Trusted Certificates; Cc-Sg Authentication Fallback - Raritan Dominion KX III User Manual

Trusted Certificates

CC-SG Authentication Fallback

CC-SG has a fall-back authentication mechanism. CC-SG maintains an
ordered list of authentication methods and if one authentication method
fails CC-SG tries authentication with the next mechanism in the list.
For the best results with CC-SG integration, make sure users have the
same access privileges in each authentication server that may be used.
You must install trusted certificates on the User Station in these
scenarios:
• A valid CA certificate is required to establish the LDAP connection.
Then you must:
a. Consult your LDAP server administrator to get the CA certificate
file.
b. Install this CA certificate onto the User Station.
When FIPS mode is enabled, all encrypted connections to KX III KVM
•
switches are processed using the FIPS accredited cryptographic
code and the authenticity of those KVM switches is checked via their
certificate chain. When Check KX Device Certificate is enabled,
authenticity of KVM switches is checked via their certificate chain.
You must install the trusted device- or root-certificate of each KX III
KVM switch on the User Station, or the connection to the KVM
switches fails.
When CC-SG integration in enabled, and FIPS mode or Check KX
•
Device Certificate is enabled as well, you must install the CC-SG
certificate. Also, if the CC-SG and the KX3s managed by the CC-SG
have certificates signed by different CAs, then the certificates from
both the CC-SG and the KX3 devices should be added to the KX User
Station , or the connection fails. A connection error message
Certificate Failure Messages
appears. See
CC-SG supports 512 bit key size certificates, but certificates using
RSA or DSA algorithm with key-sizes smaller than 1024 bit are not
accepted by Dominion User Station.
For more details about creating certificates that are accepted, see
Certificate Requirements
To install the CA or KX III certificate(s) on the User Station:
1. Plug a USB drive containing the appropriate certificate file into the
User Station.
Chapter 9: Administration Features
(on page 143). Note that
(on page 208).
141