HP 262586-B21 - IP Console Switch 3x1x16 KVM User Manual page 43

Parameter
Encryption level
To configure these settings:
Select Virtual Media.
1.
Enable or disable the checkboxes in the Session Control area.
2.
If you clear the Lock to KVM Session option, your Virtual Media sessions can remain after the
o
Video Session Viewer that launches the session closes.
If you select Allow Reserved Sessions, only the owner of the Virtual Media session can establish a
o
KVM session to a reserved Virtual Media session.
If you select Read-Only Access, write access to Virtual Media sessions is prevented.
o
Select zero or more levels of encryption to encode Virtual Media data sent to the console switch in
3.
the Encryption Level area. The highest level enabled will be used.
Click Apply to save any changes without exiting.
4.
-or-
Click OK to save any changes and exit.
-or-
Click Cancel to exit without saving any changes.
Configuring authentication parameters
The Authentication subcategory enables you to select the type of authentication method to be used.
IMPORTANT:
services integration setup tutorial (on page 277)" for a better understanding of how LDAP
works.
The three types of authentication are:
•
Local Authentication (with local access control)
Provides secure managed switch based authentication, data transfers, and user name and password
storage. With two levels of access control, Console Switch Administrator and User, you can set
target server-specific access rights and inter-operate with existing firewalls, VPNs, and NAT-based
networks. This is the default setting and has the same functionality as in the previous software
release.
•
LDAP Authentication Only (with local ACL)
Provides a secure managed directory-based authentication for passwords and user names and a
local switch-based authorization for ACLs. ACLs are maintained and stored in each individual
console switch. Passwords are only in the directory server. For more information on LDAP, see
"Using directory services integration (on page 201)."
•
LDAP Authentication and Access Control
Function
This control can be used to specify the encryption method to use for all Virtual Media
sessions. This information is used when new client connections are requested. At that
point, the console switch will attempt to negotiate for the highest enabled encryption
mechanism level. This setting is disabled by default.
Before implementing LDAP functionality, see "HP IP Console Switch directory
Managing KVM console switches 43