Page 1 Dominion KX III User Station User Guide Release 3.1.0 Copyright © Raritan, Inc. KX3UST-1E-v3.1.0-E February 2019 255-62-0011-00...
Page 2: What's New In The Dominion User Station User Guide For Release
What's New in the Dominion User Station User Guide for Release 3.1.0 Adding KVM Switches Support for single sign-on: (on page 29) • Managing Targets and Support for RDP, VNC, and SSH access: • Access Methods (on page 40) Single Mouse Mode for Dual Monitor Targets •...
Page 3 Raritan, Inc. © Copyright 2019 Raritan, Inc. All third-party software and hardware mentioned in this document are registered trademarks or trademarks of and are the property of their respective holders.
Page 4 Chapter 1: What's New in the Dominion User Station User Guide for Release 3.1.0 Raritan is not responsible for damage to this product resulting from accident, disaster, misuse, abuse, non-Raritan modification of the product, or other events outside of Raritan's reasonable control or not arising under normal operating conditions.
Page 5: Table Of Contents
Contents What's New in the Dominion User Station User Guide for Release 3.1.0 Chapter 1 Introduction Overview ............................... 2 Package Contents ..........................3 Product Photos and Features ......................3 Product Features ........................3 Product Photos .......................... 4 Introduction to the User Station ......................5 Front View ..........................
Page 6 Contents Configuring KVM Ports ........................35 Unavailable Hotkeys for Port Access ..................38 Port Data Retrieval Status ...................... 39 Chapter 4 Managing Targets and Access Methods Adding Targets and Access Methods ....................41 Editing and Deleting Targets and Access Methods ................43 Known Limitations on Targets ......................
Page 7 Contents Disconnecting a Virtual Device ....................87 USB Profiles ..........................88 Power Control ............................ 91 View Settings ............................92 Fit window to Target ........................ 92 Retain Window Size ......................... 92 Scale Video..........................92 Show Window Decorations ..................... 93 Full-Screen Mode ........................93 Hide Mouse Cursor........................
Page 8 Contents Logging in with CC-SG Integration ..................137 Navigator with CC-SG Integration ..................138 CC-SG Authentication Fallback .................... 141 Trusted Certificates ......................... 141 Removing an Installed Certificate ..................142 Certificate Failure Messages ....................143 Server Certificate ..........................144 Import Private Key and Certificate ..................145 Create Self Signed .........................
Page 9 Contents Default Shortcut Icons in the Main Toolbar ..................191 Keyboard Layout Icon ......................191 Volume Icon ........................... 192 Network Icon ......................... 192 Clock Icon ..........................193 Location and Clock Time Format ..................195 Chapter 12 Additional Features Screen Unlocking ..........................198 Factory Reset at Startup ........................
Page 11: Chapter 1 Introduction
Chapter 1 Introduction This chapter introduces the Dominion KX III User Station (Dominion User Station). In This Chapter Overview ......................2 Package Contents ..................3 Product Photos and Features............... 3 Introduction to the User Station ..............5 Introduction to the Software ................. 7...
Page 12: Overview
Access to servers and devices on the network via RDP, SSH, and VNC is also supported. Note: For information on KX III KVM switches, access its user documentation from its application or the Dominion KX III section of the Raritan website's Support page http://www.raritan.com/support/...
Page 13: Package Contents
Chapter 1: Introduction A USB Keyboard, USB mouse, and one or two HDMI- or DisplayPort-interfaced monitors Analog or digital audio appliances Optional smart card reader for remote IT device authentication External drives as virtual media, such as CD-ROM USB drives for virtual media or User Station software update Optional integration with CC-SG Package Contents The Dominion User Station ships with the following contents.
Page 14: Product Photos
Chapter 1: Introduction Support USB audio • Support power control for target servers (with Raritan PX PDUs) • • Support authentication to target servers via an optional smart card Support authentication and authorization via LDAP • Support the optional FIPS 140-2 mode •...
Page 15: Introduction To The User Station
Chapter 1: Introduction VESA mount kit Introduction to the User Station Front View 1. Microphone input 5. Power button 2. Audio output 6. SD card reader 3. Power LED 7. USB 2.0 ports 4. Hard disk LED...
Page 16: Rear View
Chapter 1: Introduction Rear View 1. RS232/RS422/RS485 7. USB 3.0 ports 2. RS232 8. USB 2.0 ports 3. Ventilation 9. DisplayPort (DP) video 1 4. DC power input 10. DisplayPort (DP) video 2 5. Gigabit LAN port 1 11. HDMI video 6.
Page 17: Introduction To The Software
Chapter 1: Introduction Introduction to the Software After powering on the User Station, the Login Screen is shown. After successfully logging in to the User Station, the Main Screen displays. Login Screen...
Page 18 Chapter 1: Introduction • System date and time • Keyboard language (default US English) and Restart or Shut Down Login: The login icon indicates the authentication type being used: • Local, LDAP, or CC-SG. A local authentication checkbox is available whenever the username •...
Page 19: Main Screen And Main Toolbar
Chapter 1: Introduction Main Screen and Main Toolbar The screen displayed after login is the Main Screen. When logging in for the first time, a welcome message is displayed. The Main Toolbar is located at the bottom of this screen. This toolbar shows the Main Menu, shortcut icons and lists any open User Station and KVM Client windows.
Page 20: Online Help And Hotkeys Help
Chapter 1: Introduction Default icons Description The Keyboard Layout icon indicates the current keyboard layout. The default is (American English). Keyboard Layout Icon (on page 191). Volume Icon This icon controls the volume. See (on page 192). Network This icon shows or configures the network information. See Icon (on page 192).
Page 21 Chapter 1: Introduction...
Page 22: Chapter 2 Getting Started
Chapter 2 Getting Started This chapter introduces the basic installation and configuration. In This Chapter Installation and Configuration ..............12 Basic Network Settings ................21 Logout or Shutdown ..................23 VESA Mount (Optional) ................23 Rackmount Using L-type Brackets (Optional) ........... 25 Installation and Configuration Step 1: Connect the Equipment Only the basic hardware installation is described.
Page 23: Step 2: Initial Log In To The Dominion User Station
Step 2: Initial Log in to the Dominion User Station Use the factory default user credentials for initial login. User credentials are case sensitive. To log in to the User Station: 1. Type the user name: admin 2. Type the password: raritan 3. Click Login or press Enter.
Page 24: Step 3: Add Kx Iii Kvm Switches (Without Cc-Sg Integration)
Chapter 2: Getting Started Note: It is strongly recommended to change the factory default password. If the default password has not been changed, you will see a reminder message in the User Station Configuration and Navigator windows. See (on page 108). Change Password Step 3: Add KX III KVM Switches (without CC-SG integration) If you are not integrating your User Station with CC-SG, proceed with this...
Page 25 Chapter 2: Getting Started Type the KVM switch's IPv4/IPv6 address or hostname in this field. Select the authentication method.  Normal: You must enter login credentials for the KVM switch.  Allow LDAP single sign-on: When users, KVM switches, and the Dominion User Station have the same LDAP environment, single sign-on can be used.
Page 26: Step 4: Access Kvm Switches And Ports (Without Cc-Sg Integration)
Chapter 2: Getting Started Step 4: Access KVM Switches and Ports (without CC-SG integration) You access the computer devices connected to a KVM switch's ports and your other targets through the Port Navigator window, which contains 3 panels: Favorite Access shows the access you have configured as favorites. •...
Page 27 Chapter 2: Getting Started Note: To show KVM ports whose status is down, see Using Filters (on page 50). 3. Click the desired KVM port's icon , and select one option below. Open in new KVM client : A new KVM Client window is opened. ...
Page 28: Step 5: Use The Kvm Client
Chapter 2: Getting Started Step 5: Use the KVM Client The User Station's KVM Client window opens after accessing a KVM port. The video of the target server that is connected to the KVM port is displayed in the KVM Client. You can use the attached keyboard and mouse to control the target server.
Page 29 Chapter 2: Getting Started The toolbar is split into two groups. The left group comprises the following buttons that you can use to change settings and properties. Button Function Connection Properties: This button manages streaming video your performance over connection to the target server.
Page 30 Chapter 2: Getting Started Button Function Power Operations: This button turns on, off or power cycles the target server, if a Raritan PDU is connected to the same KVM switch. View: This button shows several display options, such as Scale Video and Full-Screen Mode.
Page 31: Basic Network Settings
Chapter 2: Getting Started Automatic Reconnection If your connection to the client fails, an automatic reconnection will be attempted in most cases. Reconnection is attempted at 30 second intervals until a successful connection is made. A message appears when the connection drops with information about reconnection timing and options to cancel or quit.
Page 32 Chapter 2: Getting Started Select the desired one and click Edit. 3. Click the IPv4 Settings tab. 4. In the Method field, select one of the following options: Automatic (DHCP) : The DHCP server automatically assigns an  IPv4 address. This is the default. Automatic (DHCP) addresses only : The DHCP server ...
Page 33: Logout Or Shutdown
Chapter 2: Getting Started 5. If your network supports IPv6, click the IPv6 Settings tab, and repeat the above step for configuring IPv6 settings. Note that IPv6 provides the "Ignore" option instead of the "Disabled" option to disable the IPv6 Settings IPv6 networking.
Page 34 Chapter 2: Getting Started VESA mount procedure: 1. Turn OFF and disconnect all devices from the power sources, including the monitor. 2. Attach the VESA mount securely to the back of your monitor using four appropriate screws. 3. Align two screw holes on each side of the User Station with those on the VESA mount.
Page 35: Rackmount Using L-Type Brackets (Optional)
Rackmount Using L-type Brackets (Optional) To mount the User Station in a 19-inch data center rack, you must purchase the L-type rackmount kit from Raritan. One rackmount kit contains two L-type brackets, the cable-support bar and a number of screws.
Page 36 Chapter 2: Getting Started To rackmount the User Station using L-type brackets: 1. Attach the L-type brackets to two sides of the User Station, using the included screws. 2. Secure the cable-support bar to the back end of the L-type brackets, using two of the included screws.
Page 37: Chapter 3 Managing Kvm Switches And Ports
Chapter 3 Managing KVM Switches and Ports KVM switches and their KVM ports are managed in the User Station Configuration window. Note: If you are using CC-SG integration, you do not need to add KVM switches in this way. See (see "...
Page 38 Chapter 3: Managing KVM Switches and Ports The User Station Configuration window opens. 1. Configuration tabs: Configuration : Manage KX Devices and Targets. See the other  sections in this chapter. Preferences : Set personal preferences, such as audio settings. ...
Page 39: Adding Kvm Switches
Chapter 3: Managing KVM Switches and Ports When the Targets option is selected, view the list of Targets here,  and click a Target to show its access methods and details. Adding KVM Switches All KX III KVM switches added to this User Station can be seen by all users who log in to this User Station although they can only access those switches if they have provided proper user credentials.
Page 40 Chapter 3: Managing KVM Switches and Ports 2. The following page opens, and the user must enter the required Step 3: Add KX III KVM Switches Step 3: Add information. See (see " KX III KVM Switches (without CC-SG integration) "...
Page 41: Editing Kvm Switches
Chapter 3: Managing KVM Switches and Ports Editing KVM Switches Added KVM switches are listed in the User Station Configuration window. Each KVM switch has three icons in the Actions column. You must have Device Administration privileges to delete, edit or add KVM switches. If you are not the one who added new KVM switches to the User Station, you must follow the procedure below to enter user credentials for newly-added KVM switches.
Page 42: Deleting Kvm Switches
Chapter 3: Managing KVM Switches and Ports Deleting KVM Switches The final button in the Actions column is used to delete this KVM switch. To delete a KVM switch: 1. Click the desired KVM switch's button. 2. Click OK on the confirmation message. Importing KVM Switches Bulk Import and Update allows you to add or update multiple KVM switches at once using a CSV file found in the root folder of a connected...
Page 43 Chapter 3: Managing KVM Switches and Ports 2. The Storage list displays all CSV files found in the root folder of connected USB storage devices. 3. Click the file you want to import. The Bulk Import page opens to display the file details: File name and size ...
Page 44 Chapter 3: Managing KVM Switches and Ports Note: If errors are listed, the import button is disabled. Correct the file and try again. 4. Click Start the Import/Update in the details dialog. Import progress shows in the dialog. When complete, a success message appears in the main page.
Page 45: Bulk Import Examples
Chapter 3: Managing KVM Switches and Ports Bulk Import Examples Import / update listed KX switches: 192.168.2.104,admin,raritan 192.168.2.103,thomas,thomas 192.168.3.30,admin,raritan 192.168.5.52,user,password Special characters and escaping Line 1 is an example of using comma in a value. Line 2 is an example for escaping ", the resulting password string is "password"...
Page 46 Chapter 3: Managing KVM Switches and Ports indicates that the port is configured to automatically connect  to microphone when the connection launches. The icon shown in the top-right corner of the Ports section  indicates the KVM port information retrieval status. In this Port Data Retrieval example, there is a green checkmark.
Page 47 Chapter 3: Managing KVM Switches and Ports Checkbox Function Hotkey Assign a hotkey combination for quickly accessing this KVM port. Available options include: Ctrl + Shift + <character>  Ctrl + Alt + <character>  Shift + Alt + <character> ...
Page 48: Unavailable Hotkeys For Port Access
Chapter 3: Managing KVM Switches and Ports Select the checkbox for each setting that should override the  default setting. 5. Click Save. Unavailable Hotkeys for Port Access The following hotkey combinations are not available for accessing KVM ports. Unavailable hot keys Notes Ctrl + Shift + <number>...
Page 49: Port Data Retrieval Status
Chapter 3: Managing KVM Switches and Ports Port Data Retrieval Status An icon is displayed in the top-right corner of the Ports section in the User Station Configuration window. This icon indicates the data retrieval status of the KVM ports on the selected KVM switch. Click this icon to view additional information.
Page 50: Chapter 4 Managing Targets And Access Methods
Chapter 4 Managing Targets and Access Methods Targets and Access methods are managed in the User Station User Station Configuration Configuration window. See (on page 27). The Targets and Access methods feature offers different ways to view, manage, and connect to targets, using KVM port access, as well as RDP, SSH, and VNC.
Page 51: Adding Targets And Access Methods
Chapter 4: Managing Targets and Access Methods Adding Targets and Access Methods To add targets and access methods: 1. In Main Menu, open the User Station Configuration window, then click Targets. 2. The Targets list appears. Click New. 3. In the Add Access page, you will name the Target, and add the first access method.
Page 52 Chapter 4: Managing Targets and Access Methods Port Number: The default port number for the access type is  populated automatically, but can be changed. User Credentials: Enter the username and password as required  for the access type. 4. Click Save. The new targets details display. Note that there are options to edit all the settings.
Page 53: Editing And Deleting Targets And Access Methods
Chapter 4: Managing Targets and Access Methods Editing and Deleting Targets and Access Methods Targets and Access methods are listed in the User Station Configuration window. You cannot delete KVM access, but all other access methods can be deleted. A Target must have at least one access method, or the target is deleted.
Page 54: Known Limitations On Targets
Chapter 4: Managing Targets and Access Methods Add an access method to the target. Known Limitations on Targets There are some known limitations on how Target access sessions function compared to typical KVM Client sessions. Window Layouts can include KVM sessions only. VNC, RDP and SSH •...
Page 55: Chapter 5 Navigation And Access
Chapter 5 Navigation and Access The Port Navigator window contains three panels for accessing your ports and other Favorite targets: Access Devices, Targets The Navigator remembers the last-opened panel and returns to it when Navigator is opened again. Note: When you are logged in as a CC-SG user, your user experience is different.
Page 56: Port Navigator
Chapter 5: Navigation and Access In This Chapter Port Navigator ..................... 46 Identifying States of KVM Switches and Ports ........... 48 Identifying External Media ................49 Dual Video Port Status ................49 Using Search ....................50 Using Filters ....................50 Port Navigator The Port Navigator window is displayed by default.
Page 57 Chapter 5: Navigation and Access 1. Search: Searches for KVM ports, switches, or targets and access points Using Search containing the search word(s). See (on page 50). 2. Additional Filters: Determines which items are displayed in this window based on Using Filters connectivity and availability.
Page 58: Identifying States Of Kvm Switches And Ports
Chapter 5: Navigation and Access Right-click on the Target, or click the hamburger menu to list all  access methods defined for the Target. Using The default is to show items whose status is Up. See  Filters (on page 50). For dual port video, the name of the dual port video group is ...
Page 59: Identifying External Media
Chapter 5: Navigation and Access Identifying External Media When external media are connected to a port via virtual media, the media icons display after the port name/number. Icon Port state Mass Storage ISO/CD device Microphone Speaker Smart Card Reader Dual Video Port Status The primary port must have Status=Up to make a connection to both ports.
Page 60: Using Search
Chapter 5: Navigation and Access Using Search The search box allows you to search for the KVM ports or switches that match the user's search words. To search for KVM ports or switches: 1. Open the panel where you want to perform the search function. To search for a KVM switch, click the Devices panel.
Page 61 Chapter 5: Navigation and Access To change the filter: 1. Click Filters, and the following checkboxes will appear. 2. Select or deselect any checkboxes to determine what is shown. Checkbox KVM switch's state Normal The KVM switch can communicate with the User Station, and the device state is normal.
Page 62 Chapter 5: Navigation and Access 3. When completed, click Filters again to hide the options.
Page 63: Chapter 6 Port Scanner
Chapter 6 Port Scanner The Port Scanner displays an assortment of ports that you select, by scanning through each connection for a specified period of time. You can launch a KVM connection to any port shown in the scanner. • Launch the Port Scanner from the Main Menu.
Page 64: Operating The Port Scanner
Chapter 6: Port Scanner The scanner allows you to pause and restart the scanning, open KVM • sessions, show and hide thumbnails of each port, and set the scan Operating the Port Scanner options. See (on page 54). Audit log entries are created for each individual scanned port when •...
Page 65 Chapter 6: Port Scanner...
Page 66: Scanner Options
Chapter 6: Port Scanner The thumbnail preview shows all included ports. Choose vertical or horizontal placement in the scanner options. The currently displayed port is highlighted in the thumbnails preview. Click the thumbnail once to view the port in the scanner. Double-click the thumbnail to open a KVM session to the port.
Page 67 Chapter 6: Port Scanner 5. Click OK.
Page 68: Chapter 7 Using The Kvm Client
Chapter 7 Using the KVM Client A KVM Client window opens after launching a KX III KVM port where a server is physically connected. When dual video ports are configured on a KX III device, connecting to the dual video port group opens two KVM Dual Video Port client windows that are bound together.
Page 69: Connection Properties
Chapter 7: Using the KVM Client Connection Properties Connection properties manage streaming video performance over connections to target servers. The properties are applied only to your connection, not the connection of other users accessing the same target server. To configure connection properties: 1.
Page 70 Chapter 7: Using the KVM Client Setting Description Noise Filter This slider controls the noise filter threshold.  Left: higher threshold.  Right: lower threshold. Noise Filter (on page 62). Reset to Defaults Reset connection properties to the factory defaults. 3.
Page 71: Default Connection Properties
Chapter 7: Using the KVM Client Item Description Average FPS Average number of frames per second Rendered FPS Number of frames per second that were displayed onscreen. Usually this number is similar to "Decoded FPS", but it may be lower on high graphics demand.
Page 72: Color Accuracy
Chapter 7: Using the KVM Client Color Accuracy When Color Accuracy is selected, all video modes are rendered in full 24-bit color with more compression artifacts. This setting applies to viewing video streams such as movies or other broadcast streams. In lower quality video modes, sharpness of fine detail, such as text, is sacrificed.
Page 73: Keyboard Macros
Chapter 7: Using the KVM Client Keyboard Macros Click to select one of the pre-programmed hotkey macros. Note: If you have manually created any hotkey macros and have them enabled, these macros are displayed below "Send LeftAlt+Tab." See (on page 100). Managing Keyboard Macros Send Ctrl+Alt+Del: To send this key sequence to the target server you are accessing:...
Page 74: Mouse Settings
Important: Make sure you have configured mouse settings on the target servers properly. For information on configuring mouse settings of target servers, refer to the KX III KVM switch's user documentation from its application or the Dominion KX III section of Support page http://www.raritan.com/support/...
Page 75: Synchronize Mouse
Chapter 7: Using the KVM Client Synchronize Mouse In the dual mouse mode, the Synchronize Mouse command forces realignment of the target server's mouse cursor with the User Station's. Dual Mouse Modes (on page 66). To synchronize the mouse cursors: Click >...
Page 76: Dual Mouse Modes
For detailed information of each USB profile, see the section titled "Available USB Profiles" in the KX III KVM switch's user documentation, which is accessible from the KVM switch application or the Raritan website's Support page http://www.raritan.com/support/...
Page 77 Chapter 7: Using the KVM Client Automatic Mouse Mode In this mode, the target server's mouse settings are detected and the mouse cursors synchronized accordingly, allowing mouse acceleration on the target server. This mode is the default for non-VM target servers. Note: A non-VM target server is the target server using a CIM that does not support virtual media.
Page 78: Mouse Synchronization Tips
Chapter 7: Using the KVM Client Note that mouse configurations will vary on different target servers' operating systems. Consult your OS guidelines for further details. Note: Automatic mouse synchronization does not work with UNIX target servers. Standard Mouse Mode Standard mouse mode uses a standard mouse synchronization algorithm.
Page 79: Video Settings
Chapter 7: Using the KVM Client Video Settings Click to open the Video Settings dialog. Video Sensing settings: Setting Description Auto Sense Video This command automatically detects Settings the target server's video settings (resolution, refresh rate) and redraws the video screen. Clicking in the toolbar results in the same video re-sensing function.
Page 80 Chapter 7: Using the KVM Client Setting Description Best Possible The User Station will perform the full Video Mode Auto Sense process when switching target servers or target resolutions. Selecting this option calibrates the video for the best image quality. Quick Sense Video The User Station will use a quick video Mode...
Page 81: Advanced Video Settings
Chapter 7: Using the KVM Client Reset Settings: The Clear Video Settings Cache button resets the cache where video settings are stored, which is useful when old video settings no longer apply, such as when a target server is replaced. After calibrating the colors for a target server, color values are cached and reused whenever accessing that server.
Page 82 Chapter 7: Using the KVM Client Click , drag sliders, or type a new numeric value in the text box to adjust corresponding settings. Setting Description Clock Controls how quickly video pixels are displayed across the video screen. Changes made to clock settings cause the video image to stretch or shrink horizontally.
Page 83: Advanced Color Settings
Chapter 7: Using the KVM Client Advanced Color Settings In the Video Settings dialog, click Advanced Settings in the Color section to show additional color settings. Click , drag sliders, or type a new numeric value in the text box to adjust corresponding settings. Setting Description Brightness Red...
Page 84: Peripheral Devices And Usb Settings
Chapter 7: Using the KVM Client Setting Description Contrast Red Controls the red signal contrast. Contrast Green Controls the green signal contrast. Contrast Blue Controls the blue signal contrast. Peripheral Devices and USB Settings Click to open the "Audio, Mass Storage and SmartCard Devices" dialog, where you can virtually connect up to two devices of different types to a target server.
Page 85 (on page 88). Note: For detailed information of each USB profile, see the section titled "Available USB Profiles" in the KX III KVM switch's user documentation, which is accessible from the KVM switch application or the Raritan website's Support page...
Page 86: Audio Device
Chapter 7: Using the KVM Client Audio Device The User Station supports end-to-end, bidirectional, digital audio connections with a target server for digital audio playback and capture devices. One of the following CIMs must be used: D2CIM-DVUSB • D2CIM-DVUSB-DVI • •...
Page 87 Chapter 7: Using the KVM Client 2. Click the "Audio Device ..." button. The Connect Audio Device dialog appears. Checkbox Description Connect Playback To manually connect an available audio Device (Speaker / playback device to the target server, Headphones) select this checkbox. ...
Page 88: Virtual Media
Chapter 7: Using the KVM Client Virtual Media The Dominion User Station supports virtual media (VM). Virtual media extends KVM capabilities by enabling target servers to remotely access media from the User Station and network file servers. With this feature, media mounted onto the User Station and network file servers are essentially "mounted virtually"...
Page 89 USB mass storage devices • ISO images (disk images) • ISO9660 is the standard supported by Raritan. However, other ISO standards can be used. Note: Connecting digital audio devices onto the target server is also supported. See (on page 76).
Page 90 Chapter 7: Using the KVM Client 2. Click the "Mass Storage Device ..." button. The Connect Mass Storage Device dialog appears. 3. Choose the drive from the Local Drive drop-down list. 4. If you want Read and Write capabilities, select the Read-Write checkbox.
Page 91 Chapter 7: Using the KVM Client Mounting CD-ROM/DVD-ROM/ISO Images ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work. Note: Audio CDs are not supported by virtual media so they do not work with the virtual media feature.
Page 92 Remote ISO images must be setup in KX3 to be available for selection by the KVM-Client. See Virtual Media File Server Setup in KX3's online help. (http://help.raritan.com/kx-iii/v3.4.0/en/#33617.htm has instructions for KX3 v3.4) a. Select the Remote Server ISO Image option.
Page 93: Smartcard Reader
Supported card readers: Refer to the topic titled "Supported and Unsupported Smart Card • Readers" in the KX III KVM switch's user documentation, which is accessible from its application or the Dominion KX III section of the Support page Raritan website's http://www.raritan.com/support/ Target server requirements: Refer to the topic titled "Target Server Requirements"...
Page 94 Chapter 7: Using the KVM Client Mounting a Card Reader You can physically connect multiple smart card readers to the User Station, but only one smart card reader can be virtually mounted onto a target server at a time. To mount a smart card reader: supported 1.
Page 95 Chapter 7: Using the KVM Client 6. When the card reader is listed as a virtual device in the "Audio, Mass Storage and SmartCard Devices" dialog, you can insert the card. To disconnect the card reader from the target server: Click the Unmount button in the "Audio, Mass Storage and •...
Page 96 Chapter 7: Using the KVM Client Emulating the Card Reinsertion If the authentication on the target server fails while the card is being properly inserted into the card reader, you can attempt to solve the issue by removing and reinserting the card. The User Station is able to emulate the card reinsertion without physically removing and reinserting the card.
Page 97: Disconnecting A Virtual Device
Chapter 7: Using the KVM Client b. You establish a connection to that target server, and the audio device and card reader with a card inserted are automatically connected to the target. c. The card is not detected. You can emulate the card reinsertion to Emulating the Card Reinsertion re-detect it.
Page 98: Usb Profiles
Chapter 7: Using the KVM Client Existing virtual devices are listed in the Connected Devices section. The devices that you can no longer mount onto the target server are disabled. Hover your mouse for a tooltip showing reasons. 3. Click the Disconnect button for the device you want to disconnect. Click the Unmount button if you are disconnecting the smart card ...
Page 99 (on page 90). For detailed information of each USB profile, see the section  titled "Available USB Profiles" in the KX III KVM switch's user documentation, which is accessible from the KVM switch Support page application or the Raritan website's http://www.raritan.com/support/...
Page 100 BIOS profile may be more appropriate. If none of the standard USB profiles provided by Raritan work with a provided target server, contact Raritan Technical Support for assistance. For detailed information of available USB profiles, refer to the user...
Page 101: Power Control
Chapter 7: Using the KVM Client Power Control You can power on, power off, and power cycle a target server through the outlet(s) it is connected to. This power control button is enabled only when the power control requirements are met. Power control requirements: On the KX III KVM switch, a PDU's outlet(s) must be associated with •...
Page 102: View Settings
Chapter 7: Using the KVM Client View Settings Click to show available view options. Fit window to Target The "Fit window to Target" command enlarges or shrinks the size of the KVM Client window to the target server's video resolution. The KVM Client's scroll bars may or may not appear, depending on whether the target server's resolution is small enough for the KVM Client window to show the target server's entire desktop video.
Page 103: Show Window Decorations
Chapter 7: Using the KVM Client Show Window Decorations You can use the KVM Client with or without the window decorations, including the window title and scroll bars. Tip: You can have this display option automatically enabled or disabled by setting your preferences on the KVM Client Settings page.
Page 104: Window Management
Chapter 7: Using the KVM Client Window Management Window Management helps you organize open KVM and VNC sessions. Other User Station windows, such as Port Navigator and the Port Scanner, are not included in window management. SSH and RDP sessions are also not included. If two monitors are connected to the User Station, the feature works separately on each monitor.
Page 105 Chapter 7: Using the KVM Client Tile KVM Windows: arranges all KVM and VNC windows in a tiled • layout on desktop. Minimized windows will be unminimized. Revert Tiling: Undo last tiling operation and restore previous window • sizes. Previously minimized windows will be minimized again. •...
Page 106: Dual Video Port Connections
Chapter 7: Using the KVM Client Dual Video Port Connections When connecting to a Dual Video port, two KVM client windows are opened. The two client windows are bound to each other. Window title: [<group_name>] port_name. When one window is closed, the other one is closed automatically Switching to and from Dual Video ports is not possible.
Page 107: Kvm Client Settings
Chapter 8 Setting User Preferences In the User Station Configuration window, click Preferences to customize the following user settings. In This Chapter KVM Client Settings ..................97 Managing Keyboard Macros ..............100 Audio Settings ................... 103 Hotkeys ...................... 104 Window Layouts ..................107 Change Password ..................
Page 108 Chapter 8: Setting User Preferences indicates the setting is disabled.  3. Click Edit to make changes. Connection Settings: Selecting the "Warn if a Virtual Media  Connection is about to be disconnected" checkbox will cause a warning message to display if this event occurs. Target Window Settings: These selections determine the initial ...
Page 109 Chapter 8: Setting User Preferences Checkbox Description Positioning Determines where the KVM Client shows up on the screen:  Automatic: The positioning of the KVM Client is not restricted. For example, the first KVM Client that appears may align with the top-left corner of the screen, but the second KVM Client may align with the bottom-right corner of the screen.
Page 110: Managing Keyboard Macros
Chapter 8: Setting User Preferences Single Mouse Mode for Dual Monitor Targets When Start in Single Mouse Cursor Mode is enabled for a dual monitor target: • The top-left display KVM client is brought to front (instead of the primary) because this one controls the mouse. Managing Keyboard Macros Keyboard macros can be created to use instead of physical keystroke combinations, so that the actions intended for the target server are sent...
Page 111 Chapter 8: Setting User Preferences Field/option Description Enabled Select this checkbox so that the new macro can appear in the KVM Client of Executing Macros this User Station. See (on page 102). Name Type a name for the new macro. Key Sets Select the key set containing the desired Available Key Sets...
Page 112: Executing Macros
Chapter 8: Setting User Preferences Executing Macros Manually-created keyboard macros, if they are enabled, appear following the pre-programmed keyboard macros in the keyboard pull-down list of Using the KVM Client the KVM Client. See (on page 58). Click to show the keyboard macro list, and select the desired macro to send it to the target server.
Page 113: Audio Settings
Chapter 8: Setting User Preferences Keyboard Macro Example For example, you can create a keyboard macro to close a window by selecting Left Alt+F4. The macro's content looks like the following. Press Left Alt Press F4 Release F4 Release Left Alt Audio Settings The default audio playback/capture devices used by the User Station are the front-panel analog speakers and microphone.
Page 114: Hotkeys
Chapter 8: Setting User Preferences 6. Click Save. 7. (Optional) To test whether the currently selected speaker works, click the Test Speaker buttons. Hotkeys You can enable, disable and customize hotkeys to control the User Station, manage windows, or control KVM Client functions. These hotkeys, when pressed, are executed on the User Station rather than being transmitted to any target servers you are operating.
Page 115: Move Keys
Chapter 8: Setting User Preferences 2. Click Preferences > Hotkeys. The Hotkeys page opens, showing the current settings for all hotkey categories. 3. Scroll down and click Edit to change the hotkeys: To enable, select a key combination for the function from its ...
Page 116 Chapter 8: Setting User Preferences Hotkey Function Ctrl + Alt + 1 (on the keypad) Ctrl + Alt + 3 (on the keypad) Move the window to the screen corner in the specified direction on the monitor. Ctrl + Alt + 7 (on the keypad) Ctrl + Alt + 9 (on the keypad) Ctrl + Shift + Move the window, in the specified direction, to the nearest edge, which...
Page 117: Window Layouts
Chapter 8: Setting User Preferences Switch Keys Switch keys allow you to switch between open windows using Shift + Windows + Arrow keys. Hotkeys To enable or disable switch keys, see (on page 104). Window Layouts The window layouts feature allows you to save layouts of running KVM client windows so that the specific layout can be restored upon selection.
Page 118: Change Password
Chapter 8: Setting User Preferences Upon restoring a layout, some targets may not be available. The clients for those targets are restored anyway with their visual attributes and an error message that their target cannot be connected. To manage layouts: The tools for window layout management allow you to set a layout to be restored upon login, rename or delete layouts, and assign hotkeys to layouts.
Page 119 Chapter 8: Setting User Preferences 3. Click Save.
Page 120: Chapter 9 Administration Features
Chapter 9 Administration Features In the User Station Configuration window, click Administration to perform the following User Station administration tasks. In This Chapter Users ......................111 User Groups ....................114 LDAP ......................118 CommandCenter Secure Gateway (CC-SG) Integration ......134 Trusted Certificates ..................
Page 121: Users
Chapter 9: Administration Features Users The Dominion User Station provides a built-in administrator account, which is ideal for initial login and system administration. You can add user profiles with configurable privileges for other users to operate and administer the User Station. Note that the Dominion User Station's user profiles determine the permissions users are granted to have on the User Station instead of the Authentication of User Stations and KVM Switches...
Page 122 Chapter 9: Administration Features 2. In the User Station Configuration menu, click Administration > Users > New User. The New User page opens. 3. Enter information for the new user. The fields marked with * are mandatory. Field Description Login User name for logging in to the User Station.
Page 123: Editing Or Deleting Users
Chapter 9: Administration Features Field Description Name Real name or nickname of the user. Password, Password for logging in to the User Station. Password confirmation A minimum of five characters are required. Selected User Assigning user groups determines the Groups permissions granted to this user.
Page 124: User Groups
Chapter 9: Administration Features Click each user's login name to view details. admin Note that you cannot delete the built-in user, but you can modify its data other than the privileges (user groups). To modify a user profile: 1. Click the desired user's button.
Page 125: Privileges
Chapter 9: Administration Features 2. Click Administration > User Groups > New User Group. The New User Group page opens. 3. Enter information for the new user group. Field Description Name Type a name for the new user group. Privileges Assign one or multiple privileges to the Privileges new user group.
Page 126 Chapter 9: Administration Features Privilege Operations permitted  Open VNC, RDP, and SSH sessions. VNC Access  This permission alone does not RDP Access grant login privileges. User must SSH Access also be a member of a group with System Administration, Device Administration or Device Access privileges.
Page 127: Editing Or Deleting User Groups
Chapter 9: Administration Features Editing or Deleting User Groups To view all user groups in the User Station Configuration window, click Administration > User Groups. The Users column lists the names of all users who belong to this user group. The priority is to show the real names of these users. If the real name is not available in the user profile, the user's login name is shown.
Page 128: Ldap
Chapter 9: Administration Features If any user will not be able to log in after losing this user group,  the confirmation message shows a warning similar to the following diagram. This is because the selected user group is the only user group that one or some of the group members have.
Page 129 Chapter 9: Administration Features User names for this LDAP authentication mode are NOT needed  on the User Station. LDAP alias, which allows one user to have multiple logins, such as multiple common names, does NOT work in the LDAP authentication and authorization mode.
Page 130: Adding Ldap Servers
Chapter 9: Administration Features Adding LDAP Servers To apply external LDAP authentication, at least one LDAP server must be added to the User Station. If you are not familiar with the LDAP settings, consult your LDAP administrator for help. If there are multiple LDAP servers added, the order of the LDAP servers determines the authentication priority.
Page 131 Chapter 9: Administration Features Setting Description The type of the new LDAP server: Type  Active Directory Server: Microsoft Active Directory  LDAP server: OpenLDAP The order of this LDAP server, which Order determines the authentication priority when there are multiple LDAP servers. If adding more than one LDAP server, you can change the priority by selecting the sequential number of any existing LDAP...
Page 132 Chapter 9: Administration Features Setting Description Configurable when "Type" is set to Domain "Active Directory Server." The Active Directory server's domain name. Usually the User Station can determine the Active Directory server's host name via its domain name and DNS. If you select the following Use Host checkbox, this behavior is replaced.
Page 133 Chapter 9: Administration Features 5. Enter the bind credentials in the Bind section.
Page 134 Chapter 9: Administration Features Setting Description Distinguished Name (DN) of the search Base DN base, which is the starting point of the LDAP search.  Example: ou=dev,dc=example,dc=com The attribute of the LDAP user class which Login Name denotes the login name. Attribute Note that only relative distinguished names (RDNs) can be specified in this field.
Page 135 Chapter 9: Administration Features Setting Description Configurable when "Search Credentials" Bind After Search is NOT set to "no search." Select this checkbox if the LDAP bind operation shall be performed with a DN derived from a search operation for the user who's trying to log in.
Page 136 Chapter 9: Administration Features Setting Description Select this checkbox if authorization via Use Groups For LDAP LDAP is intended. See (on page Authorization 118). When disabled, authorization is managed by the User Station, and this LDAP server only manages authentication. Select this checkbox when intending to Use Group search a dedicated base DN instead of...
Page 137 Chapter 9: Administration Features 7. To test whether the connection to the new LDAP server can be successfully established, type the LDAP user name and password in the Test Connection section and click Test. 8. Click Save. 9. Repeat the same steps to add more LDAP servers as needed. Editing or Deleting LDAP Servers To show a list of existing LDAP servers, click Administration >...
Page 138: Enabling Or Disabling The Ldap Authentication
Chapter 9: Administration Features To delete an LDAP server: 1. Click the desired server's button. 2. Click OK on the confirmation message. Enabling or Disabling the LDAP Authentication Click Administration > LDAP to open the LDAP Servers page. The right-most button indicates the current LDAP authentication setting. When that page shows , the LDAP authentication is currently disabled, which is the default.
Page 139: Searching For Ldap Users And Groups
Chapter 9: Administration Features Tip 2: To enable or disable a specific LDAP server only, select or deselect the desired LDAP server's Active checkbox. See Editing or Deleting (on page 127). LDAP Servers Searching for LDAP Users and Groups When the LDAP authentication is being enabled, you can manually search for LDAP users or user groups as needed.
Page 140 Chapter 9: Administration Features 2. In the Server field, select the desired LDAP server from the list of active LDAP servers. 3. The following settings on this page are pre-populated with the values of the selected LDAP server, but you can adjust them to match your search needs.
Page 141: Configuring The Maximum Search Results And Local Authentication Settings
Chapter 9: Administration Features This button is displayed for those users who are not added to the User Station yet. Click this button to add the LDAP user as a local user who can also be authenticated via LDAP in the "LDAP authentication only"...
Page 142: Logging In With Ldap
Chapter 9: Administration Features 2. The Edit LDAP Settings page opens. 3. LDAP authentication must be enabled to set the upper limit for the LDAP search results. To enable, select the Enabled checkbox. 10, 100 4. Select the desired value in the Max Search Results field: 1000 10000 5.
Page 143: Ldap Login Failure Message
Chapter 9: Administration Features LDAP Login Failure Message Certificate hostname verification added in release 1.3 may cause an error upon upgrade if LDAP servers were added using IP address instead of hostname. LDAP user login attempt may fail with the event log message: Login of 'name' failed with hostname "IP Address"...
Page 144: Commandcenter Secure Gateway (Cc-Sg) Integration
Raritan’s CC-SG consolidates multiple remote access technologies, including Dominion® KVM-over-IP switches and serial console servers, Raritan PX PDUs, service processors, and in-band methods such as RDP, SSH and VNC. CC-SG integration in Dominion User Station allows you to access and...
Page 145: Enabling Cc-Sg Integration
Chapter 9: Administration Features Enabling CC-SG Integration Enable CC-SG integration in the Administration settings. When the feature is enabled or disabled, you must logout of Dominion User Station, and then log back in so that the authentication can take effect. If you have local users and CC-SG users, make sure "Allow access for local users"...
Page 146 Chapter 9: Administration Features b. Allow access for local users: select this option to allow local users to access even when CC-SG integration is enabled. When enabled, an additional checkbox appears on the Dominion User Station login page for users to select when they need to login locally.
Page 147: Logging In With Cc-Sg Integration
Chapter 9: Administration Features Logging in with CC-SG Integration When CC-SG integration is enabled, the login page includes a CC-SG icon. Login with your CC-SG username and password to access the targets you have permissions for on CC-SG. Depending on your setting, you may see an extra checkbox for local users.
Page 148: Navigator With Cc-Sg Integration
Chapter 9: Administration Features Navigator with CC-SG Integration When CC-SG integration is enabled, the Navigator is optimized to show your Favorite Access items, and CC-SG Nodes. The CC-SG Nodes section includes nodes that the user is authorized to view, including KVM, SSH, VNC and RDP interfaces.
Page 149 Chapter 9: Administration Features The Port Navigator window is displayed by default. To launch Port Navigator: • Press Ctrl+Alt+N. OR choose Main Menu > Port Navigator. The Port Navigator window opens. • 1. Search: Searches for ports, switches, or interfaces containing the search Using Search word(s).
Page 150 Chapter 9: Administration Features Shows a list of the favorite access you have configured. See Configuring KVM Ports (on page 35). 5. CC-SG Targets panel: Shows a list of all CC-SG Targets. Targets with KVM access also  show port status. Left-click on the Target opens the appropriate client.
Page 151: Trusted Certificates
Chapter 9: Administration Features CC-SG Authentication Fallback CC-SG has a fall-back authentication mechanism. CC-SG maintains an ordered list of authentication methods and if one authentication method fails CC-SG tries authentication with the next mechanism in the list. For the best results with CC-SG integration, make sure users have the same access privileges in each authentication server that may be used.
Page 152: Removing An Installed Certificate
Chapter 9: Administration Features 2. Click Administration > Trusted Certificates, then click the Import Certificate button . The Import Trusted Certificate page opens with a list of detected certificates. 3. Click to install the desired certificate onto the User Station. Certificate files must be one of the following types: PEM, DER, TXT, CER, or CRT.
Page 153: Certificate Failure Messages
Chapter 9: Administration Features Certificate Failure Messages In the FIPS mode and when Check KX Device Certificates is enabled, if the KVM connection failure is resulted from the absence of a valid KVM switch certificate on the User Station, an error message similar to the following appears.
Page 154: Server Certificate
Chapter 9: Administration Features Server Certificate Services that occur over network, such as remote control, are secured with TLS. This requires the installation of a TLS certificate on the Dominion User Station. By default, the Dominion User Station has a demo certificate. You must have System Administrator privileges to view, download or change the certificate.
Page 155: Import Private Key And Certificate
Chapter 9: Administration Features Import Private Key and Certificate If you would like to use your own private key and certificate, you can import it from an attached USB drive. Passphrase protected keys are not supported. The private key and certificate must be combined in one file.
Page 156: Create Self Signed
Chapter 9: Administration Features Create Self Signed If you would like to use a self signed certificate, you can create the Private Key and the Certificate using Dominion User Station. After creating the certificate, you will install it. To create a self signed certificate: 1.
Page 157 Chapter 9: Administration Features 4. Click Create. 5. The certificate and key details display. If you approve, click Install to use this certificate. Installing the certificate requires a reboot.
Page 158: Security Settings
Chapter 9: Administration Features Security Settings The User Station optionally uses a FIPS 140-2 encryption module that supports the Security Requirements for Cryptographic Modules of the Federal Information Processing Standards (FIPS), which is defined in the FIPS PUB 140-2 (http://www.nist.gov/cmvp/), Annex A: Approved Security Functions .
Page 159 Chapter 9: Administration Features indicates the setting is disabled.  Note: These options require certificates to be installed. Click Manage Certificates to check certificates or install more. See Trusted (on page 141). Certificates 2. Click Edit, and then select or deselect the checkboxes for FIPS or Certificate Settings.
Page 160: Display Settings
Chapter 9: Administration Features Display Settings The User Station display can be configured to lock the screen or turn off the monitor in certain conditions. Display settings configured are applied to all users. You must have "System Administrators" privileges to configure display settings.
Page 161: Desktop Background
Desktop Background To customize your Dominion User Station, you can replace the default Raritan desktop background with a background image of your choice. System Administration privilege is required. The applied background image is active on the login page and the desktop background.
Page 162: Remote Control
Chapter 9: Administration Features Remote Control The remote control configuration allows the Dominion User Station to be controlled via web browser accessed by a smart phone or PC that can reach the Dominion User Station on the network. Supported browsers: •...
Page 163: Using Remote Control
Chapter 9: Administration Features Using Remote Control One common use case for remote control is to connect the controlled user station to a wall monitor and remotely control the display of various target servers on monitor via web browser. Using a web browser, connect to the Remote Control interface of the Dominion User Station using the IP address or hostname as the URL.
Page 164: Chapter 10 Maintenance Features
Chapter 10 Maintenance Features In the User Station Configuration window, click Maintenance to perform the following User Station maintenance tasks. In This Chapter Event Log ....................155 Backup and Restore .................. 161 Factory Reset .................... 165 Software Update ..................166 Support ......................
Page 165: Event Log
Chapter 10: Maintenance Features Event Log The Event Log is an application level log of activity taking place in the User Station. It records who did a certain task and when it was done. For example, login and logout, open connection to a KVM-port, updating the software and so on.
Page 166: Event Type And Description
Chapter 10: Maintenance Features 4. Click Search. The filtered list of events appears at the bottom of the search controls. Event Type and Description The Event Log includes the following events types. Authentication Events: Description includes user name and local, •...
Page 167 Chapter 10: Maintenance Features Create an Archive 1. If not displayed, launch the User Station Configuration window. See User Station Configuration (on page 27). 2. Click Maintenance> Event Log. The Event Log page opens. 3. Click Archives. The Event Log Archives page opens. 4.
Page 168 Chapter 10: Maintenance Features 6. Click OK in the confirmation dialog.
Page 169 Chapter 10: Maintenance Features Automatic Archives Dominion User Station will automatically create archives in cases where the database has become full of too many records. Automatic archives are implemented with two thresholds, Warning and Critical. The thresholds are checked once per day. If thresholds are met, an error message appears in the event log.
Page 170 Chapter 10: Maintenance Features Deleting Archive Files You can delete an archive file. If you want to save the file off the Exporting Archive Files Dominion User Station before deleting it, see (on page 159). 1. If not displayed, launch the User Station Configuration window. See User Station Configuration (on page 27).
Page 171: Backup And Restore
Chapter 10: Maintenance Features Archive File Storage The amount of storage to keep Event Log archives inside Dominion User Station is limited. If no more storage is available, you will see an error message upon attempting to create a new archive. The error message prompts you to delete old archive files.
Page 172 Chapter 10: Maintenance Features 2. Click Maintenance > Backup & Restore. The Backup & Restore page opens. 3. Click Create Backup. 4. Once completed, the Backup Archives page lists the backup file, with the filename, software version and file size shown on the screen. To restore to the previous settings and data: 1.
Page 173: Exporting And Importing Backup Files
Chapter 10: Maintenance Features Or, click the filename link to view details, and click the Restore button in the details page. 3. Click OK on the confirmation message. 4. A text screen appears to show restore progress. When restore is completed, Dominion User Station restarts and opens the login page.
Page 174: Deleting Backup Files
Chapter 10: Maintenance Features To import backup files: root Make sure the connected USB drive contains backup files in its directory. 1. Click Maintenance > Backup & Restore. The Backup & Restore page opens. 2. Click Import Backup. The Import Backup from USB Storage page opens.
Page 175: Factory Reset
Chapter 10: Maintenance Features Factory Reset The factory reset feature resets all of your User Station's settings to the factory defaults except for Network Settings and Date/Time Settings. All other customized data is removed simultaneously, including: All KVM switches added to the User Station •...
Page 176: Software Update
4. Click OK to confirm the operation or Cancel to abort it. Software Update The software update feature only permits software UPGRADE, not downgrade. Note: To perform software downgrade, contact Raritan Technical Support for help. To perform the software update, you must meet the following requirements: You have a USB flash drive with one of the following formats, or a •...
Page 177 Chapter 10: Maintenance Features To perform the software UPGRADE: 1. Use a computer to download the User Station software file from the Dominion KX III User Station section of the Raritan website's Support page http://www.raritan.com/support/ 2. Copy the file named "KX3UST_<version>_update.bin" to the root directory of your USB flash drive or CD/DVD disc.
Page 178: Support
 3. Click Edit. 4. Select the Support Login checkbox. 5. Click Save. 6. Provide your User Station's IP address to Raritan Technical Support. To retrieve the IP address(es), right-click the network icon in the  Network Main Toolbar to select Connection Information. See Icon (on page 192).
Page 179: Log Level For Diagnostic Log Files
Chapter 10: Maintenance Features Important: Disable this feature immediately after Raritan Technical Support finishes the troubleshooting task. Log Level for Diagnostic Log Files 1. If not displayed, launch the User Station Configuration window. See User Station Configuration (on page 27).
Page 180: About This Device
4. Wait until the User Station finishes the export, displaying the "Successfully finished" message as well as the filename of the diagnostic log. 5. Send the file to Raritan Technical Support. About this Device The "About this Device" page shows the firmware version information.
Page 181: In This Chapter Date/Time
Chapter 11 System Settings System Settings are found in the Main Menu. In This Chapter Date/Time ....................171 Keyboard ....................174 Monitor....................... 178 Mouse ......................180 Network Connections ................181 Default Shortcut Icons in the Main Toolbar ..........191 Date/Time 1.
Page 182: Date And Time
Chapter 11: System Settings Date and Time Configure the date and time using the tab labeled  (on page 172). If the date and time synchronizes with an NTP server in the "Date  Time and Time" tab, you must set the time zone correctly. See Zone (on page 173).
Page 183: Time Zone
Chapter 11: System Settings When selected, the initial time synchronization is faster while consuming more network bandwidth. Use Local Time Source:  Select this only when you use a radio-controlled clock device to synchronize the User Station's clock with an authoritative time source.
Page 184: Keyboard
Chapter 11: System Settings 4. To make the system time automatically switch between normal and daylight savings time, select the "System clock uses UTC" checkbox. Keyboard 1. Choose Main Menu > System Settings > Keyboard. The Keyboard Preferences dialog appears. 2.
Page 185: Keyboard Layouts
Chapter 11: System Settings Keyboard Layouts In the Layouts tab, available keyboard layouts are all shown. The same keyboard layout list is also available when working with the keyboard icon in the Main Toolbar. Any changes made to the dialog's keyboard layout list also change the keyboard layout list available in the Main Main Screen and Main Toolbar Toolbar.
Page 186: Mouse Keys
Chapter 11: System Settings To add a layout to the list, click Add. If four layouts are already  listed, you must remove one before you can add another. After clicking Add, select a layout by County or Language to preview the keyboard layout.
Page 187 Chapter 11: System Settings Function Move down Move toward the bottom-right corner Move left Click the selected button Move right Move toward the top-left corner Move up Move toward the top-right corner Num Lock The other alternative to activate or deactivate the Mouse Keys function is to press: Left Alt+Left Shift+Num Lock Select primary button...
Page 188: Monitor
Chapter 11: System Settings Monitor 1. Choose Main Menu > System Settings > Monitor. The Monitor Preferences dialog appears. 2. Perform or configure any of the following function: Setting/button Function On/Off Turn on or off this monitor, if there are two monitors connected to the User Station.
Page 189 Chapter 11: System Settings Setting/button Function Same image in all If two monitors are connected, determine monitors whether both monitors show the same image. This setting is disabled when only one monitor is connected. Detect monitors Click this button if any connected monitor is not detected.
Page 190: Mouse
Chapter 11: System Settings Mouse The mouse preferences dialog affects how your mouse works in Dominion User Station screens only. These settings do not affect your Mouse Settings mouse in the KVM Client. For those settings, see page 64) 1. Choose Main Menu > System Settings > Mouse. The Mouse Preferences dialog appears.
Page 191: Network Connections
Chapter 11: System Settings Network Connections You can connect the two LAN ports of the User Station to the same or diverse subnets. If you have connected both LAN ports to the network(s) when turning on randomly or restarting the User Station, the User Station selects one of the network connections as the default one.
Page 192 Chapter 11: System Settings 2. Select the desired connection, and click Edit. A dialog appears. 3. Click the IPv4 Settings or IPv6 Settings tab to configure network settings properly. IPv4 Settings:  Setting Description Method Select one of the following as the connection method and configure associated settings: ...
Page 193: Ipv4 Settings
Chapter 11: System Settings Setting Description Method Select one of the following as the connection method:  Ignore  Automatic  Automatic, addresses only  Automatic, DHCP only  Manual IPv6 Settings (on page 187). 4. Click OK. The new network settings apply now. Note: You can retrieve current IP addresses from the Connection Information dialog.
Page 194 Chapter 11: System Settings Setting Description Additional DNS Optional. servers You may specify IP addresses of one or multiple additional DNS servers for resolving host names. Use commas to separate multiple servers. Additional search Optional. domains You may specify IP addresses of one or multiple additional domains for resolving host names.
Page 195 Chapter 11: System Settings Setting Description Routes Optional. Configure the IPv4 routing for this User Station.  Click Add to add one or multiple routing addresses for the User Station to reach in the network.  To remove any existing routes, select it and click Delete.
Page 196 Chapter 11: System Settings Setting Description Routes Manual: Select this method when intending to manually assign a static IP address to the User Station. In the Addresses section, click Add and then type the User Station's IPv4 address, netmask and gateway in this section. At least one IPv4 address, netmask and gateway must be specified.
Page 197: Ipv6 Settings
Chapter 11: System Settings IPv6 Settings Automatic: IPv6 auto-configuration automatically assigns an IPv6 address to the User Station, and retrieves the information of DNS server(s) and domain(s) from the DHCP server. The following settings are configurable for this method. Setting Description Additional DNS Optional.
Page 198 Chapter 11: System Settings Setting Description IPv6 privacy Determine whether and how privacy extensions extensions apply to the IPv6 addressing.  Disabled: Disables privacy extensions.  Enabled (prefer public address): Enables privacy extensions and a public address is preferred.  Enabled (prefer temporary address): Enables privacy extensions and a temporary address is preferred.
Page 199 Chapter 11: System Settings Note: You can retrieve current IP addresses from the Connection Information dialog. See (on page 192). Network Icon Automatic, addresses only: IPv6 autoconfiguration automatically assigns an IPv6 address to the User Station, but no DNS servers or domain servers are specified. The following settings are configurable for this method.
Page 200: Ethernet Settings
Chapter 11: System Settings In the Addresses section, click Add and then type the User Station's IPv6 address, prefix and gateway in this section. At least one IPv6 address, prefix and gateway must be specified. The following settings are configurable for this method. See the above table for associated information.
Page 201: Default Shortcut Icons In The Main Toolbar
Chapter 11: System Settings MTU: Select Automatic, or click plus/minus to specify the maximum • number of bytes per packet. Wake on LAN: Default: Leave as default, or deselect to enable other options. • • • Unicast Multicast • Ignore •...
Page 202: Volume Icon
Chapter 11: System Settings Clicking the icon: The keyboard layout switches among available languages. By default, the following languages are available. - English (US) • - French • • - German Right-clicking the icon: A shortcut menu with these commands displays. Layouts : Changes the keyboard layout.
Page 203: Clock Icon
Chapter 11: System Settings An "active" network connection is highlighted in bold, with a Disconnect command following it. To disable any active connection, select Disconnect. The formatting of that connection's name turns from bold to  normal, indicating that it becomes inactive. To activate any disabled network connection shown in the list, click it.
Page 204 Chapter 11: System Settings Clicking the icon: A calendar with Locations section displays. Click Locations to: Determine the location and time zone of the User Station. • Change the time format of the clock shown in the Main Toolbar. • Location and Clock Time Format For details, see (on page 195).
Page 205: Location And Clock Time Format
Chapter 11: System Settings Location and Clock Time Format After expanding the Locations section, click Edit. The Clock Preferences dialog appears. Click the desired tab or button to configure settings.
Page 206 Chapter 11: System Settings Time Settings: Date/Time (on page 171). • Locations: • Click Add to specify your city or country. You can simply type the city or country name in the Location  Name field and then select the correct one from the list that appears.
Page 207 Chapter 11: System Settings  The Locations section: When you hover your mouse pointer over the weather icon below the location name, more information is displayed, including the weather, temperature, wind speed and the time for sunrise/sunset. Tip: If the system's time zone setting is different from the selected location's and you have the System Administration privilege, a "Set"...
Page 208: Chapter 12 Additional Features
Chapter 12 Additional Features In This Chapter Screen Unlocking ..................198 Factory Reset at Startup ................199 Take a Screenshot ..................200 Screen Unlocking When the User Station screen is locked, no data is displayed onscreen. Note: See Desktop Settings for details on screen locking. When you attempt to unlock the screen, a password prompt appears.
Page 209: Factory Reset At Startup
5. When the system prompts you to enter user credentials, type the admin credentials -- "admin" user and the current admin password. The default admin password is "raritan"  6. If the admin credentials are correct, the User Station performs the factory reset and then reboots.
Page 210: Take A Screenshot
Chapter 12: Additional Features Take a Screenshot To take a screenshot, you must be in a user group with the Take Screenshot privilege and a privilege such as Device Access that allows Privileges you to login. See (on page 115). A hotkey must be configured for the function.
Page 211: Appendix A Specification
Appendix A Specification Slim 1.3 litre metal chassis, black Chassis design 190 x 165 x 43 mm Dimension (LxWxH) 0 to 40 degrees Celsius Operating temperature non-condensing: 10~90% Humidity  75 x 75 mm VESA mount  100 x 100 mm ...
Page 212: Appendix B Authentication Of User Stations And Kvm Switches
(on page 118). For detailed information on what you can do with a KVM port/target server, see the user documentation for KX III KVM switches, which is accessible from the KVM switch's application or KX III section of Raritan Support page http://www.raritan.com/support/...
Page 213 Appendix B: Authentication of User Stations and KVM Switches User account for Tasks you can do on the User account for Tasks you can do on a KVM the User Station User Station the KVM switch port/target server admin You can do anything, user-A Limited privileges are including:...
Page 214: Appendix C Available Key Sets
Appendix C Available Key Sets Keyboard Macros The following table shows available key sets for (see Managing Keyboard Macros " " on page 100). Note that a few keys may belong to more than one ket set. Key set Keys contained Letters A to Z Numbers...
Page 215 Appendix C: Available Key Sets Key set Keys contained  - (Minus) Symbols  = (Equals)  [ (Left Bracket)  ] (Right Bracket)  \ (Back Slash)  ; (Semi-colon)  ' (Apostrophe)  ` (Grave)  , (Comma) ...
Page 216 Appendix C: Available Key Sets Key set Keys contained  Japan Kana Japanese Keys  Japan Convert  Japan No Convert  Japan Yen  Japan Circumflex  Japan @  Japan :  Japan Kanji  Japan Ro  Korea Hanja Korean Keys ...
Page 217: Appendix D Card Reader Restriction Caused By Kx Iii Kvm Switch Settings
Appendix D Card Reader Restriction Caused by KX III KVM Switch Settings In the following context, "the device" refers to a KX III KVM switch, not the User Station. When PC-Share mode is enabled on the device, multiple users can share access to a target server.
Page 218: Appendix E Certificate Requirements
Appendix E Certificate Requirements Dominion User Station requests and verifies server certificates for its TLS connections if the according options are set. In FIPS-mode certificate verfication is always enabled. The following protocols potentially verify the server's certificate: • RDMP: the KX status protocol, TLS via OpenSSL RFB: the KX KVM redirection protocol, TLS via JSSE and NSS (in •...
Page 219 Appendix E: Certificate Requirements Enter the KX3 (or CC-SG or LDAP server) with the same fully • qualified host name as in the CN or SAN of the certificate into KXUST. Using IP addresses, both IPv4 and IPv6, for the CN/SAN or when ...
Page 220 Appendix E: Certificate Requirements In FIPS mode, the check may also work with IP addresses and a • hostname SAN in the certificate Notes about self-signed certificates from KX: Before KX 3.5, self signed certificates had the CA flag set. In KX 3.5 or newer, the CA flag is not set.
Page 221 Appendix E: Certificate Requirements CA:FALSE X509v3 Key Usage: critical Digital Signature, Key Encipherment, Key Agreement X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication This can be reproduced with an OpenSSL command line like this, assuming kx3-by-root-ca.crt is the certificate file: openssl x509 -in kx3-by-root-ca.crt -noout -text...
Page 223: Index
Index Configuring the Maximum Search Results and Local Authentication Settings • 119, 128, 132, 133 About this Device • 167, 171 Connecting Audio Devices • 76 Absolute Mouse Mode • 65, 66, 68 Connection Properties • 59 Adding KVM Switches • ii, 28, 29, 31, 203 Create an Archive •...
Page 224 Index Executing Macros • 101, 102 Log Level for Diagnostic Log Files • 170 Exporting and Importing Backup Files • 162, Logging in with CC-SG Integration • 135, 137, Exporting Archive Files • 160, 161, 162 Logging in with LDAP • 133 Login Screen •...
Page 225 Index Port Scanner • 37, 53 Access KVM Switches and Ports (without Power Control • 91 CC-SG integration) • 16 Prerequisites for Using Virtual Media • 78 Step 5 Privileges • 114, 115, 201, 203 Use the KVM Client • 18 Product Features •...

Raritan Dominion KX III User Manual

Table of Contents

Chapter 1 Introduction

Chapter 2 Getting Started

Chapter 3 Managing KVM Switches and Ports

Chapter 4 Managing Targets and Access Methods

Chapter 5 Navigation and Access

In this Chapter Port Navigator

Chapter 6 Port Scanner

Chapter 7 Using the Kvm Client

Chapter 8 Setting User Preferences

Chapter 9 Administration Features

Chapter 10 Maintenance Features

Chapter 11 System Settings

Chapter 12 Additional Features

Appendix A Specification

Appendix B Authentication of User Stations and KVM Switches

Appendix C Available Key Sets

Appendix D Card Reader Restriction Caused by KX III KVM Switch Settings

Appendix E Certificate Requirements

Quick Links

Chapters

Related Manuals for Raritan Dominion KX III

Summary of Contents for Raritan Dominion KX III