode that is not supported by your browser, you will not be able to access the KSX II from your browser.
Page 206
Chapter 9: Security Management 2. Apply Encryption Mode to KVM and Virtual Media. When selected, 3. For government and other high security environments, enable FIPS 4. PC Share Mode. Determines global concurrent remote KVM access, 5. If needed, select VM Share Mode. This option is enabled only when 6.
Page 207
Local device reset Description mode Enable Local Factory Returns the KSX II device to the factory Reset (default) defaults. Enable Local Admin Resets the local administrator password only. Password Reset The password is reset to raritan. Disable All Local No reset action is taken. Resets Note: When using the P2CIM-AUSBDUAL or P2CIM-APS2DUAL to attach a target to two KSX IIs, if Private access to the targets is required,...
Chapter 9: Security Management Enabling FIPS 140-2 For government and other high security environments, enabling FIPS 140-2 mode may be desirable. The KSX II uses an embedded FIPS 140-2-validated cryptographic module running on a Linux FIPS 140-2 Implementation Guidance section G.5 guidelines. Once this mode is enabled, the private key used to generate the SSL certificates must be internally generated;...
FIPS 140-2 should be enabled on the client computer and in Internet Explorer. To enable FIPS 140-2 on a Windows client: 1. Select Control Panel > Administrative Tools > Local Security Policy to open the Local Security Settings dialog. 2.
Page 210
Chapter 9: Security Management 1. Type the IP address and subnet mask in the IPv4/Mask or 2. Choose the Policy from the drop-down list. 3. Click Append. The rule is added to the bottom of the rules list. 1. Type a rule #. A rule # is required when using the Insert command. 2.
3. You are prompted to confirm the deletion. Click OK. SSL Certificates The KSX II uses the Secure Socket Layer (SSL) protocol for any encrypted network traffic between itself and a connected client. When establishing a connection, the KSX II has to identify itself to a client using a cryptographic certificate.
Page 212
Chapter 9: Security Management 3. Click Create to generate the Certificate Signing Request (CSR). 1. The CSR and the file containing the private key used when 2. Send the saved CSR to a CA for certification. You will get the new 1.
Note: The CSR and the private key file are a matched set and should be treated accordingly. If the signed certificate is not matched with the private key used to generate the original CSR, the certificate will not be useful. This applies to uploading and downloading the CSR and private key files.
Page 214
Chapter 9: Security Management 4. If needed, change the banner title. This information will be displayed 5. Edit the information in the Restricted Services Banner Message text to users as part of the banner. Up to 64 characters can be used. box.
Maintenance Features (Local/Remote Console) Use: Audit Log View Dominion KSX II events sorted by date and time. Device Information View information about the Dominion KSX II and its CIMs. Backup/Restore Backup and restore the KSX II configuration. USB Profile Upload custom profiles...
Chapter 10: Maintenance Audit Log A log is created of the KSX II system events. 1. Choose Maintenance > Audit Log. The Audit Log page opens. Note: Saving the audit log is available only on the KSX II Remote Console, not on the Local Console. 1.
The Device Information page provides detailed information about your KSX II device and the CIMs in use. This information is helpful should you need to contact Raritan Technical Support. To view information about your Dominion KSX II and CIMs: Choose Maintenance > Device Information. The Device Information page opens.
Chapter 10: Maintenance Backup and Restore From the Backup/Restore page, you can backup and restore the settings and configuration for your KSX II. In addition to using backup and restore for business continuity purposes, you can use this feature as a time-saving mechanism. For instance, you can quickly provide access to your team from another KSX II by backing up the user configuration settings from the KSX II in use and restoring those configurations to the new KSX II.
Page 219
If you are using Internet Explorer 6 or higher, to backup your KSX II: 1. Click Backup. A File Download dialog appears that contains an Open button. Do not click Open. In IE 6 and higher, IE is used as the default application to open files, so you are prompted to open the file versus save the file.
Chapter 10: Maintenance 2. Navigate to and select the appropriate backup file and click Open. 3. Click Restore. The configuration (based on the type of restore USB Profile Management From the USB Profile Management page, you can upload custom profiles provided by Raritan tech support. These profiles are designed to address the needs of your target server‟s configuration, in the event that the set of standard profiles does not already address them.
Note: If an error or warning is displayed during the upload process (for example. overwriting an existing custom profile), you may continue with the upload by clicking Upload or cancel it by clicking on Cancel. To delete a custom profile to your KSX II: 1.
Chapter 10: Maintenance Upgrading CIMs Use this procedure to upgrade CIMs using the firmware versions stored in the memory of your KSX II device. In general, all CIMs are upgraded when you upgrade the device firmware using the Firmware Upgrade page.
Page 223
To upgrade your KSX II: 1. Locate the appropriate Raritan firmware distribution file (*.RFP), found on the Raritan Firmware Upgrades webpage: http://www.raritan.com/support/firmwareupgrades and download the file. 2. Unzip the file. Read all instructions included in the firmware ZIP files carefully before upgrading. 3.
Page 224
Chapter 10: Maintenance 8. Click Upgrade and wait for the upgrade to complete. Status 9. As prompted, close the browser and wait approximately 5 minutes information and progress bars are displayed during the upgrade. Upon completion of the upgrade, the device reboots (1 beep sounds to signal the reboot).
Upgrade History The KSX II provides information about upgrades performed on the KSX II and attached CIMS. To view the upgrade history: Choose Maintenance > Upgrade History. The Upgrade History page opens. Information is provided about the KSX II upgrade(s) that have been run, the final status of the upgrade, the start and end times, and the previous and current firmware versions.
Chapter 10: Maintenance 1. Choose Maintenance > Reboot. The Reboot page opens. 2. Click Reboot. You are prompted to confirm the action. Click Yes to CC Unmanage When a KSX II device is under CommandCenter Secure Gateway control and you attempt to access the device directly using the KSX II Remote Console, the following message appears (after entry of a valid user name and password).
Stopping CC-SG Management While the KSX II is under CC-SG management, if you try to access the device directly, you are notified that it the device is under CC-SG management. If you are managing the KSX II through CC-SG and connectivity between CC-SG and the KSX II is lost after the specified timeout interval (typically 10 minutes), you are able to end the CC-SG management session from the KSX II console.
Page 228
Chapter 10: Maintenance 3. Click Yes to remove the device CC-SG management. Once CC-SG management has ended, a confirmation will be displayed.
Chapter 11 Diagnostics The Diagnostics pages are used for troubleshooting and are intended primarily for the administrator of the KSX II device. All of the Diagnostics pages (except Device Diagnostics) run standard networking commands and the information that is displayed is the output of those commands. The Diagnostics menu options help you debug and configure the network settings.
Chapter 11: Diagnostics Network Interface Page The KSX II provides information about the status of your network interface. The following information is displayed: Network Statistics Page The KSX II provides statistics about your network interface. 1.
Page 231
Statistics - Produces a page similar to the one displayed here. Interfaces - Produces a page similar to the one displayed here. Chapter 11: Diagnostics...
Chapter 11: Diagnostics 3. Click Refresh. The relevant information is displayed in the Result Ping Host Page Ping is a network tool used to test whether a particular host or IP address is reachable across an IP network. Using the Ping Host page, you can determine if a target server or another KSX II is accessible.
2. Type either the hostname or IP address into the Hostname or IP Address field. 3. Click Ping. The results of the ping are displayed in the Result field. Trace Route to Host Page Trace route is a network tool used to determine the route taken to the provided hostname or IP address.
Chapter 11: Diagnostics Device Diagnostics Note: This page is for use by Raritan field engineers or when you are directed by Raritan Technical Support. Device Diagnostics downloads the diagnostics information from KSX II to the client machine. Two operations can be performed on this page: Operation Diagnostics Scripts Device Diagnostic Log...
Page 235
Send this file to Raritan Technical Support using step 4. 3. To create a diagnostics file to send to Raritan Technical Support: a. Click the Save to File button. The File Download dialog appears. b. Click Save. The Save As dialog appears. c.
Chapter 12 Command Line Interface (CLI) In This Chapter Overview ... 227 Accessing the KSX II Using CLI ... 228 SSH Connection to the KSX II ... 228 Telnet Connection to the KSX II ... 229 Local Serial Port Connection to the KSX II ... 229 Logging On ...
Overview The KSX II Serial Console supports all serial devices such as: Servers, including Windows Server 2003 Emergency Management Console (EMS-) Special Administration Console, or SAC with BIOS redirection in the server BIOS. Routers Layer 2 switches ...
Chapter 12: Command Line Interface (CLI) Accessing the KSX II Using CLI Access the KSX II by using one of the following methods: A number of SSH/Telnet clients are available and can be obtained from the following locations: ...
Telnet Connection to the KSX II Due to the lack of security, user name, password and all traffic is in clear-text on the wire. Telnet access is disabled by default. Enabling Telnet If you wish to use Telnet to access the KSX II, first access the KSX II from the CLI or a browser.
Chapter 12: Command Line Interface (CLI) Port Settings Ensure that the port settings (serial communication parameters) are configured as follows: Logging On 1. Log in as admin 2. The Password prompt appears. Enter the default password: raritan Data bits = 8 Parity = None Stop bits =1...
Page 241
After reviewing the following Navigation of the CLI section, perform the Initial Configuration tasks. Welcome! 192.168.59.202 login: admin Passwd: ---------------------------------------------------- ---------------------------- Device Type: Dominion KSX2 Device Name: YongKSX2 SN: AE17950009 IP Address: 192.168.59.202 IP Address: 192.168.59.202 Port Port Port No. Name Type Availability 1 - Dominion_KSX2_Port1 Not Available down...
Chapter 12: Command Line Interface (CLI) login as: Janet Password: Authentication successful. ---------------------------------------------------- ------------ Welcome to the KSX II [Model: KSX2] UnitName:KSX II Serial:WACEA00008 IP Address:192.168.51.194 UserIdletimeout:99min ---------------------------------------------------- ------------- Port Port No. Name 1 - Port1 [U] 3 - Port3 [U] Current Time: Wed Sep 20 16:05:50 2006 Janet >...
CLI Syntax -Tips and Shortcuts Tips Commands are listed in alphabetical order. Commands are not case sensitive. Parameter names are single word without underscore. Commands without arguments default to show current settings for the command. Typing a question mark ( ? ) after a command produces help for that command.
Chapter 12: Command Line Interface (CLI) Initial Configuration Using CLI Note: These steps, which use the CLI, are optional since the same configuration can be done via KVM. See Getting Started for more information. KSX II devices come from the factory with default factory settings. When you first power up and connect to the device, you must set the following basic parameters so the device can be accessed securely from the network:...
Chapter 12: Command Line Interface (CLI) Description Port configuration command Switch to the Configuration menu. Connect to a port. Switch to diagnostic commands menu. Display an overview of the CLI syntax. Display the current session's command line history.
Chapter 12: Command Line Interface (CLI) Security Issues Elements to consider when addressing security for console servers: The KSX II supports each of these elements; however, they must be configured prior to general use. Target Connections and the CLI The purpose of the KSX II is to let authorized users establish connections to various targeted devices using the connect command.
Port Sharing Using CLI It is possible for access client users to share ports with other authenticated and authorized users, regardless of whether they are access client users (RSC) or SSH/Telnet users. Port sharing is used for training or for troubleshooting applications. ...
Chapter 12: Command Line Interface (CLI) Interface Command The Interface command is used to configure the KSX II network interface. The syntax of the interface command is: interface [ipauto <none|dhcp>] [ip <ipaddress>] [mask <subnetmask>] [gw <ipaddress>] [mode <mode>] Set/Get ethernet parameters ipauto <none|dhcp>...
Connect Commands The connect commands provide a means to access ports and their history. Command Description connect Connect to a port. The port sub-menu, reached using escape key sequence. clearhistory Clear history buffer for this port. Only available to users who have Write access. clientlist Display all users on the port.
Chapter 13 KSX II Local Console In This Chapter Overview ... 241 Using the KSX II Local Console ... 241 KSX II Local Console Interface ... 242 Security and Authentication ... 242 Local Console Smart Card Access ... 243 Local Console USB Profile Options ... 244 Available Resolutions ...
Chapter 13: KSX II Local Console KSX II Local Console Interface When you are located at the server rack, the KSX II provides standard KVM management and administration via the KSX II Local Console. The KSX II Local Console provides a direct KVM (analog) connection to your connected servers;...
OS. When the KVM session is terminated, either because it has been closed or because you switch to a new target, the smart card reader will be automatically unmounted from the target server.
Chapter 13: KSX II Local Console Local Console USB Profile Options From the USB Profile Options section of the Tools page, you can choose from the available USB profiles for a local port. The ports that can be assigned profiles are displayed in the Port Name field and the profiles that are available for a port appear in the Select Profile To Use field after the port is selected.
3. Click OK. The USB profile will be applied to the local port and will appear in the Profile In Use field. Available Resolutions The KSX II Local Console provides the following resolutions to support various monitors: 800x600 1024x768 ...
1. Log in to the Local Console. 2. Click View by Port or View by Group to switch between views. To use the Port Access page: The KVM target servers are initially sorted by Port Number. You can change the display to sort on any of the columns.
3. Click the Port Name of the target server you want to access. The Port Action Menu appears. See Port Action Menu (on page 44) for details on available menu options. 4. Choose the desired menu command from the Port Action Menu. To change the display sort order: ...
GUI. A connect key is used to connect to a target or switch between targets. The Local Port hot key allows you to rapidly access the KSX II Local Console user interface when a target server is currently being viewed.
Press Left ALT > Press and Release 5 > Press and Release - > Press and Release 2 > Release Left ALT Switch from target port 5, slot 2 to port 5, slot Press Left ALT > Press and Release 5 >...
Chapter 13: KSX II Local Console Language US English International UK English Chinese Traditional Chinese Simplified Korean Japanese French German French Norwegian Danish Swedish Hungarian Slovenian Italian Spanish Portuguese Special Sun Key Combinations The following key combinations for Sun keys operate on the local port. These special are available from the Keyboard menu when you connect to a Sun target server: Sun key Again...
Sun key Undo Stop A Front Copy Open Find Paste Mute Compose Vol + Vol - Stop Power Accessing a Target Server To access a target server: 1. Click the Port Name of the target you want to access. The Port Action Menu is displayed.
Chapter 13: KSX II Local Console Local Port Administration The KSX II can be managed by either the KSX II Local Console or the KSX II Remote Console. Note that the KSX II Local Console also provides access to: ...
Page 263
4. Set the Video Switching Delay from between 0 - 5 seconds, if necessary. Generally 0 is used unless more time is needed (certain monitors require more time to switch the video). 5. If you would like to use the power save feature: a.
Page 264
Chapter 13: KSX II Local Console 10. Click OK. Note: If you initially choose not to ignore CC Manage mode on the local port but later want local port access, you will have to remove the device from under CC-SG management (from within CC-SG). You will then be able to check this checkbox.
KSX II Local Console Factory Reset Note: This feature is available only on the KSX II Local Console. The KSX II offers several types of reset modes from the Local Console user interface. Note: It is recommended that you save the audit log prior to performing a factory reset.
Chapter 13: KSX II Local Console Resetting the KSX II Using the Reset Button On the back panel of the device, there is a Reset button. It is recessed to prevent accidental resets (you will need a pointed object to press this button).
Chapter 14 Modem Configuration In This Chapter Certified Modems for UNIX, Linux and MPC ... 257 Low Bandwidth KVM Settings ... 258 Client Dial-Up Networking Configuration ... 259 Windows 2000 Dial-Up Networking Configuration ... 259 Windows Vista Dial-Up Networking Configuration ... 263 Windows XP Dial-Up Networking Configuration ...
Chapter 14: Modem Configuration Low Bandwidth KVM Settings Following are the settings that Raritan recommends in order to achieve optimum performance when using KVM over low bandwidth speeds typical of DSL connections. This information applies to both virtual KVM and MPC. Setting Connection speed Color depth...
Setting Client Dial-Up Networking Configuration Configuring Microsoft Windows allows configuration of a PC to reside on the same PPP network as the KSX II. After the dial-up connection is established, connecting to a KSX II is achieved by pointing the web browser to the PPP Server IP. Modem installation guidelines are provided for the following client based systems: ...
Page 270
Chapter 14: Modem Configuration 2. Double-click the Make New Connection icon when the Network and 3. Click Next and follow the steps in the Network Connection Wizard Dial-Up Connections window appears. dialog to create custom dial-up network profiles.
Page 271
4. Click the Dial-up to private network radio button and click Next. 5. Select the checkbox before the modem that you want to use to connect to the KSX II and then click Next. 6. Type the area code and phone number you wish to dial in the appropriate fields.
Page 272
Chapter 14: Modem Configuration 7. Click the Country/region code drop-down arrow and select the 8. Click Next. The Connection Availability dialog appears. 9. Click the Only for myself radio button in the Connection Availability country or region from the list. dialog.
10. Click Next. The Network Connection has been created. 11. Type the name of the Dial-up connection. 12. Click Finish. 13. Click Dial to connect to the remote machine when the Dial dialog appears. A dialog indicating that a successful connection has been established will appear.
Chapter 14: Modem Configuration Windows XP Dial-Up Networking Configuration 1. Choose Start > Programs > Accessories > Communications > New Connection Wizard. 2. Click Next and follow the steps in the New Connection Wizard to create custom dial-up network profiles. 3.
Page 275
Chapter 14: Modem Configuration 4. Click the "Set up my connection manually" radio button and click Next.
Page 276
Chapter 14: Modem Configuration 5. Click the "Connect using a dial-up modem" radio button and click Next.
Page 277
Chapter 14: Modem Configuration 6. Type a name to identify this particular connection in the ISP Name field and click Next.
Page 278
Chapter 14: Modem Configuration 7. Type the phone number for the connection in the Phone number field and click Next. 8. Type your ISP information. Type the user name and password in the appropriate fields, and retype the password to confirm it.
Page 279
9. Select the checkbox before the appropriate option below the fields and click Next. 10. Click Finish. 11. Click Dial to connect to the remote machine when the Dial dialog appears. A dialog indicating that you connected successfully appears. If you get any errors, consult Windows XP Networking Help.
Supported Operating Systems (Clients) The following operating systems are supported on the Virtual KVM Client and Multi-Platform Client (MPC): Client operating system Windows 7 Windows XP Windows 2008 Windows Vista Windows 2000 Windows 2003 Windows 2008 Red Hat Red Hat Desktop 4.0 Open SUSE 10, 11 Fedora ®...
Appendix A: Specifications Mode Windows x64 64-bit mode Supported Operating Systems and CIMs (KVM Target Servers) In addition to the new D2CIMs, most Dominion CIMs are supported. The following table displays the supported target server operating systems, CIMs, virtual media, and mouse modes: Note: D2CIM-VUSB is not supported on Sun Operating system Browser...
Page 283
Supported Operating system and Dominion CIMs & serial devices (where D2CIMs applicable) DCIM-PS2 Windows XP operating system DCIM-PS2 Windows 2000 DCIM-USB operating system DCIM-USB G2 Windows 2000 Server Windows 2003 Server Windows Vista operating system ...
Page 284
The DCIM-USB G2 provides a small slide switch on the back of the CIM. Move the switch to P for PC-based USB KVM target servers; move the switch to S for Sun USB KVM target servers. A new switch position takes effect only after the CIM is power-cycled. To power-cycle the CIM, remove the USB connector from the target server and plug it back in a few seconds later.
Supported Browsers KSX II supports the following browsers: Internet Explorer Firefox Safari Computer Interface Modules (CIMs) Part Line item UPC code number description D2CIM-VUS KSX II 78581333200 Computer Interface Module [USB port with virtual media] DCIM-SUN KSX II 78581333854 Computer Interface...
Appendix A: Specifications Supported Paragon CIMS and Configurations The KSX II supports the P2CIM-APS2DUAL and P2CIM-AUSBDUAL CIMs, which provide two RJ45 connections to different KVM switches. Support of these CIMs provides a second path to access the target in the event that one of the KVM switches is blocked or fails.
KSX II to KSX II Guidelines The following system configuration guidelines should be followed when you are using Paragon CIMs in a KSX II to KSX II configuration: Concurrent Access Both KSX II KVM switches should be configured with the same policy for concurrent access to targets, either both PC-Share or both Private.
Appendix A: Specifications If a connection to the target is in place from the other KSX II, the availability is checked when a connection is attempted. Access is denied or allowed consistent with the PC-Share policy in place for the KSX II. Until that time, the availability is not be updated on the other KSX II.
Page 289
However, only the first user will have keyboard and mouse control until they disconnect or switch away. CIM Name Updates CIM names updated from Paragon II are stored and retrieved from the CIM memory location corresponding to the Paragon naming convention.
Appendix A: Specifications Supported Video Resolutions Ensure that each target server's video resolution and refresh rate are supported by the KSX II and that the signal is noninterlaced. Video resolution and cable length are important factors in the ability to obtain mouse synchronization.
Resolutions 1024x768@70 1024x768@72 Note: Composite Sync and Sync-on-Green video require an additional adapter. Note: Some resolutions may not be available by default. If you do not see a resolution, plug in the monitor first, remove the monitor and then plug in the CIM. Note: If the 1440x900 and 1680x1050 resolutions are not displayed but are supported by the target server's graphics adapter card, a DDC-1440 or DDC-1680 adapter may be required.
Page 292
Appendix A: Specifications Port Description HTTP, Port 80 This port can be configured as needed. See Settings via HTTP (port 80) are automatically forwarded to HTTPS for complete security. The KSX II responds to Port 80 for user convenience, relieving users from having to explicitly type in the URL field to access the KSX II, while still preserving complete security.
Appendix A: Specifications This table contains a list of readers that Raritan has tested and found not to work with the Raritan device, therefore they are unsupported. If a smart card reader does not appear in the supported smart card readers table or in the unsupported smart card readers table, Raritan cannot guarantee it will function with the device.
Page 295
® Windows XP operating system targets must be running Windows XP SP3 in order to use smart cards with the KSX II. If you are working with .NET 3.5 in a Windows XP environment on the target server, you must be using SP1.
Connectivity (adapters and/or cables) for connecting the KSX II to common Vendor/Model combinations. Electrical Specifications Parameter Value Input Nominal Frequencies 50/60 Hz Nominal Voltage Range 100/240 VAC Maximum Current AC 0.6A max. AC Operating Range 100 to 240 VAC (+-10%), 47 to 63 Hz Remote Connection Remote Details...
Page 298
Appendix A: Specifications Port Description HTTPS, Port 443 This port is used for the actual KVM-over-IP communication from the KSX II device to the KVM client on the user's desktop. It cannot be changed. KSX II (Raritan This port is used to discover other KX devices KVM-over-IP) and for communication between Raritan Protocol,...
Port Description Telnet Telnet port can be configured but is not recommended. The default port is 23. Target Server Connection Distance and Video Resolution The maximum supported distance is a function of many factors including the type/quality of Cat5 cable, server type and manufacturer, video driver and monitor, environmental conditions, and user expectations.
Note: For reliable network communication, configure the KSX II and the LAN switch to the same LAN Interface Speed and Duplex. For example, configure both the KSX II and LAN Switch to Autodetect (recommended) or set both to a fixed speed/duplex such as 100MB/s/Full.
Appendix A: Specifications Vendor Various Go to the Support page on Raritan's website (www.raritan.com) to obtain a list of commonly used cables and adapters. KSX II Serial RJ-45 Pinouts To provide maximum port density and to enable simple UTP (Category 5) cabling, The KSX II provides its serial connections via compact RJ-45 ports.
Appendix B Updating the LDAP/LDAPS Schema IMPORTANT: The procedures in this chapter should be attempted only by experienced users. In This Chapter Returning User Group Information ... 295 Setting the Registry to Permit Write Operations to the Schema ... 296 Creating a New Attribute ...
Appendix B: Updating the LDAP/LDAPS Schema Setting the Registry to Permit Write Operations to the Schema To allow a domain controller to write to the schema, you must set a registry entry that permits schema updates. 1. Right-click the Active Directory 2.
3. Click New and then choose Attribute. When the warning message appears, click Continue and the Create New Attribute dialog appears. 4. Type rciusergroup in the Common Name field. 5. Type rciusergroup in the LDAP Display Name field. 6. Type 1.3.6.1.4.1.13742.50 in the Unique x5000 Object ID field. 7.
Page 308
Appendix B: Updating the LDAP/LDAPS Schema 2. Scroll to the user class in the right pane and right-click it. 3. Choose Properties from the menu. The user Properties dialog appears. 4. Click the Attributes tab to open it. 5. Click Add.
6. Choose rciusergroup from the Select Schema Object list. 7. Click OK in the Select Schema Object dialog. 8. Click OK in the User Properties dialog. Updating the Schema Cache To update the schema cache: 1. Right-click Active Directory and select Reload the Schema. 2.
Page 310
Appendix B: Updating the LDAP/LDAPS Schema 3. Go to the directory where the support tools were installed. Run adsiedit.msc. The ADSI Edit window opens. 4. Open the Domain.
Page 311
Appendix B: Updating the LDAP/LDAPS Schema 5. In the left pane of the window, select the CN=Users folder. 6. Locate the user name whose properties you want to adjust in the right pane. Right-click the user name and select Properties.
Page 312
Appendix B: Updating the LDAP/LDAPS Schema 7. Click the Attribute Editor tab if it is not already open. Choose 8. Click Edit. The String Attribute Editor dialog appears. 9. Type the user group (created in the KSX II) in the Edit Attribute field. rciusergroup from the Attributes list.
Appendix C: Informational Notes Applications MPC Applet HTML access client + Jurisdiction files for various JREs Downloads on the Java JRE1.6 * In addition, IE6 does not support AES 128. Java Runtime Environment (JRE) Important: It is recommended that you disable Java clear the Java cache.
The KSX II Remote Console and MPC require JRE Runtime Environment KSX II Remote Console checks the Java version. If the version is incorrect or outdated, you will be prompted to download a compatible version. Note: In order for multi-language keyboards to work in the KSX II Remote Console (Virtual KVM Client), install the multi-language version of Java Runtime Environment (JRE).
Appendix C: Informational Notes Keyboards Non-US Keyboards French Keyboard Caret Symbol (Linux The Virtual KVM Client and the Multi-Platform Client (MPC) do not process the key combination of Alt Gr + 9 as the caret symbol (^) when using French keyboards with Linux clients. From a French keyboard, press the ^ key (to the right of the P key), then immediately press the space bar.
Page 317
Tilde Symbol From the Virtual KVM Client and the Multi-Platform Client, the key combination of Alt Gr + 2 does not produce the tilde (~) symbol when using a French keyboard. To obtain the tilde symbol: Create a macro consisting of the following commands: ...
Page 318
Appendix C: Informational Notes Note: The Keyboard Indicator should be used on Linux systems using Gnome as a desktop environment. When using a Hungarian keyboard from a Linux client, the Latin letter U with Double Acute and the Latin letter O with Double Acute work only with JRE 1.6.
Macintosh Keyboard When a Macintosh keyboard are not captured by the Java Volume Up Volume Down Mute Eject As a result, the Virtual KVM Client and the Multi-Platform Client (MPC) are unable to process these keys from a Mac client's keyboard. Dell Chassis Cable Lengths and Video Resolutions In order to maintain video quality, Raritan recommends using the following cable lengths and video resolutions when you are connecting to...
Appendix C: Informational Notes Fedora Resolving Fedora Core Focus Using the Multi-Platform Client (MPC), occasionally there is an inability to log in to a KSX II device or to access KVM target servers (Windows SUSE, and so forth). In addition, the Ctrl+Alt+M key combination may not bring up the Keyboard Shortcut menu.
Appendix C: Informational Notes USB Ports and Profiles VM-CIMs and DL360 USB Ports ® DL360 servers have one USB port on the back of the device and another on the front of the device. With the DL360, both ports cannot be used at the same time.
Page 322
Appendix C: Informational Notes USB profile help appears in the USB Profile Help window. For detailed information about specific USB profiles, see page 105). Raritan provides a standard selection of USB configuration profiles for a wide range of operating system and BIOS level server implementations. These are intended to provide an optimal match between remote USB device and target server configurations.
Changing a USB Profile when Using a Smart Card Reader There may be certain circumstances under which you will need to change the USB profile for a target server. For example, you may need to change the connection speed to "Use Full Speed for Virtual Media CIM"...
Appendix C: Informational Notes Virtual Media Dell OptiPlex and Dimension Computers From certain Dell OptiPlex possible to boot a target server from a redirected drive/ISO image, or to access the target server BIOS when a virtual media session is active (unless the Use Full Speed for Virtual Media CIM option is enabled from the Port page).
Appendix C: Informational Notes CC-SG Virtual KVM Client Version Not Known from CC-SG Proxy Mode When the Virtual KVM Client is launched from CommandCenter Secure Gateway (CC-SG) in proxy mode, the Virtual KVM Client version is unknown. In the About Raritan Virtual KVM Client dialog, the version is displayed as “Version Unknown”.
What is KSX II? The KSX II is a second generation digital KVM (Keyboard, Video Mouse) switch that enables IT administrators to access and control 8, 16, 32, or 64* servers over the network with BIOS-level functionality. The KSX II is completely hardware and OS-independent;...
Page 327
KSX II models. Raritan's centralized management unit, CommandCenter Secure Gateway, and the Multi-Platform Client (MPC) both support KSX I and KSX II switches seamlessly. What CIMs are supported for the KSX II switch? Refer to Supported Operating Systems and CIMs (KVM Target Servers) (on page 272).
/etc/default/kbd file (on the Sun machine). If this line is not commented out, it will disable a keyboard abort sequence; comment out this line to enable the sequence. How can I consolidate the sites where I have a Dominion KSX II installed? Raritan's CommandCenter is designed specifically to provide centralized management.
Page 329
When using SSH/telnet, the user gets a list of ports they are authorized to connect with when they log on. As a user, do I see all servers connected to a Dominion KSX II? No. Each user sees only a list of servers they are authorized to manage/view.
Page 330
Appendix D: FAQs All Dominion KSX II units are SUN "break-safe" for use with SUN Solaris. I have lost my Admin password to the Dominion KSX II. Is there a back door or secret password? There is no back-door password. The only option is to restore the unit to its factory default settings and create the administrator user name and password again.
Page 331
Yes, KSX II supports client-side logging. Does Dominion KSX II support Telnet? Yes. Dominion KSX II supports enabling of the telnet daemon on the Dominion KSX II unit. Because telnet sends all information “in the clear”, enabling telnet is at the customers own discretion, and telnet is disabled by default when the unit ships from the factory.
Page 332
"crash-cart" applications in a data center? Yes. What are the pin-outs of the Dominion KSX II serial ports? To provide maximum port density and to enable simple UTP (Category 5) cabling, The KSX II provides its serial connections via compact RJ-45 ports.
Go to the Raritan website (www.raritan.com) Support page to find the latest information about the KSX II serial pinouts (RJ-45). The Dominion KSX II uses the web browser to access serial devices. What are the advantages of Java-enabled web browser...
Appendix D: FAQs USB Profiles What is a USB profile? Certain servers require a specifically configured USB interface for USB based services such as virtual media. The USB Profile tailors the KSX II‟s USB interface to the server to accommodate these server specific characteristics.
Page 335
Appendix D: FAQs Do I need a special CIM to use USB profiles? You must use a D2CIM-VUSB or D2CIM-DVUSB with updated firmware. Will Raritan provide USB profiles for other target server configurations? Raritan will provide new USB profiles to suit customer needs. As these profiles become available, they will be included in firmware upgrades.
Appendix D: FAQs IPv6 Networking What is IPv6? IPv6 is the acronym for “Internet Protocol Version 6”. IPv6 is the “next generation” IP protocol which will replace the current IP Version 4 (IPv4) protocol. IPv6 addresses a number of problems in IPv4, such as the limited number of IPv4 addresses.
Where can I get more information on IPv6? See www.ipv6.org for general information on IPv6. The KSX II User Guide describes the KSX II‟s support for IPv6. Remote Access How many users can remotely access servers on each KSX II? Up to 8 KVM users can share one KVM channel and up to 8 serial users can share 8 serial channels.
Page 338
Appendix D: FAQs Speed 60Mbps 10Mbps 6Mbps 512Kbps How do I access servers connected to the KSX II if the network ever becomes unavailable? The KSX II offers an internal modem port. With this modem servers can still be remotely accessed in the event of a network emergency. Furthermore, the KSX II's local ports always allow access to servers from the rack, regardless of the network condition.
Yes. The KSX II features dual gigabit Ethernet ports to provide redundant failover capabilities. Should the primary Ethernet port (or the switch/router to which it is connected) fail, the KSX II will failover to the secondary network port with the same IP address, ensuring that server operations are not disrupted.
Page 340
Appendix D: FAQs Use case Idle Windows Desktop Navigate Start Menu Scroll an Entire Page of Text Run 3D Maze Screensaver Required bandwidth 0 Mbps 0.49Mbps 1.23Mbps 1.55Mbps...
Page 341
Appendix D: FAQs What is the slowest connection (lowest bandwidth) over which the KSX II can operate? (Shared) 33Kbps or above is recommended for acceptable KSX II performance over a modem connection. What is the speed of the KSX II's Ethernet interfaces? The KSX II supports two 10/100/1000 speed Ethernet interfaces, with configurable speed and duplex settings (either auto-detected or manually set).
Page 342
Appendix D: FAQs If an external authentication server (such as LDAP/LDAPS, Active Directory, RADIUS, and so forth) is used, the KSX II allows this as well, and will even failover to its own internal authentication should the external authentication server become unavailable. In this way, the KSX II's design philosophy is optimized to provide ease of installation, complete independence from any external server, and maximum flexibility.
Appendix D: FAQs Servers ® Does the KSX II depend on a Windows server to operate? No. The KSX II is completely independent. Even if a user chooses to configure the KSX II to authenticate against an Active Directory server - if that Active Directory server becomes unavailable, the KSX II's own authentication will be activated and fully functional.
Some blade servers require you to use hotkeys to switch between blades. With the KSX II, you don't have to use these hotkeys. Just click on the name of the blade server and the KSX II will automatically switch to that blade without the explicit use of the hotkey.
Page 345
Appendix D: FAQs For KX II's, Raritan recommends connecting up to two times the number of remote connections supported by the device. For example, with a KX2-216 with two remote channels, we recommend connecting up to 4 blade server chassis. You can of course connect individual servers to the remaining server ports.
Some operating systems lock up when I disconnect a keyboard or mouse during operation. What prevents servers connected to the KSX II from locking up when I switch away from them? Each Dominion computer interface module (DCIM) dongle acts as a virtual keyboard and mouse to the server to which it is connected.
Page 347
Appendix D: FAQs The KSX II models range from 4 to 8 server ports in a 1U chassis. This is the industry's highest digital KVM switch port density. What happens if I disconnect a server from the KSX II and...
Local Port Can I access my servers directly from the rack? Yes. At the rack, the KSX II functions just like a traditional KVM switch - allowing control of up to 16 servers using a single keyboard, monitor, and mouse.
Page 349
Appendix D: FAQs Yes. The local port presentation is identical and completely in sync with remote access clients, as well as Raritan's optional CommandCenter Secure Gateway management device. To be clear, if the name of a server via the onscreen display is changed, this updates all remote clients and external management servers in real-time.
Appendix D: FAQs Power Control Does the power supply used by the KSX II automatically detect voltage settings? Yes. The KSX II's power supply can be used in AC voltage ranges from 100-240 volts, at 50-60 Hz. What type of power control capabilities does the KSX II offer? Raritan's Remote Power Control power strips can be connected to the KSX II to provide power control of the KVM target servers.
Yes. Analog KVM switches can be connected to one of the KSX II's server ports. Simply use a D2CIM-DVUSB or D2CIM-VUSB and attach it to the user ports of the existing analog KVM switch. Please Note that analog KVM switches vary in their specifications and Raritan cannot guarantee the interoperability of any particular third-party analog KVM switch.
Appendix D: FAQs Security Is the KSX II FIPS 140-2 Certified? The KX II 2.2.0 and later, and the KSX II 2.3.0 and later, provides users with the option to use an embedded FIPS 140-2-validated cryptographic module running on a Linux platform per FIPS 140-2 implementation guidelines.
Page 353
Yes, the KSX II has administrator-configurable, strong password checking to ensure that user-created passwords meet corporate and/or government standards and are resistant to brute force hacking. If the KSX II Encryption Mode is set to Auto, what level of encryption is achieved? The KSX II has the ability to support AES-256.
Appendix D: FAQs Smart Cards and CAC Authentication Does the KSX II support smart card and CAC authentication? Yes, smart cards and DoD Common Access Card (CAC) authentication to target servers is supported in release KX II 2.1.10 and later, and KSX II 2.3.0 and later.
Appendix D: FAQs Managability Can the KSX II be remotely managed and configured via web browser? Yes, the KSX II can be completely configured remotely via web browser. Note that this does require that the workstation have an appropriate Java Runtime Environment (JRE) version installed.
Appendix D: FAQs Miscellaneous What is the KSX II's default IP address? 192.168.0.192 What is the KSX II's default user name and password? The KSX II's default user name is admin and the default password is raritan [all lower case]. However, for the highest level of security, the KSX II forces the administrator to change the KSX II default administrative user name and password when the unit is first booted up.
Index A. AC Power • 23 Absolute Mouse Mode • 72 Accessing a Target Server • 251 Accessing Telnet from a Windows PC • 229 Accessing the KSX II Using CLI • 228 Accessing Virtual Media on a Windows 2000 Server Using a D2CIM-VUSB •...
Page 358
Index Connectivity • 287, 291 Create User Groups and Users • 35 Creating a New Attribute • 296 D. KVM Target Server Ports • 25 DB25F Nulling Serial Adapter Pinouts • 293 DB25M Nulling Serial Adapter Pinouts • 294 DB9F Nulling Serial Adapter Pinouts • 292 DB9M Nulling Serial Adapter Pinouts •...
Page 359
Java • 303 Java Runtime Environment (JRE) • 304 Key Combinations and the Java Runtime Environment (JRE) • 308 Keyboard Language Preference (Fedora Linux Clients) • 307 Keyboard Macros • 57 Keyboard Options • 57 Keyboards • 306 KSX II Client Applications • 4 KSX II Console Layout •...
Page 360
Index Ping Host Page • 222 Port Access Page • 43 Port Access Page (Local Console Server Display) • 246 Port Action Menu • 44, 247 Port Group Management • 188 Port Keywords • 186 Port Permissions • 115, 117 Port Settings •...
Page 361
Supported Blade Chassis Models • 162, 164, 168, 175 Supported Browsers • 275 Supported CIMs for Blade Chassis • 176 Supported Keyboard Languages • 249 Supported Operating Systems (Clients) • 271 Supported Operating Systems and CIMs (KVM Target Servers) • 25, 272, 317 Supported Paragon CIMS and Configurations •...
U.S./Canada/Latin America Monday - Friday 8 a.m. - 6 p.m. ET Phone: 800-724-8090 or 732-764-8886 For CommandCenter NOC: Press 6, then Press 1 For CommandCenter Secure Gateway: Press 6, then Press 2 Fax: 732-764-8887 Email for CommandCenter NOC: tech-ccnoc@raritan.com Email for all other products: tech@raritan.com China Beijing Monday - Friday...