Raritan Dominion KX III Administrator's Manual

Raritan Dominion KX III Administrator's Manual

Hide thumbs Also See for Dominion KX III:
Table of Contents

Advertisement

Dominion KX III
Administrator Guide
Release 3.0.0
Copyright © 2014 Raritan, Inc.
DKX3A-v3.0.0-0B-E
February 2014
255-62-0002-00

Advertisement

Table of Contents
loading

Summary of Contents for Raritan Dominion KX III

  • Page 1 Dominion KX III Administrator Guide Release 3.0.0 Copyright © 2014 Raritan, Inc. DKX3A-v3.0.0-0B-E February 2014 255-62-0002-00...
  • Page 2 Raritan, Inc. © Copyright 2014 Raritan, Inc. All third-party software and hardware mentioned in this document are registered trademarks or trademarks of and are the property of their respective holders.
  • Page 3: Table Of Contents

    Contents Chapter 1 Introduction Overview ............................1 What's New in Help ........................1 Package Contents .......................... 2 KX III Device Photos and Features ....................2 Hardware ..........................2 Software ..........................3 Dominion KX3-832....................... 4 Dominion KX3-864....................... 6 Supported Users and Ports per Model ................7 KX III Remote and Local Console Interfaces .................
  • Page 4 Contents KX III Local Console Interface ..................... 26 Chapter 4 KX III Administrator Help Overview ............................27 KX III Installation and Configuration .................... 28 Rack Mounting ........................28 Default Login Information ....................29 Step 1: Configuring Network Firewall Settings ..............30 Step 2: Configuring KVM Target Servers ................
  • Page 5 Example Dual Port Video Group Configuration ............... 202 Dual Port Video Configuration Steps ................203 Raritan Client Navigation when Using Dual Video Port Groups ........206 Direct Port Access and Dual Port Video Groups ............. 207 Dual Port Video Groups Displayed on the Ports Page ............ 207 Updating the LDAP Schema ......................
  • Page 6 Contents Noise Filter ........................220 Connection Information ......................221 Access and Copy Connection Information ..............221 USB Profiles ..........................222 Keyboard ............................ 223 Send Ctrl+Alt+Del Macro ....................223 Send LeftAlt+Tab ......................223 Setting CIM Keyboard/Mouse Options ................223 Send Text to Target ......................223 Keyboard Macros......................
  • Page 7 Contents Unmount (Remove) a Smart Card Reader ..............253 Digital Audio ..........................254 Supported Audio Device Formats ..................254 Audio Playback and Capture Recommendations and Requirements ......255 Audio Level ........................255 Recommendations for Audio Connections when PC Share Mode is Enabled ....255 Bandwidth Requirements ....................
  • Page 8 Contents Local Console Smart Card Access .................... 273 Local Console USB Profile Options ................... 275 KX III Local Console Factory Reset ................... 276 Resetting the KX III Using the Reset Button on the Device............276 Appendix A Connecting a KX III and Cat5 Reach DVI - Provide Extended Local Port Functionality Overview ............................
  • Page 9 Contents Supported KX III Local Port DVI Resolutions ..............302 Supported Computer Interface Module (CIMs) Specifications ........302 Supported Digital Video CIMs for Mac ................304 Digital CIM Timing Modes ....................305 Digital CIM Established and Standard Modes ..............305 DVI Compatibility Mode ....................
  • Page 10 Contents Changing a USB Profile when Using a Smart Card Reader ........... 331 Video Mode and Resolution Notes .................... 331 Video Image Appears Dark when Using a Mac ............... 331 Black Stripe/Bar(s) Displayed on the Local Port ............. 331 Sun Composite Synch Video ................... 331 SUSE/VESA Video Modes ....................
  • Page 11 Contents Appendix F Frequently Asked Questions General FAQs ..........................339 Remote Access .......................... 341 Universal Virtual Media ......................344 Bandwidth and KVM-over-IP Performance ................346 IPv6 Networking ......................... 350 Servers ............................351 Blade Servers ..........................352 Installation ..........................354 Local Port - KX IIII ........................356 Extended Local Port ........................
  • Page 13: Chapter 1 Introduction

    KX III KVM Client Applications ..............7 KX III Online Help ..................8 Overview The Dominion KX III is an enterprise-class, secure, KVM-over-IP switch that provides 1, 2, 4 or 8 users with remote BIOS-level control of 8 to 64 servers.
  • Page 14: Package Contents

    Chapter 1: Introduction Package Contents Each KX III ships as a fully-configured stand-alone product in a standard 1U (2U for <kxx-864) 19" rackmount chassis. Each KX III device ships with the following contents: Amount Item included KX III device KX III Quick Setup Guide Rackmount kit AC power cords Set of 4 rubber feet (for desktop use)
  • Page 15: Software

    Chapter 1: Introduction  DCIM-PS2  DVI monitor support from the DVI local port  VGA support via a DVI to VGA converter  DVI support via a standard DVI cable  Support for tiering in which a base KX III device is used to access multiple other tiered devices ...
  • Page 16: Dominion Kx3-832

     IPv4 and IPv6 support  Power control associated directly with servers to prevent mistakes  Integration with Raritan's CommandCenter Secure Gateway (CC-SG) management unit  CC Unmanage feature to remove device from CC-SG control  Support of Raritan PX1 and PX2 appliances...
  • Page 17 Chapter 1: Introduction Diagram key Dual Power AC 100V/240V Local USB Ports DVI-D Port 32 KVM Ports UTP Cabling (Cat5/5e/6) Dual 10/100/1000 Ethernet Access Tier Port Note: Release KX III 3.0.0 does not provide modem support, but will in a future release.
  • Page 18: Dominion Kx3-864

    Chapter 1: Introduction Dominion KX3-864 KX3-864 Photos KX3-864 Features Diagram key Dual Power AC 100V/240V Local USB Ports DVI-D Port 64 KVM Ports UTP Cabling (Cat5/5e/6) Dual 10/100/1000 Ethernet Access Tier Port...
  • Page 19: Supported Users And Ports Per Model

    Chapter 1: Introduction Diagram key Note: Release KX III 3.0.0 does not provide modem support, but will in a future release. Supported Users and Ports per Model Model Ports Remote users KX3-864 KX3-832 KX3-808 KX3-464 KX3-432 KX3-416 KX3-232 KX3-216 KX3-132 KX3-116 KX3-108 KX III Remote and Local Console Interfaces...
  • Page 20: Kx Iii Online Help

    KX III. KVM Client help is provided as part of KX III online help. Online help is accompanied by the KX III Quick Setup Guide, which can be found on the Raritan Firmware, Upgrades and Documentation page of Raritan's website (http://www.raritan.com/support/firmware-and-documentation).
  • Page 21: Chapter 2 Getting Started

    ® 1.7 prompts you to validate KX III, and to allow access to the application. Raritan recommends installing an SSL certificate in each KX III device in order to reduce Java warnings, and enhance security. See Certificates (on page 165)
  • Page 22: Additional Security Warnings

    Chapter 2: Getting Started Additional Security Warnings Even after an SSL certificate is installed in the KX III, depending on your browser and security settings, additional security warnings may be displayed when you log in to KX III. It is necessary to accept these warnings to launch the KX III Remote Console.
  • Page 23: Example 1: Import The Certificate Into The Browser

    Chapter 2: Getting Started Example 1: Import the Certificate into the Browser In this example, you import the Certificate into the browser. Steps Open an IE browser, then log in to KX III. ™ Click More Information on the first Java security warning.
  • Page 24 Chapter 2: Getting Started Steps Click the Content tab. Click Certificates. The Certificate Import Wizard opens and walks you through each step.  File to Import - Browse to locate the Certificate  Certificate Store - Select the location to store the Certificate Click Finish on the last step of the Wizard.
  • Page 25: Example 2: Add The Kx Iii To Trusted Sites And Import The Certificate

    Chapter 2: Getting Started Example 2: Add the KX III to Trusted Sites and Import the Certificate In this example, the KX III's URL is added as a Trusted Site, and the Self Signed Certificate is added as part of the process. Steps Open an IE browser, then select Tools >...
  • Page 26: Logging In To The Kx Iii

    Chapter 2: Getting Started Steps Open an IE browser, then log in to KX III. ™ Click More Information on the first Java security warning. Click View Certificate Details on the More Information dialog. You are prompted to install the certificate. Follow the wizard steps. For details see, Example 1: Import the Certificate into the Browser (on page 11)
  • Page 27 Chapter 2: Getting Started  http://IP-ADDRESS/akc for the Microsoft .NET-based Active KVM Client IP-ADDRESS is the IP address assigned to your KX III You can also use HTTPS, or the DNS name of the KX III assigned by your administrator (if applicable). You are always redirected to the IP address from HTTP to HTTPS.
  • Page 28: Chapter 3 Kx Iii Interface And Navigation

    Chapter 3 KX III Interface and Navigation In This Chapter Overview ....................16 KX III Remote Console Interface ............. 16 KX III Local Console Interface ..............26 Overview The KX III Remote Console and the KX III Local Console interfaces provide a web-based interface for device configuration and administration, as well as target server list and selection.
  • Page 29: Port Access Page (Remote Console Display)

    Chapter 3: KX III Interface and Navigation Port Access Page (Remote Console Display) After a successful login, the Port Access page opens listing all ports along with their status and availability. Ports connected to KVM target servers (blades and standard servers) are displayed in blue.
  • Page 30 Chapter 3: KX III Interface and Navigation Blade Chassis - Port Access Page The blade chassis is displayed in an expandable, hierarchical list on the Port Access page, with the blade chassis at the root of the hierarchy and the individual blades labeled and displayed below the root. Use the Expand Arrow icon next to the root chassis to display the individual blades.
  • Page 31 Chapter 3: KX III Interface and Navigation View by Group Tab The View by Group tab displays blade chassis, 'standard' port groups, and dual video port groups. Click the Expand Arrow icon next to a group to view the ports assigned to the port group. See Device Management for information on creating each of these types of port groups.
  • Page 32: Port Action Menu

    Chapter 3: KX III Interface and Navigation Port Action Menu When you click a Port Name in the Port Access list, the Port Action menu appears. Choose the desired menu option for that port to execute it. Note that only currently available options, depending on the port's status and availability, are listed in the Port Action menu.
  • Page 33 Chapter 3: KX III Interface and Navigation Switch From  Switch From - Switches from an existing connection to the selected port (KVM target server). This menu item is available only for KVM targets, and only when a Virtual KVM Client is opened. Note: This menu item is not available on the KX III Local Console.
  • Page 34 Chapter 3: KX III Interface and Navigation Note: This menu item is not available on the KX III Local Console. The only way to disconnect from the switched target in the Local Console is to use the hot key. Power On ...
  • Page 35: Left Panel

    Chapter 3: KX III Interface and Navigation Left Panel The left panel of the KX III interface contains the following information. Note that some information is conditional - meaning it is displayed based on your role, features being used and so on. Conditional information is noted here.
  • Page 36 Chapter 3: KX III Interface and Navigation Information Description When displayed? PowerIn1 Status of the power 1 Always outlet connection. Either on or off, or Auto-detect PowerIn2 Status of the power 2 Always outlet connection. Either on or off, or Auto-detect Configured As If you are using a tiering When the KX III is...
  • Page 37: Kx Iii Console Navigation

    Chapter 3: KX III Interface and Navigation Collapse the Left Panel The left panel can be collapsed in order to increase the display area of the page. To collapse the left panel:  Click on the blue, left-facing arrow located approximately halfway down the left side of the panel.
  • Page 38: Kx Iii Local Console Interface

    Chapter 3: KX III Interface and Navigation KX III Local Console Interface There are many similarities among the KX III Local Console and the KX III Remote Console graphical user interfaces. Where there are differences, they are noted in the help. For details on using the Local Console see KX III Local Console - KX III End User Help...
  • Page 39: Chapter 4 Kx Iii Administrator Help

    Chapter 4 KX III Administrator Help In This Chapter Overview ....................27 KX III Installation and Configuration ............28 Rack PDU (Power Strip) Outlet Control ..........45 USB Profiles .................... 47 User Management ................... 54 Device Management ................79 Security Management ................153 Maintenance ..................
  • Page 40: Kx Iii Installation And Configuration

    KX III Installation and Configuration See the KX III Quick Setup Guide that came with your device or download it from Raritan's Support website for a quick reference to the basic, bear minimum setup steps. Additional information and optional steps included here but not in the QSG include: ...
  • Page 41: Default Login Information

    Chapter 4: KX III Administrator Help 5. When connecting cables to the rear panel of the KX III drape them over the cable-support bar. Rear Mount The steps correspond to the numbers shown in the rear rackmount diagrams. 1. Secure the cable-support bar to the front end of the side brackets, near the side brackets' “ears,”...
  • Page 42: Step 1: Configuring Network Firewall Settings

    Chapter 4: KX III Administrator Help Default Value Password raritan The first time you start the KX III, you are required to change the default password. IP address 192.168.0.192. Important: For backup and business continuity purposes, it is strongly recommended that you create a backup administrator user name and password and keep that information in a secure location.
  • Page 43 Chapter 4: KX III Administrator Help Mouse Settings Raritan recommends using Absolute Mouse Synchronization to minimize mouse settings on target servers. For other mouse modes, see Additional Supported Mouse Settings (on page 31). In this mode, absolute coordinates are used to keep the client and target cursors in synch, even when the target mouse is set to a different acceleration or speed.
  • Page 44 Chapter 4: KX III Administrator Help Windows 7 and Windows Vista Mouse Settings ® Configure these mouse settings in Windows 7 and Windows ® Vista Configure the motion settings:  Set the mouse motion speed setting to exactly the middle speed ...
  • Page 45 If you do not set this profile, the mouse does synch in OS X. To do this, do one of the following: 1. Connect to the Mac target from the Raritan KVM Client. 2. Select USB Profile > Other Profiles > Mac OS-X (10.4.9 and later).
  • Page 46: Step 3: Connecting The Equipment

    Chapter 4: KX III Administrator Help IBM AIX Mouse Settings Configure these IBM AIX ® mouse settings:  Go to the Style Manager, click on Mouse Settings and set Mouse Acceleration to 1.0 and Threshold to 3.0 Step 3: Connecting the Equipment A.
  • Page 47 A standard DVI cable is used to connect to a local DVI monitor or keyboard tray (not included with the KX III). Connect to the DVI port on Raritan's T1700-LED keyboard tray. Use a required DVI-D to VGA converter to connect to VGA monitors.
  • Page 48: Step 4: Configuring The Kx Iii

    VGA monitor and secure it by tightening the screws. Note: The DVI-D to VGA converter is not included with the KX III. Contact Raritan Sales for information. E. Connect Target Servers to the KX III To connect a target server to the KX III: 1.
  • Page 49 1. Once the unit has booted, enter the default username admin and password raritan. Click Login. 2. Enter the old password raritan, then enter and reenter a new password. Passwords can be up to 64 characters in length consisting of English, alphanumeric and special characters.
  • Page 50 Chapter 4: KX III Administrator Help Select this option if you want to ensure redundant failover capabilities should the primary Ethernet port (or the switch/router to which it is connected) fail. If it fails, KX III fails over to the secondary network port with the same IP address, ensuring there is not interruption.
  • Page 51 Chapter 4: KX III Administrator Help  Router Discovery - use this option to automatically assign IPv6 addresses that have Global or Unique Local significance beyond that of the Link Local, which only applies to a directly connected subnet. 2. Next, configure DNS settings. Configure the DNS Settings 1.
  • Page 52 Chapter 4: KX III Administrator Help Specify Power Supply Autodetection The KX III provides dual power supplies. When both power supplies are used, the KX III automatically detects them and notifies you of their status. Additionally, both the Powerln1 and Powerln2 Auto Detect checkboxes are automatically selected on the Power Supply Setup page.
  • Page 53 For additional information about CC-SG authentication, see the CommandCenter Secure Gateway User Guide, Administrator Guide, or Deployment Guide, which can be downloaded from the Support section of the Raritan website http://www.raritan.com. Supported Protocols To simplify management of usernames and passwords, the KX III provides the ability to forward authentication requests to an external authentication server.
  • Page 54: Step 5: Launching The Kx Iii Remote Console

    Chapter 4: KX III Administrator Help Step 5: Launching the KX III Remote Console Log in to your KX III Remote Console from any workstation with network ® ® connectivity that has Microsoft .NET and/or Java Runtime Environment installed. To launch the KX III Remote Console: 1.
  • Page 55: Step 6: Configuring The Keyboard Language (Optional)

    Chapter 4: KX III Administrator Help Switch between Target Servers To switch between KVM target servers: 1. While already using a target server, access the KX III Port Access page. 2. Click the port name of the target you want to access. The Port Action menu appears.
  • Page 56: Step 7: Create And Install An Ssl Certificate

    (power cycle). 5. Verify that the characters are correct. Step 7: Create and Install an SSL Certificate Raritan strongly recommends you install your own SSL Certificate in each KX III device. ® This security best practice reduces the number of Java warning messages, and avoids man-in-the-middle attacks.
  • Page 57: Rack Pdu (Power Strip) Outlet Control

    Rack PDU (Power Strip) Outlet Control Overview The KX III allows you to control Raritan PX and RPC series rack PDU (power strip) outlets connected to the KX III through a D2CIM-PWR. Once a PX or RPC series is setup and then attached to the KX III, the rack PDU and its outlets can be controlled from the Powerstrip page in the KX III interface.
  • Page 58: Turning Outlets On/Off And Cycling Power

    Chapter 4: KX III Administrator Help Initially, when you open the Powerstrip page, the power strips that are currently connected to the KX III are displayed in the Powerstrip drop-down. Additionally, information relating to the currently selected power strip is displayed. If no power strips are connected to the KX III, a message stating "No powerstrips found"...
  • Page 59: Usb Profiles

    To change settings in the BIOS menu or boot from a virtual media drive, depending on the target server model, a BIOS profile may be more appropriate. Should none of the standard USB profiles provided by Raritan work with a given KVM target, please contact Raritan Technical Support for assistance.
  • Page 60: Cim Compatibility

    The current release of the KX III comes with the selection of USB profiles described in the following table. New profiles are included with each firmware upgrade provided by Raritan. As new profiles are added, they will be documented in the help.
  • Page 61 Chapter 4: KX III Administrator Help USB profile Description BIOS Dell Optiplex 790 Use this profile for Dell Optiplex 790 when using Keyboard Keyboard Only Macros during BIOS operations. Only keyboard is enabled with this profile. Restrictions:  Mouse is disabled. ...
  • Page 62 Chapter 4: KX III Administrator Help USB profile Description BIOS Generic BIOS Generic Use this profile when Generic OS profile does not work on the BIOS. WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected. Restrictions:  USB bus speed limited to full-speed (12 MBit/s) ...
  • Page 63 Chapter 4: KX III Administrator Help USB profile Description BIOS Lenovo ThinkPad T61 BIOS Lenovo ThinkPad T61 and X61 (boot from virtual media) & X61 Use this profile to boot the T61 and X61 series laptops from virtual media. Restrictions: ...
  • Page 64 Chapter 4: KX III Administrator Help USB profile Description ® MAC OS X 10.4.9 (and later) Mac OS X version 10.4.9 (and later) This profile compensates the scaling of mouse coordinates introduced in recent versions of Mac OS X. Select this if the remote and local mouse positions get out of sync near the desktop borders.
  • Page 65 Chapter 4: KX III Administrator Help USB profile Description  Mass Storage  USB bus speed limited to full-speed (12 MBit/s)  Virtual CD-ROM and disk drives cannot be used simultaneously WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected. Troubleshooting 3 Troubleshooting Profile 3 ...
  • Page 66: Selecting Profiles For A Kvm Port

    Chapter 4: KX III Administrator Help 2. Select Single Mouse mode. The mouse now responds. Note: Mouse speed may be slow while in Single Mouse mode. 3. Once you are out of the Boot menu and back to the OS X, exit Single Mouse mode and switch back to Absolute Mouse mode.
  • Page 67 Chapter 4: KX III Administrator Help User Description Unknown This is the default group for users who are authenticated externally using LDAP/LDAPS or RADIUS or who are unknown to the system. If the external LDAP/LDAPS or RADIUS server does not identify a valid user group, the Unknown group is used.
  • Page 68 Chapter 4: KX III Administrator Help Relationship Between Users and Groups Users belong to a group and groups have privileges. Organizing the various users of your KX III into groups saves time by allowing you to manage permissions for all users in a group at once, instead of managing permissions on a user-by-user basis.
  • Page 69 Chapter 4: KX III Administrator Help 6. Click OK. Setting Permissions Permission Description Device Access Allows users and user groups with this While Under permission to directly access the KX III using CC-SG an IP address when Local Access is enabled Management for the device in CC-SG.
  • Page 70 Chapter 4: KX III Administrator Help Permission Description associations), event management (SNMP, Syslog), virtual media file server setups. Diagnostics Network interface status, network statistics, ping host, trace route to host, KX III diagnostics. Maintenance Backup and restore database, firmware upgrade, factory reset, reboot. PC-Share Simultaneous access to the same target by multiple users.
  • Page 71 Chapter 4: KX III Administrator Help Port access Description option will also be granted. In order for all users in a user group to see KVM switches that are added, each user must be granted Control access. If they don't have this permission and a KVM switch is added at a later time, they will not be able to see the switches.
  • Page 72 Chapter 4: KX III Administrator Help 4. Click OK. Group-Based IP ACL (Access Control List) Important: Exercise caution when using group-based IP access control. It is possible to be locked out of your KX III if your IP address is within a range that has been denied access.
  • Page 73 Chapter 4: KX III Administrator Help 2. Enter the Starting IP and Ending IP fields. 3. Choose the action from the Action drop-down list. 4. Click Insert. If the rule number you just typed equals an existing rule number, the new rule is placed ahead of the exiting rule and all rules are moved down in the list.
  • Page 74: Users

    Chapter 4: KX III Administrator Help 3. Set the Port Permissions. Specify the server ports that can be accessed by users belonging to this group (and the type of access). Setting Port Permissions (on page 58). 4. Set the IP ACL (optional). This feature limits access to the KX III device by specifying IP addresses.
  • Page 75 Chapter 4: KX III Administrator Help Adding a New User It is a good idea to define user groups before creating KX III users because, when you add a user, you must assign that user to an existing user group. See Adding a New User Group. From the User page, you can add new users, modify user information, and reactivate users that have been deactivated.
  • Page 76 Chapter 4: KX III Administrator Help View the KX III Users List The User List page displays a list of all users including their user name, full name, and user group. The list can be sorted on any of the columns by clicking on the column name.
  • Page 77 Chapter 4: KX III Administrator Help  Username - username for user logins and target connections  Access From - IP address of client PC accessing the KX III  Status - current Active or Inactive status of the connection To view users by port: ...
  • Page 78: Authentication Settings

    Chapter 4: KX III Administrator Help Modifying an Existing User To modify an existing user: 1. Open the User List page by choosing User Management > User List. 2. Locate the user from among those listed on the User List page. 3.
  • Page 79 Chapter 4: KX III Administrator Help 4. If you choose LDAP/LDAPS, read the section entitled Implementing LDAP Remote Authentication for information about completing the fields in the LDAP section of the Authentication Settings page. 5. If you choose RADIUS, read the section entitled Implementing RADIUS Remote Authentication for information about completing the fields in the RADIUS section of the Authentication Settings page.
  • Page 80 LDAP database you want to begin searching for user information. Up to 64 characters can be used. An example base search value might be: cn=Users,dc=raritan,dc=com. Consult your authentication server administrator for the appropriate values to enter into these fields.
  • Page 81 Chapter 4: KX III Administrator Help 11. If you entered a Distinguished Name for the Administrative User, you must enter the password that will be used to authenticate the Administrative User's DN against the remote authentication server. Enter the password in the Secret Phrase field and again in the Confirm Secret Phrase field (up to 128 characters).
  • Page 82 Chapter 4: KX III Administrator Help 15. Select the Enable LDAPS Server Certificate Validation checkbox to use the previously uploaded root CA certificate file to validate the certificate provided by the server. If you do not want to use the previously uploaded root CA certificate file, leave this checkbox deselected.
  • Page 83 KX III policies and user group privileges that are applied locally to AD user groups. IMPORTANT: If you are an existing Raritan, Inc. customer, and have already configured the Active Directory server by changing the AD schema, the KX III still supports this configuration and you do not need to perform the following operations.
  • Page 84 Chapter 4: KX III Administrator Help Important Notes  Group Name is case sensitive.  The KX III provides the following default groups that cannot be changed or deleted: Admin and <Unknown>. Verify that your Active Directory server does not use the same group names. ...
  • Page 85 Chapter 4: KX III Administrator Help 9. The default number of retries is 3 Retries. This is the number of times the KX III will send an authentication request to the RADIUS server. 10. Choose the Global Authentication Type from among the options in the drop-down list: ...
  • Page 86  RADIUS Attribute: Filter-ID  Attribute Type: String  Attribute Value: Raritan:G{KVM_Admin} (where KVM_Admin is group name created locally on Dominion KVM Switch). Case sensitive.  Configure Session Conditions (Date and Time) (Required) - Policy Elements > Session Conditions > Date and Time ...
  • Page 87 Your remote RADIUS server can provide these user group names by returning an attribute, implemented as a RADIUS FILTER-ID. The FILTER-ID should be formatted as follows: Raritan:G{GROUP_NAME} where GROUP_NAME is a string denoting the name of the group to which the user belongs.
  • Page 88 Chapter 4: KX III Administrator Help Attribute Data Log out Accounting-Request(4) Acct-Status (40) Stop(2) - Stops the accounting NAS-Port-Type (61) VIRTUAL (5) for network connections. NAS-Port (5) Always 0. NAS-IP-Address (4) The IP address for the KX III. User-Name (1) The user name entered at the login screen.
  • Page 89 Chapter 4: KX III Administrator Help User Authentication Process Remote authentication follows the process specified in the flowchart below:...
  • Page 90: Changing A Password

    Chapter 4: KX III Administrator Help Changing a Password To change your KX III password: 1. Choose User Management > Change Password. The Change Password page opens. 2. Type your current password in the Old Password field. 3. Type a new password in the New Password field. Retype the new password in the Confirm New Password field.
  • Page 91: Device Management

    Chapter 4: KX III Administrator Help Device Management Network Settings Use the Network Settings page to customize the network configuration (for example, the IP address, discovery port, and LAN interface parameters) for your KX III. There are two options available to set up your IP configuration: ...
  • Page 92 Chapter 4: KX III Administrator Help a. Enter the IP Address if needed. The default IP address is 192.168.0.192. b. Enter the Subnet Mask. The default subnet mask is 255.255.255.0. c. Enter the Default Gateway if None is selected from the IP Auto Configuration drop-down.
  • Page 93 Chapter 4: KX III Administrator Help If None is selected for the IP auto configuration, the following Network Basic Settings fields are enabled: Global/Unique IP Address, Prefix Length, and Gateway IP Address allowing you to manually set the IP configuration. ...
  • Page 94 Chapter 4: KX III Administrator Help LAN Interface Settings (on page 82) for information in configuring this section of the Network Settings page. Note: In some environments, the default LAN Interface Speed & Duplex setting Autodetect (autonegotiator) does not properly set the network parameters, which results in network issues.
  • Page 95 Note: Because a failover port is not activated until after a failover has actually occurred, Raritan recommends that you not monitor the port or monitor it only after a failover occurs. When this option is enabled, the following two fields are used: ...
  • Page 96: Configuring Ports

    Chapter 4: KX III Administrator Help Configuring Ports Access the Port Configuration Page To access a port configuration: 1. Choose Device Settings > Port Configuration. The Port Configuration Page opens. This page is initially displayed in port number order, but can be sorted on any of the fields by clicking on the column heading.
  • Page 97 Chapter 4: KX III Administrator Help Port Name Ports with no CIM connected or with a blank CIM name, a default port name of is assigned, where Port# is the number of the KX III physical port. Ports that are currently not connected to the KX III via a CIM have a status of Not Available.
  • Page 98 Chapter 4: KX III Administrator Help Configuring Standard Target Servers To name the target servers: 1. Connect all of the target servers if you have not already done so. See Step 3: Connect the Equipment for a description of connecting the equipment.
  • Page 99 Chapter 4: KX III Administrator Help Configuring KVM Switches The KX III also supports use of hot key sequences to switch between targets. In addition to using hot key sequences with standard servers, KVM switching is supported by blade chassis and in tiered configurations.
  • Page 100 URL. For example username=admin, where username is the username field. Password Field - Enter the password parameter that will be used in the URL. For example password=raritan, where password is the password field. 10. Click OK. To change the active status of a KVM switch port or URL: 1.
  • Page 101 The KX III allows you to connect rack PDUs (power strips) to KX III ports. KX III rack PDU configuration is done from the KX III Port Configuration page. Note: Raritan recommends no more than eight (8) rack PDUs (power strips) be connected to a KX III at once since performance may be affected.
  • Page 102 Note: PX rack PDUs (power strips) can be named in the PX as well as in the KX III. Once a Raritan remote rack PDU is connected to the KX III, it will appear on the Port Configuration page. Click on the power port name on that page to access it.
  • Page 103 Chapter 4: KX III Administrator Help 3. Click OK.
  • Page 104 Port Access page. To use this feature, you will need:  Raritan remote rack PDU(s)  Power CIMs (D2CIM-PWR) Make a Power Association...
  • Page 105 Chapter 4: KX III Administrator Help 4. Click OK. That rack PDU/outlet association is removed and a confirmation message is displayed. To remove a rack PDU association if the rack PDU has been removed from the target: 1. Click Device Settings > Port Configuration and then click on the active target.
  • Page 106 Chapter 4: KX III Administrator Help Generic  A Generic option allows you to configure a blade chassis that is not a ® ® Dell PowerEdge 1855, 1955 and M1000e, IBM BladeCenter Models E and H, HP BladeSystem c3000 and c7000, or Cisco UCS blade server.
  • Page 107 Chapter 4: KX III Administrator Help Link to a Blade Chassis Interface You are able to configure the connection to a blade chassis web browser interface if one is available. At the chassis level, up to four links can be defined.
  • Page 108 Chapter 4: KX III Administrator Help 3. On the Port Configuration page, click on the name of the blade chassis you want to configure. The Port page will open. 4. Select the Blade Chassis radio button. The page will then display the necessary fields to configure a blade chassis.
  • Page 109 Chapter 4: KX III Administrator Help c. Username - Enter the username used to access the interface. Optional d. Password - Enter the password used to access the interface. Optional Note: Leave the username and password fields blank for DRAC, ILO, and RSA web applications or the connection will fail.
  • Page 110 Chapter 4: KX III Administrator Help 3. On the Port Configuration page, click on the name of the blade chassis you want to configure. The Port page will open. 4. Select the Blade Chassis radio button. The page will then display the necessary fields to configure a blade chassis.
  • Page 111 Chapter 4: KX III Administrator Help If operating in Auto-discovery mode, the Installed box will display the slots containing blades during discovery. 5. In the Blade Chassis Managed Links section of the page, you are able to configure the connection to a blade chassis web browser interface if one is available.
  • Page 112 Chapter 4: KX III Administrator Help Select the CIMs native, display resolution from the Display Native Resolution drop-down. This is the preferred resolution and timing mode of the digital CIM. Once a resolution is selected, it is applied to the CIM. 1.
  • Page 113 Chapter 4: KX III Administrator Help a. Active - To activate the link once it is configured, select the Active checkbox. Leave the checkbox deselected to keep the link inactive. Entering information into the link fields and saving can still be done even if Active is not selected. Once Active is selected, the URL field is required.
  • Page 114 Chapter 4: KX III Administrator Help ® 5. Select the IBM blade chassis model from the Blade Server Chassis Model drop-down. To configure a IBM BladeCenter H and E: ® 1. If you selected IBM BladeCenter H or E, auto-discovery is available. Configure the blade chassis as applicable.
  • Page 115 Chapter 4: KX III Administrator Help The first URL link is intended for use to connect to the blade chassis Administration Module GUI. Note: Access to the URL links entered in this section of the page is governed by the blade chassis port permissions. a.
  • Page 116 Chapter 4: KX III Administrator Help c. Maximum Number of Slots - Enter the default maximum number of slots available on the blade chassis. d. Port Number - The default port number for the blade chassis is 22. Not applicable. e.
  • Page 117 Chapter 4: KX III Administrator Help e. The Username Field and Password Field, which are both optional, contain the labels that are expected to be associated with the username and password entries. It is in these fields you should enter the field names for the username and password fields used on the login screen for the web application.
  • Page 118 Chapter 4: KX III Administrator Help 4. If username and password were entered, in the Username Field and Password Field, type the field names for the username and password fields that are used in the login screen for the web application.
  • Page 119 Chapter 4: KX III Administrator Help HP and Cisco UCS Blade Chassis Configuration (Port Group Management) The KX III supports the aggregation of ports connected to certain types of blades into a group representing the blade chassis. Specifically, ™ ® ®...
  • Page 120 Chapter 4: KX III Administrator Help 4. Select the Blade Server Group checkbox. If you want to designate that these ports are attached to blades housed in a blade chassis (for example, HP c3000 or Dell PowerEdge 1855), select the Blade Server Group checkbox. Note: This is especially important to CC-SG users who want HP blades to be organized on a chassis basis, although each blade has its own connection to a port on the KX III.
  • Page 121 Chapter 4: KX III Administrator Help Supported Blade Chassis Models This table contains the blade chassis models that are supported by the KX III and the corresponding profiles that should be selected per chassis model when configuring them in the KX III application. A list of these models can be selected on the Port Configuration page from the Blade Server Chassis Model drop-down, which appears when the Blade Chassis radio button is selected.
  • Page 122 Chapter 4: KX III Administrator Help Blade chassis Connection method Recommended CIM(s)  DCIM-PS2 Generic If a D2CIM-VUSB or D2CIM-DVUSB is used when connecting to a blade-chassis configured  DCIM-USBG2 as Generic, you will be able to select the USB profiles from the Port Configuration page and the client's USB Profile menu.
  • Page 123 Chapter 4: KX III Administrator Help Blade chassis Connection method Recommended CIM(s)  VGA monitors with DDC support. Source: Dell Chassis Management Controller, Firmware Version 1.0, User Guide  ® BladeSystem The HP c-Class Blade SUV Cable enables you DCIM-USBG2 c3000 to perform blade chassis administration, ...
  • Page 124 Note: Audio is disabled for all KVM switch targets. Required and Recommended Blade Chassis Configurations This table contains information on limitations and constraints that apply to configuring blade chassis to work with the KX III. Raritan recommends that all of the information below is followed. Blade chassis Required/recommended action ...
  • Page 125  Exit the iKVM GUI menu before attaching Dell's chassis to a Raritan CIM. iKVM may not work correctly if this is not done.  Configure the iKVM GUI Main menu to select target blades by Slot, not by Name. iKVM may not work correctly if this is not done.
  • Page 126  The SSH port configured on the blade chassis management module and the port number entered on the Port Configuration page must match.  Raritan KX III virtual media is supported only on IBM IBM KX3 Virtual ® BladeCenter Models H and E.
  • Page 127 Chapter 4: KX III Administrator Help Blade chassis Sample URL format  Password: calvin  Password Field: TEXT_PASSWORD  ® http://192.168.84.217/private/welcome.ssi ® BladeCenter or H Configuring USB Profiles (Port Page) You choose the available USB profiles for a port in the Select USB Profiles for Port section of the Port page.
  • Page 128 Chapter 4: KX III Administrator Help  Ctrl-Click to select several discontinuous profiles. 2. Click Add. The selected profiles appear in the Selected list. These are the profiles that can be used for the KVM target server connected to the port. To specify a preferred USB profile: 1.
  • Page 129 Chapter 4: KX III Administrator Help Configuring KX III Local Port Settings Note: Some changes you make to the settings on the Local Port Settings page restart the browser you are working in. If a browser restart occurs when a setting is changed, it is noted in the steps provided here. To configure the local port settings: ...
  • Page 130 Chapter 4: KX III Administrator Help Configure the Local Port Scan Mode Settings 1. If needed, configure the Local Port Scan Mode settings. These settings apply to Scan Settings feature, which is accessed from the Port page. See Scanning Ports. ...
  • Page 131 Local language input is not supported at this time for KX III Local Console functions. Note: If using a Turkish keyboard, you must connect to a target server through the Active KVM Client (AKC). It is not supported by other Raritan clients. Select the Local Port Hotkey 1.
  • Page 132 Chapter 4: KX III Administrator Help Select the Local Port Connect Key 1. Select the Local Port Connect key. Use a connect key sequence to connect to a target and switch to another target. You can then use the hot key to disconnect from the target and return to the local port GUI.
  • Page 133 Chapter 4: KX III Administrator Help b. Set the amount of time (in minutes) in which Power Save Mode will be initiated. Select the Local User Authentication 1. Choose the type of local user authentication.  Local/LDAP/RADIUS. This is the recommended option. For more information about authentication, see Remote Authentication.
  • Page 134: Device Services

    Chapter 4: KX III Administrator Help Device Services Enabling SSH Enable SSH access to allow administrators to access the KX III via the SSH v2 application. To enable SSH access: 1. Choose Device Settings > Device Services. The Device Service Settings page opens.
  • Page 135 Chapter 4: KX III Administrator Help Configuring and Enabling Tiering The tiering feature allows you to access KX III targets and PDUs through one base KX III device. Devices can be added and removed from a tiering configuration as needed up to a maximum of two tiered levels. When setting up the devices, you will use specific CIMS for specific configurations.
  • Page 136 Chapter 4: KX III Administrator Help Permitted KX III Tiering Configurations Before tiering devices, review Before Creating a Tiering Configuration (on page 123). Following are the permitted tiering configurations for KX III:  KX III base device > KX III tiered devices ...
  • Page 137 Chapter 4: KX III Administrator Help Tiered KX III Connection Example The following diagram illustrates the cabling configurations between a KX III tiered device and a KX III base device. Steps KX III Base device KX III Tiered device CIM to connect the target server to KX III the Tiered device. Target server Base device Tier port to Tiered device Tier port connection: ...
  • Page 138 Chapter 4: KX III Administrator Help Enabling Tiering To enable tiering: 1. From the tier base device, select Device Settings > Device Services to open the Device Service Settings page. 2. Select Enable Tiering as Base. 3. In the Base Secret field, enter the secret shared between the base and the tiered devices.
  • Page 139 Chapter 4: KX III Administrator Help Power Control from Tiered Devices You can power on and off targets that are a part of the tiered configuration. These targets are accessed from the Port Access page. If targets and outlets are associated, power control is available from the Port Access page.
  • Page 140 Chapter 4: KX III Administrator Help Username and password are optional. If username and password are not provided, a login dialog will be displayed and, after being authenticated, the user will be directly connected to the target. The port may be a port number or port name. If you are using a port name, the name must be unique or an error is reported.
  • Page 141 Chapter 4: KX III Administrator Help Username and password are optional. If username and password are not provided, a login dialog will be displayed and, after being authenticated, the user will be directly connected to the target. The port may be a port number or port name. If you are using a port name, the name must be unique or an error is reported.
  • Page 142 Chapter 4: KX III Administrator Help Enabling the AKC Download Server Certificate Validation If you are using the AKC client, you can choose to use the Enable AKC Download Server Certificate Validation feature or opt not to use this feature. Note: When operating in IPv4 and IPv6 dual stack mode with 'Enable ®...
  • Page 143 Chapter 4: KX III Administrator Help ® 2. Launch Internet Explorer using the KX III IP address as the URL. A Certificate Error message will be displayed. 3. Select View Certificates. 4. On the General tab, click Install Certificate. The certificate is then installed in the Trusted Root Certification Authorities store.
  • Page 144 Chapter 4: KX III Administrator Help 3. Select either or both Enable SNMP v1/v2c and Enable SNMP v3. At least one option must be selected. Required 4. Complete the following fields for SNMP v1/v2c (if needed): a. Community - the device's community string b.
  • Page 145 Chapter 4: KX III Administrator Help Configure SNMP traps on the Event Management - Settings page, which can be quickly accessed by clicking the SNMP Trap Configuration link. Configuring SNMP Traps (on page 135)for information on creating SNMP traps and List of KX III SNMP Traps for a list of available KX III SNMP traps.
  • Page 146 Chapter 4: KX III Administrator Help Configuring Date/Time Settings Use the Date/Time Settings page to specify the date and time for the KX III. There are two ways to do this:  Manually set the date and time.  Synchronize the date and time with a Network Time Protocol (NTP) server.
  • Page 147 Chapter 4: KX III Administrator Help Configuring SNMP Traps Simple Network Management Protocol (SNMP) is a protocol governing network management and the monitoring of network devices and their functions. SNMP traps are sent out over a network to gather information. The traps are configured on the Event Management - Settings page.
  • Page 148 Chapter 4: KX III Administrator Help Note: IPv6 addresses cannot exceed 80 characters in length for the host name. b. Port Number - the port number used by the SNMP manager c. Security Name - the username or service account name of the entity communicating with the SNMP agent (up to 32 characters) d.
  • Page 149 Chapter 4: KX III Administrator Help Note: If you disable SNMP settings at any time, the SNMP information is retained so you do not have to reenter if you re-enable the settings. To delete SNMP traps:  Clear all of the SNMP trap fields and save. Use the reset to factory defaults feature to remove the SNMP configuration and set the KX III to its original factory default.
  • Page 150 Chapter 4: KX III Administrator Help Trap Name Description cimConnected The CIM is connected. cimDisconnected The CIM is disconnected. cimUpdateStarted The CIM update start is underway. cimUpdateCompleted The CIM update is complete. configBackup The device configuration has been backed up. configRestore The device configuration has been restored.
  • Page 151 Chapter 4: KX III Administrator Help Trap Name Description rebootCompleted The KX III has completed its reboot. rebootStarted The KX III has begun to reboot, either through cycling power to the system or by a warm reboot from the OS. scanStarted A target server scan has started.
  • Page 152 Chapter 4: KX III Administrator Help Trap Name Description vmImageDisconnected User attempted to unmount a device or image on the target using Virtual Media. Viewing the KX III MIB To view the KX III MIB: 1. Choose Device Settings > Event Management - Settings. The Event Management - Settings page opens.
  • Page 153 Chapter 4: KX III Administrator Help Note: IPv6 addresses cannot exceed 80 characters in length for the host name. Use the reset to defaults feature to remove the syslog configuration. Configuring Event Management - Destinations System events, if enabled, generate SNMP notification events (traps), or can be logged to the syslog or audit log.
  • Page 154: Power Supply Setup

    Chapter 4: KX III Administrator Help Power Supply Setup The KX III provides dual power supplies, and can automatically detect and provide notification regarding the status of these power supplies. Use the Power Supply Setup page to specify whether you are using one or both of the power supplies.
  • Page 155 Chapter 4: KX III Administrator Help Note: If either of these checkboxes is selected and power input is not actually connected, the power LED at the front of the unit turns red. To turn off the automatic detection:  Deselect the checkbox for the appropriate power supply. To reset to factory defaults: ...
  • Page 156: Connect And Disconnect Scripts

    Chapter 4: KX III Administrator Help Connect and Disconnect Scripts The KX III provides the ability to execute key macro scripts when connecting to or disconnecting from a target. You can create and edit your own scripts on the Connection Script page to perform additional actions when connecting to or disconnecting from targets.
  • Page 157 Chapter 4: KX III Administrator Help 3. In the Apply Selected Scripts to Ports section, select the target(s) you want to apply the script to using Select All or clicking on the checkbox to the left of each target to apply the script to only select targets.
  • Page 158 Chapter 4: KX III Administrator Help For example, select F1-F16 to display the function key set in the Add box. Select a function key and add it to the Script box. Next, select Letters from the Key Set drop-down and add a letter key to the script. 8.
  • Page 159 Chapter 4: KX III Administrator Help...
  • Page 160 Chapter 4: KX III Administrator Help Modifying Scripts To modify existing scripts: 1. Click Device Settings > Connection Scripts. The Connection Scripts page opens. 2. In the Available Connection Scripts section, select the script you want to modify and click Modify. The page is then in Edit mode. 3.
  • Page 161: Port Group Management

    Chapter 4: KX III Administrator Help 5. Click Import. The Configuration Scripts page opens and the imported scripts are displayed. To export a disconnect script: 1. Click Device Settings > Configuration Scripts. The Configuration Scripts page opens. 2. In the Available Connection Scripts section, select the script you want to export and click Export.
  • Page 162 Chapter 4: KX III Administrator Help Creating Port Groups The KX III supports the aggregation of multiple ports into a single port group. Port Groups consist solely of ports configured as standard KVM ports. A port may only be a member of a single group. Ports that are available to be included in a port group are displayed in the Select Port for Group >...
  • Page 163 Chapter 4: KX III Administrator Help Creating a Dual Video Port Group The dual video port groups feature allows you to group two video ports into one group. Use this feature when you need to connect to a server with two video cards/ports, and you want to access both ports from the same remote client at the same time.
  • Page 164: Changing The Default Gui Language Setting

    Chapter 4: KX III Administrator Help Note: If a port is already a part of blade server port group, another dual video port group, or 'standard' port group, the port is not an option since ports can only belong to a single port group at a time. 3.
  • Page 165: Security Management

    From the Security Settings page, you can specify login limitations, user blocking, password rules, and encryption and share settings. Raritan SSL certificates are used for public and private key exchanges, and provide an additional level of security. Raritan web server certificates are self-signed.
  • Page 166 Chapter 4: KX III Administrator Help To reset back to defaults:  Click Reset to Defaults. Login Limitations Using login limitations, you can specify restrictions for single login, password aging, and the logging out idle users. Limitation Description Enable single login When selected, only one login per user name is limitation allowed at any time.
  • Page 167 Chapter 4: KX III Administrator Help Limitation Description Enter the number of days after which a password change is required. The default is 60 days. Log out idle users, Select the "Log off idle users" checkbox to After (1-365 automatically disconnect users after the amount minutes) of time you specify in the "After (1-365 minutes)"...
  • Page 168 Chapter 4: KX III Administrator Help Strong Passwords Strong passwords provide more secure local authentication for the system. Using strong passwords, you can specify the format of valid KX III local passwords such as minimum and maximum length, required characters, and password history retention. Strong passwords require user-created passwords to have a minimum of 8 characters with at least one alphabetical character and one nonalphabetical character (punctuation character or number).
  • Page 169 Chapter 4: KX III Administrator Help User Blocking The User Blocking options specify the criteria by which users are blocked from accessing the system after the specified number of unsuccessful login attempts. The three options are mutually exclusive: Option Description Disabled The default option.
  • Page 170 Chapter 4: KX III Administrator Help Option Description Users are denied access to the system for the Timer Lockout specified amount of time after exceeding the specified number of unsuccessful login attempts. When selected, the following fields are enabled:  Attempts - The number of unsuccessful login attempts after which the user will be locked out.
  • Page 171 Chapter 4: KX III Administrator Help Encryption & Share Using the Encryption & Share settings you can specify the type of encryption used, PC and VM share modes, and the type of reset performed when the KX III Reset button is pressed. WARNING: If you select an encryption mode that is not supported by your browser, you will not be able to access the KX III from your browser.
  • Page 172 Chapter 4: KX III Administrator Help Encryption mode Description 140-2 mode. AES-128 The Advanced Encryption Standard (AES) is a National Institute of Standards and Technology specification for the encryption of electronic data. 128 is the key length. When AES-128 is specified, be certain that your browser supports it, otherwise you will not be able to connect.
  • Page 173 Reset (default) defaults. Enable Local Admin Resets the local administrator password only. Password Reset The password is reset to raritan. Disable All Local No reset action is taken. Resets Note: When using the P2CIM-AUSBDUAL or P2CIM-APS2DUAL to attach a target to two KX IIIs, if Private access to the targets is required, both KVM switches must have Private set as their PC Share Mode.
  • Page 174 Chapter 4: KX III Administrator Help Enabling FIPS 140-2 For government and other high security environments, enabling FIPS 140-2 mode may be required. The KX III uses an embedded FIPS 140-2-validated cryptographic module running on a Linux ® platform per FIPS 140-2 Implementation Guidance section G.5 guidelines.
  • Page 175: Configuring Ip Access Control

    Chapter 4: KX III Administrator Help FIPS 140-2 Support Requirements The KX III supports the use of FIPS 140-2 approved encryption algorithms. This allows an SSL server and client to successfully negotiate the cipher suite used for the encrypted session when a client is configured for FIPS 140-2 only mode.
  • Page 176 Chapter 4: KX III Administrator Help creating an IP Access Control list, 127.0.0.1 should not be within the range of IP addresses that are blocked or you will not have access to the KX III local port. To use IP access control: 1.
  • Page 177: Ssl Certificates

    Chapter 4: KX III Administrator Help 3. Choose the Policy from the drop-down list. 4. Click Replace. Your new rule replaces the original rule with the same rule #. To delete a rule: 1. Specify the rule # you want to delete. 2.
  • Page 178 Chapter 4: KX III Administrator Help When a self-signed certificate is created, the KX III date and time are used to calculate the validity period. If the KX III date and time are not accurate, the certificate's valid from - to date range may be incorrect, causing certificate validation to fail.
  • Page 179 Chapter 4: KX III Administrator Help  To generate self-signed certificate, do the following: a. Select the Create a Self-Signed Certificate checkbox if you need to generate a self-signed certificate. When you select this option, the KX III generates the certificate based on your entries, and acts as the signing certificate authority.
  • Page 180: Security Banner

    Chapter 4: KX III Administrator Help Note: The CSR and the private key file are a matched set and should be treated accordingly. If the signed certificate is not matched with the private key used to generate the original CSR, the certificate will not be useful.
  • Page 181 Chapter 4: KX III Administrator Help 5. Edit the information in the Restricted Services Banner Message text box. Up to 6000 characters can be entered or uploaded from a text file. To do this, do one of the following: a. Edit the text by manually typing in the text box. Click OK. b.
  • Page 182: Maintenance

    Chapter 4: KX III Administrator Help Maintenance Audit Log A log is created of the KX III system events. The audit log can contain up to approximately 2K worth of data before it starts overwriting the oldest entries. To avoid losing audit log data, export the data to a syslog server or SNMP manager.
  • Page 183: Device Information

    Device Information The Device Information page provides detailed information about your KX III device and the CIMs in use. This information is helpful should you need to contact Raritan Technical Support. To view information about your KX III and CIMs: ...
  • Page 184 Chapter 4: KX III Administrator Help  D2CIM-DVUSB-DVI  D2CIM-DVUSB-HDMI  D2CIM-DVUSB Note: Only the numeric portion of the serial numbers are displayed for the DCIM-USB, DCIM-PS2 and DCIM-USB G2 CIMs. For example, XXX1234567 is displayed. The serial number prefix GN is displayed for CIMs that have field configured serial numbers.
  • Page 185: Backup And Restore

    Chapter 4: KX III Administrator Help Backup and Restore From the Backup/Restore page, you can backup and restore the settings and configuration for your KX III. In addition to using backup and restore for business continuity purposes, you can use this feature as a time-saving mechanism. For instance, you can quickly provide access to your team from another KX III by backing up the user configuration settings from the KX III in use and restoring those configurations to the new KX III.
  • Page 186 Chapter 4: KX III Administrator Help 2. To do this: a. Save the backup file. The backup file is saved locally on your client machine with the name and location specified. b. Once saved, locate the file and right-click on it. Select properties. c.
  • Page 187: Usb Profile Management

    Raritan tech support. These profiles are designed to address the needs of your target server’s configuration, in the event that the set of standard profiles does not already address them. Raritan tech support will provide the custom profile and work with you to verify the solution for your target server’s specific needs.
  • Page 188: Upgrading Cims

    Chapter 4: KX III Administrator Help As noted, you may delete a custom profile from the system while it is still designated as an active profile. Doing so will terminate any virtual media sessions that were in place. Handling Conflicts in Profile Names A naming conflict between custom and standard USB profiles may occur when a firmware upgrade is performed.
  • Page 189 - doing so will likely result in damage to the unit or CIMs. To upgrade your KX III unit: 1. Locate the appropriate Raritan firmware distribution file (*.RFP) on Raritan website http://www.raritan.com on the Firmware Upgrades web page.
  • Page 190: Upgrade History

    Chapter 4: KX III Administrator Help Upgrade History The KX III provides information about upgrades performed on the KX III and attached CIMS. To view the upgrade history:  Choose Maintenance > Upgrade History. The Upgrade History page opens. Information is provided about the KX III upgrade(s) that have been run, the final status of the upgrade, the start and end times, and the previous and current firmware versions.
  • Page 191 Chapter 4: KX III Administrator Help To reboot your KX III: 1. Choose Maintenance > Reboot. The Reboot page opens. 2. Click Reboot. You are prompted to confirm the action. Click Yes to proceed with the reboot.
  • Page 192: Stopping Cc-Sg Management

    Chapter 4: KX III Administrator Help Stopping CC-SG Management While the KX III is under CC-SG management, if you try to access the device directly, you are notified that it the device is under CC-SG management. If you are managing the KX III through CC-SG and connectivity between CC-SG and the KX III is lost after the specified timeout interval (typically 10 minutes), you are able to end the CC-SG management session from the KX III console.
  • Page 193: Diagnostics

    Chapter 4: KX III Administrator Help 3. Click Yes to remove the device CC-SG management. Once CC-SG management has ended, a confirmation will be displayed. Diagnostics Network Interface Page The KX III provides information about the status of your network interface.
  • Page 194 Chapter 4: KX III Administrator Help  Statistics - Produces a page similar to the one displayed here.  Interfaces - Produces a page similar to the one displayed here.
  • Page 195: Ping Host Page

    Chapter 4: KX III Administrator Help  Route - Produces a page similar to the one displayed here. 3. Click Refresh. The relevant information is displayed in the Result field. Ping Host Page Ping is a network tool used to test whether a particular host or IP address is reachable across an IP network.
  • Page 196: Trace Route To Host Page

    Chapter 4: KX III Administrator Help 2. Type either the hostname or IP address into the IP Address/Host Name field. Note: The host name cannot exceed 232 characters in length. 3. Click Ping. The results of the ping are displayed in the Result field. Trace Route to Host Page Trace route is a network tool used to determine the route taken to the provided hostname or IP address.
  • Page 197: Device Diagnostics

    Chapter 4: KX III Administrator Help Device Diagnostics Note: This page is for use by Raritan Field Engineers or when you are directed by Raritan Technical Support. Device diagnostics downloads the diagnostics information from the KX III to the client machine. Two operations can be performed on this page: ...
  • Page 198: Kx Iii Local Console

    Click Save. The Save As dialog box opens. c. Navigate to the desired directory and click Save. d. Email this file as directed by Raritan Technical Support. KX III Local Console The KX III provides at-the-rack access and administration via its local port.
  • Page 199: Security And Authentication

    Chapter 4: KX III Administrator Help Security and Authentication In order to use the KX III Local Console, you must first authenticate with a valid username and password. The KX III provides a fully-integrated authentication and security scheme, whether your access is via the network or the local port.
  • Page 200 Local language input is not supported at this time for KX III Local Console functions. Note: If using a Turkish keyboard, you must connect to a target server through the Active KVM Client (AKC). It is not supported by other Raritan clients. Select the Local Port Hotkey 1.
  • Page 201 Chapter 4: KX III Administrator Help Hot key: Take this action: Double Click Left Alt key Press the left Alt key twice quickly Double Click Left Shift key Press the left Shift key twice quickly Double Click Left Ctrl key Press the left Ctrl key twice quickly Select the Local Port Connect Key 1.
  • Page 202 Chapter 4: KX III Administrator Help Configure the Power Save Feature (Optional) 1. If you would like to use the power save feature: a. Select the Power Save Mode checkbox. b. Set the amount of time (in minutes) in which Power Save Mode will be initiated.
  • Page 203: Command Line Interface (Cli)

    Chapter 4: KX III Administrator Help Command Line Interface (CLI) Overview The Command Line Interface(CLI) can be used to configure the KX III network interface and perform diagnostic functions provided you have the appropriate permissions to do so. The following figures describe an overview of the CLI commands. See CLI Commands (on page 195) for a list of all the commands, which include definitions and links to the sections in this chapter that give...
  • Page 204: Ssh Connection To The Kx Iii

    Logging In To log in, enter the user name admin as shown: 1. Log in as admin 2. The Password prompt appears. Enter the default password: raritan The welcome message displays. You are now logged on as an administrator. After reviewing the following...
  • Page 205: Navigation Of The Cli

    Chapter 4: KX III Administrator Help Navigation of the CLI Before using the CLI, it is important to understand CLI navigation and syntax. There are also some keystroke combinations that simplify CLI use. Completion of Commands The CLI supports the completion of partially-entered commands. After entering the first few characters of an entry, press the Tab key.
  • Page 206: Initial Configuration Using Cli

    1. Reset the administrator password. All KX III devices are shipped with the same default password. Therefore, to avoid security breaches it is imperative that you change the admin password from raritan to one customized for the administrators who will manage the KX III device.
  • Page 207: Cli Prompts

    Chapter 4: KX III Administrator Help Setting Network Parameters Network parameters are configured using the interface command. admin > Config > Network > interface ipauto none ip 192.168.151.12 mask 255.255.255.0 gw 192.168.151.1 mode auto When the command is accepted, the device automatically drops the connection.
  • Page 208: Administering The Kx Iii Console Server Configuration Commands

    Chapter 4: KX III Administrator Help Command Description userlist List active user sessions.  Enter admin > config > network. Command Description help Display overview of commands. history Display the current session's command line history. interface Set/get network parameters. ipv6_interface Set/get IPv6 network parameters.
  • Page 209: Configuring Network

    Chapter 4: KX III Administrator Help Configuring Network The network menu commands are used to configure the KX III network adapter. Commands Description interface Configure the KX III device network interface. name Network name configuration ipv6 Set/get IPv6 network parameters. Interface Command The Interface command is used to configure the KX III network interface.
  • Page 210: Dual Video Port Groups

    Chapter 4: KX III Administrator Help Name Command The name command is used to configure the network name. The syntax of the name is: name [devicename <devicename>] [hostname <hostname>] Device name configuration devicename <devicename> Device Name hostname <hostname> Preferred host name (DHCP only) Name Command Example The following command sets the network name:...
  • Page 211: Recommendations For Dual Port Video

    Chapter 4: KX III Administrator Help Recommendations for Dual Port Video Set the target server’s primary and secondary displays to the same video resolution in order to maintain mouse synchronization and minimize having to periodically resync. Depending on the desired orientation, the top display (vertical orientation) or left display (horizontal orientation) should be the designated primary display.
  • Page 212: Cims Required For Dual Video Support

    Linux Intelligent and Linux users may experience Standard Mouse display and mouse movement Modes issues using single mouse mode. Raritan recommends Linux users do not use Single Mouse mode. ® operating Single Mouse Mode For Mac targets with multiple system monitors, use a standard mouse in Single-Cursor mode.
  • Page 213: Permissions And Dual Video Port Group Access

    Chapter 4: KX III Administrator Help  Other - Enable Single Mouse Cursor setting will NOT be applied  Other - Enable Scale Video setting will be applied  Other - Pin Menu Toolbar setting will be applied  Dragging and moving items between windows on the primary and secondary target requires a release and press of the mouse button as the item is moved from one window to the other.
  • Page 214: Example Dual Port Video Group Configuration

    Chapter 4: KX III Administrator Help Example Dual Port Video Group Configuration The following is a general example. Your configuration may vary in the type of CIMs used, the port you designate as the primary port, the ports you are connecting to and so on. In this example, we are using: ...
  • Page 215: Dual Port Video Configuration Steps

    2. Ensure that your target server's video has already been set to a supported resolution and refresh rate. See Supported Target Server Video Resolutions (see "KX III Supported Target Server Video Resolutions" on page 300, http://www.raritan.com/help/kx-iii/v3.0.0/en/index.htm#32872)
  • Page 216 Chapter 4: KX III Administrator Help Note: If the target primary and secondary displays are set to different resolutions the mouse will not stay in sync and will need to be periodically re-synced from the top-left target window. Step 2: Connect the Target Server to the KX III Dual port video groups can be created from existing port connections, or new port connections.
  • Page 217 Chapter 4: KX III Administrator Help Step 3: Configure the Mouse Mode and Ports Once you have connected the target server to the KX III through the target server video ports, it detects the connection and displays the ports on the Port Configuration page. For instructions, see Configuring Standard Target Servers After the ports are configured, they can be grouped in a dual video port group.
  • Page 218: Raritan Client Navigation When Using Dual Video Port Groups

    For example, if you are using extended desktop mode, the port windows can be moved between monitors. Raritan Client Navigation when Using Dual Video Port Groups When using full screen mode in the clients, switch between ports by: ...
  • Page 219: Direct Port Access And Dual Port Video Groups

    Chapter 4: KX III Administrator Help Direct Port Access and Dual Port Video Groups Direct port access allows users to bypass having to use the device's Login dialog and Port Access page. This feature also provides the ability to enter a username and password directly to proceed to the target, if the username and password is not contained in the URL.
  • Page 220 Chapter 4: KX III Administrator Help From LDAP/LDAPS When an LDAP/LDAPS authentication is successful, the KX III determines the permissions for a given user based on the permissions of the user's group. Your remote LDAP server can provide these user group names by returning an attribute named as follows: rciusergroup attribute type: string...
  • Page 221: Setting The Registry To Permit Write Operations To The Schema

    Chapter 4: KX III Administrator Help Setting the Registry to Permit Write Operations to the Schema To allow a domain controller to write to the schema, you must set a registry entry that permits schema updates. To permit write operations to the schema: ®...
  • Page 222: Adding Attributes To The Class

    Chapter 4: KX III Administrator Help 3. Click New and then choose Attribute. When the warning message appears, click Continue and the Create New Attribute dialog appears. 4. Type rciusergroup in the Common Name field. 5. Type rciusergroup in the LDAP Display Name field. 6.
  • Page 223 Chapter 4: KX III Administrator Help 2. Scroll to the user class in the right pane and right-click it. 3. Choose Properties from the menu. The user Properties dialog appears. 4. Click the Attributes tab to open it. 5. Click Add.
  • Page 224: Updating The Schema Cache

    Chapter 4: KX III Administrator Help 6. Choose rciusergroup from the Select Schema Object list. 7. Click OK in the Select Schema Object dialog. 8. Click OK in the User Properties dialog. Updating the Schema Cache To update the schema cache: ®...
  • Page 225 Chapter 4: KX III Administrator Help 3. Go to the directory where the support tools were installed. Run adsiedit.msc. The ADSI Edit window opens. 4. Open the Domain. 5. In the left pane of the window, select the CN=Users folder.
  • Page 226 Chapter 4: KX III Administrator Help 6. Locate the user name whose properties you want to adjust in the right pane. Right-click the user name and select Properties. 7. Click the Attribute Editor tab if it is not already open. Choose rciusergroup from the Attributes list.
  • Page 227: Chapter 5 Virtual Kvm Client (Vkc) Help

    Chapter 5 Virtual KVM Client (VKC) Help In This Chapter Overview ....................215 Connect to a Target Server ..............216 Configuring Connection Properties ............217 Connection Information ................. 221 USB Profiles ..................222 Keyboard ....................223 Video Properties ..................227 Mouse Options ..................
  • Page 228: Connect To A Target Server

    Chapter 5: Virtual KVM Client (VKC) Help There is one Virtual KVM Client for each target server connected. Virtual KVM Client windows can be minimized, maximized, and moved around your computer desktop. IMPORTANT: Refreshing your browser closes the Virtual KVM Client connection, so exercise caution.
  • Page 229: Configuring Connection Properties

    Chapter 5: Virtual KVM Client (VKC) Help Configuring Connection Properties Access Connection Properties To access connection properties: Click Connection > Properties, or click the Connection... icon to open the Connection Properties dialog. About Connection Properties The Virtual KVM Client (VKC) and Active KVM Client (AKC) support connection property management.
  • Page 230: Default Connection Property Settings - Optimized For Best Performance

    Chapter 5: Virtual KVM Client (VKC) Help Default Connection Property Settings - Optimized for Best Performance KX III comes configured to provide optimal performance for the majority of video streaming conditions. Default connection settings are:  Optimized for: Text Readability - video modes are designed to maximize text readability.
  • Page 231: Optimize For: Selections

    Chapter 5: Virtual KVM Client (VKC) Help Optimize for: Selections Text Readability When Text Readability is selected, all video modes are designed to provide high-quality, readable text. This setting is ideal when working with computer GUIs, such as when performing server administration and so on. When working in full color video modes, a slight contrast boost is provided, and text is sharper.
  • Page 232: Noise Filter

    Chapter 5: Virtual KVM Client (VKC) Help In general, moving the slider to the left results in higher quality at the cost of higher bandwidth and, in some cases, lower frame rate. Moving the slider to the right enables stronger compression, reducing the bandwidth per frame, but video quality is reduced.
  • Page 233: Connection Information

    Horizontal Resolution - The target server horizontal resolution.  Vertical Resolution - The target server vertical resolution.  Refresh Rate - Refresh rate of the target server.  Protocol Version - Raritan communications protocol version. Access and Copy Connection Information...
  • Page 234: Usb Profiles

    Chapter 5: Virtual KVM Client (VKC) Help Steps Click Connection > Info... to open the Connection Info dialog. Click Copy to Clipboard. Paste the information in a file of your choosing. USB Profiles Set a USB profile for a target server from the Virtual KVM Client (VKC) by clicking USB Profile in the menu, then selecting from the menu choices.
  • Page 235: Keyboard

    Chapter 5: Virtual KVM Client (VKC) Help Keyboard Send Ctrl+Alt+Del Macro Due to its frequent use, a Ctrl+Alt+Delete macro is preprogrammed. Selecting Keyboard > Send Ctrl+Alt+Del, or clicking on the Ctrl+Alt+Delete button in the toolbar sends this key sequence to the server or to the KVM switch to which you are currently connected.
  • Page 236: Keyboard Macros

    Chapter 5: Virtual KVM Client (VKC) Help Keyboard Macros Keyboard macros ensure that keystroke combinations intended for the target server are sent to and interpreted only by the target server. Otherwise, they might be interpreted by the computer on which the Virtual KVM Client is running (your client PC).
  • Page 237: Import Macros

    Chapter 5: Virtual KVM Client (VKC) Help a. To remove a step in the sequence, select it and click Remove. b. To change the order of steps in the sequence, click the step and then click the up or down arrow buttons to reorder them as needed.
  • Page 238: Export Macros

    Chapter 5: Virtual KVM Client (VKC) Help  Click Yes to replace the existing macro with the imported version.  Click Yes to All to replace the currently selected and any other duplicate macros that are found.  Click No to keep the original macro and proceed to the next macro ...
  • Page 239: Video Properties

    Chapter 5: Virtual KVM Client (VKC) Help 4. Select the folder to save the macro file to, enter a name for the file and click Save. If the macro already exists, you receive an alert message. 5. Select Yes to overwrite the existing macro or No to close the alert without overwriting the macro.
  • Page 240: Calibrating Color

    Chapter 5: Virtual KVM Client (VKC) Help Calibrating Color Use the Calibrate Color command to optimize the color levels (hue, brightness, saturation) of the transmitted video images. The color settings are on a target server-basis. Note: The Calibrate Color command applies to the current connection only.
  • Page 241 Warning: Exercise caution when changing the Clock and Phase settings. Doing so may result in lost or distorted video and you may not be able to return to the previous state. Contact Raritan Technical Support before making any changes. Horizontal Offset - Controls the horizontal positioning of the target server display on your monitor.
  • Page 242: Screenshot From Target Command (Target Screenshot)

    Chapter 5: Virtual KVM Client (VKC) Help Note: Some Sun background screens, such as screens with very dark borders, may not center precisely on certain Sun servers. Use a different background or place a lighter colored icon in the upper left corner of the screen.
  • Page 243: Mouse Options

    Chapter 5: Virtual KVM Client (VKC) Help Mouse Options When in dual mouse mode, and provided the option is properly configured, the mouse cursors align. In dual mouse mode, when controlling a target server, the Remote Console displays two mouse cursors: one belonging to your KX III client workstation, and the other belonging to the target server.
  • Page 244: Dual Mouse Modes

    Chapter 5: Virtual KVM Client (VKC) Help Dual Mouse Modes Absolute Mouse Synchronization In this mode, absolute coordinates are used to keep the client and target cursors in synch, even when the target mouse is set to a different acceleration or speed. This mode is supported on servers with USB ports and is the default mode for Virtual Media CIMs.
  • Page 245 To be sure to avoid any problems with this function, Raritan recommends you do not have file icons or folder icons in the upper left corner of your desktop.
  • Page 246 Chapter 5: Virtual KVM Client (VKC) Help Mouse Synchronization Tips If you have an issue with mouse synchronization: 1. Verify that the selected video resolution and refresh rate are among those supported by the device. The KVM Client Connection Info dialog displays the actual values that the device is seeing.
  • Page 247: Single Mouse Mode

    Chapter 5: Virtual KVM Client (VKC) Help Single Mouse Mode Single Mouse mode uses only the target server mouse cursor and the local mouse pointer no longer appears onscreen. Note: Single mouse mode does not work on Windows or Linux targets when client is running on a Virtual Machine.
  • Page 248 Chapter 5: Virtual KVM Client (VKC) Help  United Kingdom  Korean (Korea)  French (Belgium)  Norwegian (Norway)  Portuguese (Portugal)  Danish (Denmark)  Swedish (Sweden)  German (Switzerland)  Hungarian (Hungary)  Spanish (Spain)  Italian (Italy) ...
  • Page 249 Turkish Keyboards If using a Turkish keyboard, you must connect to a target server through the Active KVM Client (AKC). It is not supported by other Raritan clients. Slovenian Keyboards The < key does not work on Slovenian keyboards due to a JRE limitation.
  • Page 250: Client Launch Settings

    Chapter 5: Virtual KVM Client (VKC) Help Language Configuration method Belgian Keyboard Indicator Norwegian Keyboard Indicator Danish Keyboard Indicator Swedish Keyboard Indicator Hungarian System Settings (Control Center) Spanish System Settings (Control Center) Italian System Settings (Control Center) Slovenian System Settings (Control Center) Portuguese System Settings (Control Center) Note: The Keyboard Indicator should be used on Linux systems using...
  • Page 251 Chapter 5: Virtual KVM Client (VKC) Help a. Select 'Enable Single Cursor Mode' to enable single mouse mode as the default mouse mode when the server is accessed. b. Select 'Enable Scale Video' to automatically scale the display on the target server when it is accessed. c.
  • Page 252: Configuring Port Scan Settings In Vkc And Akc

    Chapter 5: Virtual KVM Client (VKC) Help Configuring Port Scan Settings in VKC and AKC Configuring port scan options in VKC and AKC applies to scanning from the KX III Remote Console. To configure port scan options for the Local Console, see Configure Local Console Scan Settings (on page 272)
  • Page 253: View Options

    Chapter 5: Virtual KVM Client (VKC) Help 6. Click OK. View Options View Toolbar You can use the Virtual KVM client with or without the toolbar display. To toggle the display of the toolbar (on and off):  Choose View > View Toolbar. View Status Bar By default, the status bar is displayed at the bottom of the target window.
  • Page 254: Scaling

    Chapter 5: Virtual KVM Client (VKC) Help Scaling Scaling your target window allows you to view the entire contents of the target server window. This feature increases or reduces the size of the target video to fit the Virtual KVM Client window size, and maintains the aspect ratio so that you see the entire target server desktop without using the scroll bar.
  • Page 255: Virtual Media

    Chapter 5: Virtual KVM Client (VKC) Help Virtual Media All KX III models support virtual media. Virtual media extends KVM capabilities by enabling target servers to remotely access media from a client PC and network file servers. With this feature, media mounted on client PCs and network file servers are essentially "mounted virtually"...
  • Page 256: Mounting Local Drives

    Chapter 5: Virtual KVM Client (VKC) Help CIMs Required for Virtual Media You must use one of the following CIMs is to use virtual media:  D2CIM-VUSB  D2CIM-DVUSB  D2CIM-DVUSB-DVI  D2CIM-DVUSB-HDMI  D2CIM-DVUSB-DP Note that the black connector on the DVUSB CIMs are used for the keyboard and mouse.
  • Page 257: Supported Virtual Media Types

     ISO images (disk images)  Digital audio devices* Note: ISO9660 is the standard supported by Raritan. However, other ISO standards can be used. Conditions when Read/Write is Not Available Virtual media Read/Write is not available in the following situations: ...
  • Page 258: Number Of Supported Virtual Media Drives

    Chapter 5: Virtual KVM Client (VKC) Help Number of Supported Virtual Media Drives With the virtual media feature, you can mount up to two drives (of different types) that are supported by the USB profile currently applied to the target. These drives are accessible for the duration of the KVM session.
  • Page 259 You can access the media just like any other drive. Mounting CD-ROM/DVD-ROM/ISO Images This option mounts CD-ROM, DVD-ROM, and ISO images. Note: ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work. To access a CD-ROM, DVD-ROM, or ISO image: 1.
  • Page 260: Virtual Media In A Windows Xp Environment

    Chapter 5: Virtual KVM Client (VKC) Help c. File Server Username - User name required for access to the file server. The name can include the domain name such as mydomain/username. d. File Server Password - Password required for access to the file server (field is masked as you type).
  • Page 261: Virtual Media In A Linux Environment

    Chapter 5: Virtual KVM Client (VKC) Help Virtual Media in a Linux Environment Active System Partitions You cannot mount active system partitions from a Linux client. Linux Ext3/4 drive partitions need to be unmounted via umount /dev/<device label> prior to a making a virtual media connection. Drive Partitions The following drive partition limitations exist across operating systems: ...
  • Page 262: Virtual Media File Server Setup (File Server Iso Images Only)

    Virtual Media File Server Setup (File Server ISO Images Only) This feature is only required when using virtual media to access file server ISO images. ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work.
  • Page 263: Smart Cards

    Chapter 5: Virtual KVM Client (VKC) Help Smart Cards Using the KX III, you are able to mount a smart card reader onto a target server to support smart card authentication and related applications. For a list of supported smart cards, smart card readers, and additional system requirements, see Smart Card Minimum System Requirements, CIMs and Supported/Unsupported Smart Card...
  • Page 264: Smart Card Reader Detected

    Chapter 5: Virtual KVM Client (VKC) Help Smart Card Reader Detected After a KVM session is established with a target server, a Smart Card menu and button are available in VKC and AKC. Once the Smart Card button is selected or Smart Card is selected from the menu, the smart card readers that are detected as attached to the remote client are displayed in a dialog.
  • Page 265: Update A Smart Card Reader

    Chapter 5: Virtual KVM Client (VKC) Help Update a Smart Card Reader To update the smart card in the Select Smart Card Reader dialog:  Click Refresh List if a new smart card reader has been attached to the client PC. Send Smart Card Remove and Reinsert Notifications To send smart card remove and reinsert notifications to the target:...
  • Page 266: Digital Audio

    Note: Audio CDs are not supported by virtual media so they do not work with the audio feature. Before you begin using the audio feature, Raritan recommends you review the audio related information documented in the following sections of Help: ...
  • Page 267: Audio Playback And Capture Recommendations And Requirements

    Chapter 5: Virtual KVM Client (VKC) Help Audio Playback and Capture Recommendations and Requirements Audio Level  Set the target audio level to a mid-range setting. ® For example, on a Windows client, set the audio to 50 or lower. This setting must be configured through the playback or capture audio device, not from the client audio device control.
  • Page 268 Chapter 5: Virtual KVM Client (VKC) Help In practice, the bandwidth used when an audio device connects to a target is higher due to the keyboard and video data consumed when opening and using an audio application on the target. A general recommendation is to have at least a 1.5MB connection before running playback and capture.
  • Page 269: Saving Audio Settings

    Chapter 5: Virtual KVM Client (VKC) Help Saving Audio Settings Audio device settings are applied on a per KX III device basis. Once the audio devices settings are configured and saved on the KX III, the same settings are applied to it. ®...
  • Page 270: Connecting And Disconnecting From A Digital Audio Device

    Chapter 5: Virtual KVM Client (VKC) Help Operating System Audio Playback Support Review the table shown here to see which Raritan client works with audio playback/capture for each operating system: Operating system Audio playback and capture supported  ® Active KVM Client (AKC) Windows ...
  • Page 271 Chapter 5: Virtual KVM Client (VKC) Help 6. Select the audio format for the playback device from the Format: drop-down. Note: Select the format that you wish to use based on the available network bandwidth. Formats with lower sampling rates consume less bandwidth and may tolerate more network congestion.
  • Page 272 Chapter 5: Virtual KVM Client (VKC) Help A Speaker icon is displayed in the status bar at the bottom of the client window. It is grayed out when no audio is being used. When the Speaker icon and Microphone icon are displayed in the status bar, the session is being captured as it is streamed.
  • Page 273: Adjusting Capture And Playback Buffer Size (Audio Settings)

    2. Adjust the capture and/or playback buffer size as needed. Click OK. Version Information - Virtual KVM Client This menu command provides version information about the Virtual KVM Client, in case you require assistance from Raritan Technical Support. To obtain version information: 1. Choose Help > About Raritan Virtual KVM Client.
  • Page 274: Chapter 6 Active Kvm Client (Akc) Help

    This allows you to run the client in a Windows environments without ® using the Java Runtime Environment (JRE), which is required to run Raritan's Virtual KVM Client (VKC). AKC also works with CC-SG. AKC provides the same features as VKC with the exception of the following: ...
  • Page 275: Akc Supported Microsoft .Net Framework

    .NET installed, you will receive a message instructing you to check the .NET version. ® Note: Raritan recommends Windows XP operating system users verify you have a working version of .NET 3.5 or 4.0 already installed before you launch AKC.
  • Page 276: Akc Supported Browsers

    Chapter 6: Active KVM Client (AKC) Help AKC Supported Browsers  ® Internet Explorer 8 (and later) If you attempt to open AKC from a browser other than Internet Explorer 8 (and later), you will receive an error message instructing you to check your browser and to switch to Internet Explorer.
  • Page 277: Chapter 7 Kx Iii Local Console - Kx Iii End User Help

    Chapter 7 KX III Local Console - KX III End User Help In This Chapter Overview ....................265 Accessing a Target Server ..............265 Local Console Video Resolutions ............266 Simultaneous Users ................266 Hot Keys and Connect Keys ..............266 Scanning Ports - Local Console ............
  • Page 278: Local Console Video Resolutions

    Chapter 7: KX III Local Console - KX III End User Help Local Console Video Resolutions Once a monitor is connected to the KX III Local Console, KX III detects the native resolution of the monitor. This is typically the largest resolution supported by the monitor.
  • Page 279: Return To The Kx Iii Local Console Interface - Default Hot Key

    Chapter 7: KX III Local Console - KX III End User Help Return to the KX III Local Console Interface - Default Hot Key To return to the KX III Local Console from the target server:  Press the Scroll Lock key twice rapidly. The video display switches from the target server interface to the KX III Local Console interface.
  • Page 280: Special Sun Key Combinations

    Chapter 7: KX III Local Console - KX III End User Help Standard servers Connect key action Key sequence example the local port GUI connected to target):  Double Click Scroll Lock Special Sun Key Combinations Microsystems server’s special ™ The following key combinations for Sun keys operate on the local port.
  • Page 281: Scanning Ports - Local Console

    Chapter 7: KX III Local Console - KX III End User Help Scanning Ports - Local Console Use the port scanning feature to search for selected targets and display them in individual thumbnails as part of a slide show. This feature allows you to monitor up to 32 targets at one time since you can view each target server individually as it is displayed during the slide show.
  • Page 282: Scanning Port Slide Show - Local Console

    Chapter 7: KX III Local Console - KX III End User Help Scanning Port Slide Show - Local Console When you start a scan, the Port Scan window opens. As each target is found, it is displayed as a thumbnail in a slide show. The slide show scrolls through the target thumbnails based on the default interval of 10 seconds or according to the interval you specify.
  • Page 283 Chapter 7: KX III Local Console - KX III End User Help...
  • Page 284: Target Status Indicators During Port Scanning - Local Console

    Chapter 7: KX III Local Console - KX III End User Help Target Status Indicators During Port Scanning - Local Console In thumbnail view on the Local Console, the status of each target is indicated below the thumbnail on the page until it is the focus of the slide show view.
  • Page 285: Scan For Targets - Local Console

    Chapter 7: KX III Local Console - KX III End User Help  Display Interval - changes the scan display interval.  Interval Between Ports - change interval between switching different port during scan. Scan for Targets - Local Console To scan for targets: 1.
  • Page 286 Chapter 7: KX III Local Console - KX III End User Help 2. From the Local Console, click Tools. 3. Select the smart card reader from the Card Readers Detected list. Select None from the list if you do not want a smart card reader mounted.
  • Page 287: Local Console Usb Profile Options

    Chapter 7: KX III Local Console - KX III End User Help Local Console USB Profile Options From the USB Profile Options section of the Tools page, you can choose from the available USB profiles. The ports that can be assigned profiles are displayed in the Port Name field and the profiles that are available for a port appear in the Select Profile To Use field after the port is selected.
  • Page 288: Kx Iii Local Console Factory Reset

    Chapter 7: KX III Local Console - KX III End User Help KX III Local Console Factory Reset Note: It is recommended that you save the audit log prior to performing a factory reset. The audit log is deleted when a factory reset is performed and the reset event is not logged in the audit log.
  • Page 289 Chapter 7: KX III Local Console - KX III End User Help 2. Use a pointed object to press and hold the Reset button. 3. While continuing to hold the Reset button, power the KX III device back on. 4. Continue holding the Reset button for 10 seconds.
  • Page 290: Appendix A Connecting A Kx Iii And Cat5 Reach Dvi - Provide Extended Local Port Functionality

    An extended local port extends the reach of the local port beyond the rack the KX II is located, for example to another KVM switch. This can be achieved by configuring a KX III to work with a Raritan Cat5 Reach DVI transmitter and receiver, which are then connected to a remote console or other device.
  • Page 291: Connect A Kx Iii And Cat5 Reach Dvi

    4. Connect the local console ports of the KVM switch to the transmitter. a. Plug one end of the Raritan-provided DVI cable into the DVI-I IN port on the transmitter, and the other end into the KVM switch's video port.
  • Page 292 Appendix A: Connecting a KX III and Cat5 Reach DVI - Provide Extended Local Port Functionality 5. Turn on the KVM switch. Tip: The local or remote console can be equipped with a KVM drawer instead of a set of keyboard, mouse and monitor. See the illustration below.
  • Page 293 Appendix A: Connecting a KX III and Cat5 Reach DVI - Provide Extended Local Port Functionality 5. Turn on both KVM switches. To increase the distance between any computer and a KVM switch: 1. Set up an optional local console with the transmitter. 2.
  • Page 294: Appendix B Accessing A Paragon Ii From The Kx

    Appendix B Accessing a Paragon II from the KX In This Chapter Overview ....................282 Supported Paragon II CIMS and Configurations ........283 Connecting the Paragon II to the KX III ..........288 Overview Connect the Paragon II system to a KX III device that is managed by CC-SG so that Paragon II is accessible from CC-SG.
  • Page 295: Supported Paragon Ii Cims And Configurations

    Appendix B: Accessing a Paragon II from the KX III When you access the Paragon II system from KX III or CC-SG (if the KX III is managed by CC-SG), the Paragon II OSUI login screen appears for you to log in. In this integration, you can perform any OSUI functions implemented with current Paragon II firmware or any KX III function implemented with current KX III firmware except for the virtual media feature.
  • Page 296 Appendix B: Accessing a Paragon II from the KX III Paragon CIM Supports Does not support   Virtual media P2CIM-AUSBDUAL Servers with USB- or ™ USB-type  Smart cards keyboard and mouse  Absolute Mouse ports mode  Automatic skew ...
  • Page 297: Kx Iii-To-Kx Iii Paragon Cim Guidelines

    Appendix B: Accessing a Paragon II from the KX III KX III-to-KX III Paragon CIM Guidelines The following system configuration guidelines should be followed when you are using Paragon CIMs in a KX III-to-KX III configuration: Concurrent Access Both KX III KVM switches should be configured with the same policy for concurrent access to targets - both PC-Share or both Private.
  • Page 298: Kx Iii-To-Paragon Ii Guidelines

    Appendix B: Accessing a Paragon II from the KX III If a connection to the target is in place from the other KX III, the availability is checked when a connection is attempted. Access is denied or allowed consistent with the PC-Share policy in place for the KX III. Until that time, the availability is not be updated on the other KX III.
  • Page 299: Supported Connection Distances Between Paragon Ii And Kx Iii

    Appendix B: Accessing a Paragon II from the KX III Paragon II Mode description Supported? operation mode port can be selected and Timeout, which is configured controlled by more than on the Paragon II, is not one user, but only one supported.
  • Page 300: Connecting The Paragon Ii To The Kx Iii

    Appendix B: Accessing a Paragon II from the KX III Connecting the Paragon II to the KX III To connect the Paragon II system to a KX III: 1. Check whether the Paragon II user station that you want to connect to the KX III is implemented with version 4.6 firmware (or later).
  • Page 301: Appendix C Managing Kx Iii In Dctrack

    Visualize the KX III in a Cabinet Elevation and on the Floor Map ..294 Managing the KX III Lifecycle ..............295 Overview ® Raritan's dcTrack is a complete Data Center Infrastructure Management (DCIM) solution that provides you with real-time information about your facilities, networks and IT.
  • Page 302: Locate Space In A Cabinet For The Kx Iii

    Appendix C: Managing KX III in dcTrack Locate Space in a Cabinet for the KX III Use dcTrack's Capacity Management functionality to locate space in a cabinet in your data center for the KX III. Search by:  Rack units - dcTrack looks for a cabinet with enough rack units open to accommodate the KX III...
  • Page 303: Add Kx Iii Devices To Dctrack

    Appendix C: Managing KX III in dcTrack  Make and model - dcTrack looks for a cabinet with enough available space in the cabinet based on the KX III's dimensions, connectors, and so on See Capacity Management - Locating and Reserving Cabinet Space for an Item in dcTrack Help.
  • Page 304: Import Kx Iii Devices Into Dctrack

    Import KX III Devices into dcTrack If you are adding a large number of KX IIIs, complete the 02_Items_-_All_Other_Classes_for_3.x.xls spreadsheet, which is provided by Raritan, with the KX III information, then import the spreadsheet into dcTrack ® using the Import Wizard.
  • Page 305: Build Data And Power Circuits For The Kx Iii

    Appendix C: Managing KX III in dcTrack Note that entire cabinets, along with the items in the cabinet and their connections and child devices, can also be cloned. So if you added a KX III to a cabinet and use the same cabinet configuration throughout your data center, you can clone the cabinet.
  • Page 306: Visualize The Kx Iii In A Cabinet Elevation And On The Floor Map

    Appendix C: Managing KX III in dcTrack Visualize the KX III in a Cabinet Elevation and on the Floor Map ® When you add the KX III to dcTrack , you place it in a cabinet. Provided the data center location the cabinet belongs to has a floor map associated with it, and the cabinet the KX III is housed in is linked to a cabinet object on the floor map, you can access the floor map from the KX III page in dcTrack.
  • Page 307: Managing The Kx Iii Lifecycle

    Appendix C: Managing KX III in dcTrack See Locate an Item on the Floor Map and Items List (Web Client) in dcTrack Help. You can also view the KX III in the cabinet elevation from the floor map. See Cabinet Elevations - Floor Map (Web Client) in dcTrack Help. Managing the KX III Lifecycle Once the KX III is installed, manage its lifecycle in your data center.
  • Page 308: Decommission A Kx Iii To Storage

    Appendix C: Managing KX III in dcTrack Decommission a KX III to Storage Submit a request to decommission the KX III to storage if you plan to temporarily move it to an off-site location. See Submit a Request to Decommission an Item to Storage in dcTrack Help.
  • Page 309: Appendix D Specifications

    Appendix D Specifications In This Chapter Hardware ....................297 Software....................317 Hardware KX III Dimensions and Physical Specifications Dominion KX Description Power & Dimensions Weight Operating Humidity III model heat (WxDxH) temp dissipation  8 server DKX3-108 Dual Power 17.3" x 8.60lbs 0º...
  • Page 310 Appendix D: Specifications Dominion KX Description Power & Dimensions Weight Operating Humidity III model heat (WxDxH) temp dissipation 52 KCAL  1 local port for use at the rack  32 server DKX3-232 Dual Power 17.3" x 9.08lbs 0º - 45º C 0-85 % ports 110V/240V,...
  • Page 311 Appendix D: Specifications Dominion KX Description Power & Dimensions Weight Operating Humidity III model heat (WxDxH) temp dissipation port for use at the rack  32 server DKX3-832 Dual Power 17.3" x 9.96lbs 0º - 45º C 0-85 % ports 110V/240V, 13.15'' x 50-60Hz...
  • Page 312: Kx Iii Supported Target Server Video Resolutions

    Appendix D: Specifications KX III Supported Target Server Video Resolutions  640x350@70Hz  640x350@85Hz  640x400@56Hz  640x400@84Hz  640x400@85Hz  640x480@60Hz  640x480@66.6Hz  640x480@72Hz  640x480@75Hz  640x480@85Hz  720x400@70Hz  720x400@84Hz  720x400@85Hz  800x600@56Hz  800x600@60Hz ...
  • Page 313: Target Server Video Resolution Supported Connection Distances And Refresh Rates

    KX III. Note: Due to the multiplicity of server manufacturers and types, OS versions, video drivers, and so on, as well as the subjective nature of video quality, Raritan cannot guarantee performance across all distances in all environments.
  • Page 314: Supported Kx Iii Local Port Dvi Resolutions

    Appendix D: Specifications Supported KX III Local Port DVI Resolutions  1920x1080@60  1280x720@60  1024x768@60 (default)  1024x768@75  1280x1024@60  1280x1024@75  1600x1200@60  800x480@60  1280x768@60  1366x768@60  1360x768@60  1680x1050@60  1440x900@60 Supported Computer Interface Module (CIMs) Specifications Digital CIMs support Display Data Channels (DDC) and Enhanced Extended Display Identification Data (E-EDID).
  • Page 315 Appendix D: Specifications CIM model Description Dimensions (WxDxH) Weight D2CIM-DVUS Digital CIM that provides digital-to-analog 1.7" x 3.5" x 0.8"; 43 x 0.25lb; B-DVI conversion and support for virtual media, 90 x 19mm 0.11kg smartcard/CAC, audio, Absolute and Relative Mouse Synchronization D2CIM-DVUS Digital CIM that provides digital-to-analog 1.7"...
  • Page 316: Supported Digital Video Cims For Mac

    Appendix D: Specifications CIM model Description Dimensions (WxDxH) Weight Note that the black connector on the DVUSB CIMs are used for the keyboard and mouse. The gray connector is used for virtual media. Keep both plugs of the CIM connected to the device. The device may not operate properly if both plugs are not connected to the target server.
  • Page 317: Digital Cim Timing Modes

    Appendix D: Specifications Digital CIM Timing Modes Following are the default timing modes that are used when the KX III communicates with a video source via a digital CIM. The timing mode that is used is dependent on the native resolution of the video source.
  • Page 318: Dvi Compatibility Mode

    Appendix D: Specifications Digital CIM Standard Modes  1152x864@75Hz VESA  1280x960@60Hz VESA  1280x1024@60Hz VESA  1360x768@60Hz VESA  1400x1050@60Hz VESA  1440x900@60Hz VESA  1600x1200 @60Hz VESA  1680x1050@60Hz VESA  1920x1080@60Hz VESA DVI Compatibility Mode DVI Compatibility Mode may be required if you are using an HDMI CIM ®...
  • Page 319 Appendix D: Specifications KX III network speed setting tion tion KX III: KX III: 100/Full KX III: 100/Full 100/Half 100/Half 100/Half Communica Communicat tion Switch: Switch: Switch: 100/Full 100/Full 100/Full 100/Half 100/Half KX III: 100/Half 100/Half 100/Full Communica Communicat tion Switch: 100/Half KX III:...
  • Page 320: Dell Chassis Cable Lengths And Video Resolutions

    Appendix D: Specifications Dell Chassis Cable Lengths and Video Resolutions In order to maintain video quality, Raritan recommends using the following cable lengths and video resolutions when you are connecting to ® Dell blade chassis from the KX III: Video resolution...
  • Page 321 Raritan device.  CCID Requirements If the Raritan D2CIM-DVUSB VM/CCID is not recognized as a smart card reader by your Linux target, you may need to update the CCID driver version to 1.3.8 or above and update the driver configuration file (Info.plist).
  • Page 322: Supported Smart Card Readers

    Appendix D: Specifications  Create a Java ® Library Link A soft link must be created to the libpcsclite.so after upgrading RHEL 4, RHEL 5 and FC 10. For example, ln –s /usr/lib/libpcsclite.so.1 /usr/lib/libpcsclite.so, assuming installing the package places the libraries in /usr/lib or /user/local/lib ...
  • Page 323: Unsupported Smart Card Readers

    Appendix D: Specifications Unsupported Smart Card Readers This table contains a list of readers that Raritan has tested and found not to work with the Raritan device, therefore they are unsupported. If a smart card reader does not appear in the supported smart card readers table or in the unsupported smart card readers table, Raritan cannot guarantee it will function with the device.
  • Page 324 Appendix D: Specifications Recommendations for Audio Connections when PC Share Mode is Enabled If you are using the audio feature while running PC Share mode, audio playback and capture are interrupted if an additional audio device is connected to the target. For example, User A connects a playback device to Target1 and runs an audio playback application then User B connects a capture device to the same target.
  • Page 325: Number Of Supported Audio/Virtual Media And Smartcard Connections

    Appendix D: Specifications In practice, the bandwidth used when an audio device connects to a target is higher due to the keyboard and video data consumed when opening and using an audio application on the target. A general recommendation is to have at least a 1.5MB connection before running playback and capture.
  • Page 326: Kx Iii Supported Keyboard Languages

    KX III Local Console functions. For more information about non-US keyboards, see Informational Notes (on page 321). Note: Raritan strongly recommends that you use system-config-keyboard to change languages if you are working in a Linux environment. Language Regions Keyboard layout...
  • Page 327: Mac Mini Bios Keystroke Commands

    Appendix D: Specifications Language Regions Keyboard layout Spanish Spain and most Spanish Spanish speaking countries Portuguese Portugal Portuguese Mac Mini BIOS Keystroke Commands ® The following BIOS commands have been tested on Intel-based Mac ® ® Mini target servers and Mac Lion servers running Mac Snow Leopard The servers were attached to a KX III with D2CIM-DVUSB and D2CIM-VUSB CIMs.
  • Page 328: Using A Windows Keyboard To Access Mac Targets

    HTML client, the download of client software (Virtual KVM Client (VKC)) onto the client's host, and the transfer of KVM and virtual media data streams to the client. KX III (Raritan This port is used to discover other Dominion devices and for...
  • Page 329: Software

    Appendix D: Specifications Port Description KVM-over-IP) communication between Raritan devices and systems, including Protocol, CC-SG for devices that CC-SG management is available. Configurable Port By default, this is set to Port 5000, but you may configure it to use any 5000 TCP port not currently in use.
  • Page 330 Appendix D: Specifications Operating Systems Browsers  Internet Explorer 8,9,11 Windows 7 Ultimate SP1 64-bit  Firefox 25  Chrome 31  Internet Explorer 8 Windows 7 Ultimate 32-bit  Firefox 25  Chrome 31  Internet Explorer 10 ® Windows 8 64-bit ...
  • Page 331: Java And Microsoft .Net Requirements

    Certain versions of Safari block Java for security reasons. Since Java is ® required to use KX III, Raritan recommends you use Firefox instead. Additionally, you may be required to navigate through a number of messages. Select 'Do Not Block' if these messages are displayed.
  • Page 332: Events Captured In The Audit Log And Syslog

    Appendix D: Specifications Events Captured in the Audit Log and Syslog Following is a list and description of the events that are captured by the KX III audit log and syslog:  Access Login - A user has logged in to the KX III ...
  • Page 333: Appendix E Informational Notes

    Help link in the KX III Remote Console interface. Note: Some topics in this section reference other multiple Raritan devices because various devices are impacted by the information. Java Runtime Environment (JRE) Notes...
  • Page 334: Java Not Loading Properly On Mac

    Appendix E: Informational Notes b. Click the View Applets button. The Java Applet Cache Viewer opens. c. Deselect the Enable Caching checkbox if it is already checked. d. Click OK. 4. To clear the Java cache: a. From the Temporary Files Settings dialog, click the Delete Files button.
  • Page 335: Ipv6 Support Notes

    Appendix E: Informational Notes IPv6 Support Notes Operating System IPv6 Support Notes Java ™ Java 1.7 supports IPv6 for the following:  ™ Solaris 10 (and later)  ® Linux kernel 2.1.2 (and later)/RedHat 6.1 (and later)  Solaris 10 (and later) ...
  • Page 336: Dual Stack Login Performance Issues

    Appendix E: Informational Notes Dual Stack Login Performance Issues If you are using the KX III in a dual stack configuration, it is important you configured the domain system (DNS) correctly in the KX III in order to avoid delays when logging in. Tips for Adding a Web Browser Interface (on page 105) for information on configuring your DNS in KX III.
  • Page 337: Windows 2000 Composite Usb Device Behavior For Virtual Media

    As a result, the “Safely Remove Hardware” system tray icon does not appear for drives mapped by the D2CIM-VUSB and a warning message may appear when disconnecting the device. Raritan has not observed any problems or issues from this message, however.
  • Page 338: Cannot Write To/From A File From A Mac Client

    Appendix E: Informational Notes Cannot Write To/From a File from a Mac Client ® If you are connecting to the KX III from a Mac 10.8.5 client running ™ ® Safari 6.1 with Java 1.7 and cannot write to/from a file on a target server or access virtual media, do the following to correct this: 1.
  • Page 339: Virtual Media Via Vkc And Akc In A Windows Environment

    Appendix E: Informational Notes Virtual Media via VKC and AKC in a Windows Environment ® Windows XP operating system administrator and standard user ® privileges vary from those of the Windows Vista operating system and ® the Windows 7 operating system. When enabled in Vista or Windows 7, User Access Control (UAC) provides the lowest level of rights and privileges a user needs for an application.
  • Page 340: Virtual Media Linux Drive Listed Twice

    Appendix E: Informational Notes Virtual Media Linux Drive Listed Twice ™ For KX III, users who are logged in to Linux clients as root users, the drives are listed twice in the Local Drive drop-down. For example, you will see eg /dev/sdc and eg /dev/sdc1 where the first drive is the boot sector and the second drive is the first partition on the disk.
  • Page 341: Usb Port And Profile Notes

    Appendix E: Informational Notes USB Port and Profile Notes VM-CIMs and DL360 USB Ports ® DL360 servers have one USB port on the back of the device and another on the front of the device. With the DL360, both ports cannot be used at the same time.
  • Page 342 The USB Profile Menu selections are configurable via the Console Device Settings > Port Configuration page. Should none of the standard USB profiles provided by Raritan meet your target server requirements, Raritan Technical Support can work with you to arrive at a solution tailored for that target. Raritan recommends that you do the following: 1.
  • Page 343: Changing A Usb Profile When Using A Smart Card Reader

    2. If using a digital CIM, then change the Display Native Resolution on the Port Configuration page to another resolution, or 3. If using the HDMI CIM, use the DVI Compatibility Mode. Contact Raritan Technical Support for additional assistance. Sun Composite Synch Video ™...
  • Page 344: Suse/Vesa Video Modes

    Appendix E: Informational Notes SUSE/VESA Video Modes The SuSE X.org configuration tool SaX2 generates video modes using modeline entries in the X.org configuration file. These video modes do not correspond exactly with VESA video mode timing (even when a VESA monitor is selected). The KX III, on the other hand, relies on exact VESA mode timing for proper synchronization.
  • Page 345: Keyboard Language Preference (Fedora Linux Clients)

    ® Because the Sun on Linux has problems generating the correct KeyEvents for foreign-language keyboards configured using System Preferences, Raritan recommends that you configure foreign keyboards using the methods described in the following table. Language Configuration method US Intl Default...
  • Page 346 Appendix E: Informational Notes Language Configuration method US Intl Default German Keyboard Indicator Hungarian System Settings (Control Center) Spanish System Settings (Control Center) Swiss-German System Settings (Control Center) Norwegian Keyboard Indicator Swedish Keyboard Indicator Danish Keyboard Indicator Japanese System Settings (Control Center) Korean System Settings (Control Center) Slovenian...
  • Page 347: Macros Not Saving On Linux Target Servers

    Appendix E: Informational Notes 4. Add and remove languages as necessary. Macros Not Saving on Linux Target Servers If you receive the following error message when you create and then ™ ™ ® save a macro on a target server running Linux Fedora 18 with Java 1.7.0 (update 45 and later), disable SELinux in Fedora 18 on the target...
  • Page 348: Single Mouse Mode When Connecting To A Target Under Cc-Sg Control

    Features that May Interrupt an Audio Connection If you use any of the following features while connected to an audio device, your audio connection may be interrupted. Raritan recommends you do not use these features if you are connected to an audio device: ...
  • Page 349: Audio In A Linux Environment

    Virtual KVM Client Version Not Known from CC-SG Proxy Mode When the Virtual KVM Client (VKC) is launched from CommandCenter Secure Gateway (CC-SG) in proxy mode, the VKC version is unknown. In the About Raritan Virtual KVM Client dialog, the version is displayed as “Version Unknown”.
  • Page 350: Moving Between Ports On A Device

    Appendix E: Informational Notes Moving Between Ports on a Device If you move a between ports on the same Raritan device and resume management within one minute, CC-SG may display an error message. If you resume management, the display will be updated.
  • Page 351: Appendix F Frequently Asked Questions

    Appendix F Frequently Asked Questions In This Chapter General FAQs ..................339 Remote Access ..................341 Universal Virtual Media ................344 Bandwidth and KVM-over-IP Performance ........... 346 IPv6 Networking ..................350 Servers ....................351 Blade Servers ..................352 Installation....................354 Local Port - KX IIII .................
  • Page 352 OS-independent; users can troubleshoot and reconfigure servers even when servers are down. At the rack, Dominion KX III provides the same functionality, convenience, and space and cost savings as traditional analog KVM switches. However, Dominion KX III also integrates the industry’s highest performing KVM-over-IP...
  • Page 353: Remote Access

    How large is the Dominion KX III? Dominion KX III is only 1U high (except the KX3-864 and KX3-464, which are 2U), fits in a standard 19" rack mount and is only 11.4" (29 cm) deep.
  • Page 354 "ports." The local port can the local port? access the same server using the PC-Share feature. In order to access Dominion KX III Because Dominion KX III is completely Web-accessible, it doesn’t require customers from a client, what hardware,...
  • Page 355 Dominion KX access Dominion KX III is approximately 500KB III? How long does it take to in size. The following chart describes the time required to retrieve Dominion KX III’s applet at retrieve? different network speeds: 100Mbps Theoretical .05 seconds...
  • Page 356: Universal Virtual Media

    ® CommandCenter centralized management appliance. Which types of virtual media does Dominion KX III supports the following types of the Dominion KX III support? media: internal and USB-connected CD/DVD drives, USB mass storage devices, PC hard drives and ISO images.
  • Page 357 Appendix F: Frequently Asked Questions Question Answer What is required for virtual media? A Dominion KX III virtual media CIM is required. There are two VGA-based CIMs: a D2CIM-VUSB or D2CIM-DVUSB. The D2CIM-VUSB has a single USB connector and is for customers who will use virtual media at the OS level.
  • Page 358: Bandwidth And Kvm-Over-Ip Performance

    Appendix F: Frequently Asked Questions Question Answer Why would I use a USB profile? USB profiles are most often required at the BIOS level where there may not be full support for the USB specification when accessing virtual media drives. However, profiles are sometimes used at the OS level, for example, for mouse synchronization for Mac and Linux servers.
  • Page 359 Appendix F: Frequently Asked Questions Question Answer How is bandwidth used in Dominion KX III offers totally new video KVM-over-IP systems? processing that provides flexible, high performance video, efficient use of bandwidth and anytime/anywhere access via LAN, WAN or Internet.
  • Page 360 Appendix F: Frequently Asked Questions Question Answer What factors affect bandwidth? There are many factors that determine how much bandwidth will be used. The primary factor, noted above, is the amount of change in the target server’s video display. This is dependent on the user’s task and actions.
  • Page 361 Appendix F: Frequently Asked Questions Question Answer How do I optimize performance KX III provides a variety of settings in our and bandwidth? remote clients for the user to optimize bandwidth and performance. The default settings will provide an at-the-rack level of performance in standard LAN/WAN environments with economical use of bandwidth.
  • Page 362: Ipv6 Networking

    Appendix F: Frequently Asked Questions Question Answer What is the maximum remote (over The Dominion KX III is the first and only IP) video resolution supported? KVM-over-IP switch to support full high definition (HD) remote video resolution – 1920x1080 at frame rates up to 30 frames per second with digital audio.
  • Page 363: Servers

    Windows server to operate? KVM infrastructure to always be available in any scenario whatsoever (as they will likely need to use the KVM infrastructure to fix problems), Dominion KX III is designed to be completely independent from any external server.
  • Page 364: Blade Servers

    What comes in the Dominion KX III The following is included: (1) Dominion KX III box? unit, (2) Quick Setup Guide, (3) standard 19" rack mount brackets, (4) user manual CD-ROM, (6) localized AC line cord and (7) warranty certificate and other documentation.
  • Page 365 With the Dominion KX III, you don’t have to use these hotkeys. Just click on the name of the blade server, and the Dominion KX III will automatically switch to that blade without the explicit use of the hotkey.
  • Page 366: Installation

    Installation Question Answer Besides the unit itself, what do I Each server that connects to Dominion KX III need to order from Raritan to requires a Dominion or Paragon computer install Dominion KX III? interface module (CIM), an adapter that connects directly to the keyboard, video and mouse ports of the server.
  • Page 367 How many servers can be Dominion KX III models range from 8, 16 or 32 connected to each Dominion KX III server ports in a 1U chassis, to 64 server ports in a 2U chassis.
  • Page 368: Local Port - Kx Iiii

    Raritan’s Dominion SX line of secure console servers. Dominion SX offers more serial functionality at a better price point than Dominion KX III. This SX is easy to use, configure and manage, and can be completely integrated with a Dominion series deployment.
  • Page 369: Extended Local Port

    This means that: If the Dominion KX III is configured to interact with an external RADIUS, LDAP or Active Directory ® server, users attempting to access the local port will authenticate against the same server.
  • Page 370: Dual Power Supplies

    50–60 Hz. If a power supply or input fails, will The Dominion KX III front panel LED will notify I be notified? the user of a power failure. An entry will also be sent to the audit log and displayed on the KX remote client user interface.
  • Page 371: Ethernet And Ip Networking

    These come in many outlet, connector and amp variations. Note that you should not connect the PM series of power strips to the Dominion KX III as these power strips do not provide outlet-level switching. How many PDUs can be...
  • Page 372 Appendix F: Frequently Asked Questions Question Answer Can I access Dominion Yes. Dominion KX III not only uses standard KX III over a wireless connection? Ethernet, but also very conservative bandwidth with very high quality video. Thus, if a wireless...
  • Page 373: Local Port Consolidation, Tiering And Cascading

    Ethernet auto-negotiation. On some networks, problem? 10/100 auto-negotiation does not work properly, and the Dominion KX III unit must be set to 100 Mb/full duplex or the appropriate choice for its network. Duplicate IP address. If the IP address of the...
  • Page 374 Question Answer How do I physically connect To physically connect multiple KX III devices multiple Dominion KX III devices together for consolidated local access, you can together into one solution? connect the Tiering ports of multiple "tiered" (or "cascaded") KX III switches to a "base" KX III using the Tiering port of the KX III.
  • Page 375: Computer Interface Modules (Cims)

    Appendix F: Frequently Asked Questions Question Answer Do I have to physically connect Multiple Dominion KX III units do not need to Dominion KX III devices together? be physically connected together. Instead, each Dominion KX III unit connects to the network, and they automatically work together as a single solution if deployed with Raritan’s...
  • Page 376: Security

    Dominion KX III, Paragon CIMs transmit video at a distance of up to 150 feet (46 m), the same as Dominion KX III CIMs – not at 1,000 feet (304 m), as they do when connected to Paragon.
  • Page 377 128-bit encryption, both in its SSL communications as well as its own data stream. Literally no data is transmitted between remote clients and Dominion KX III that is not completely secured by encryption. Does Dominion KX III support AES Yes. The Dominion KX III utilizes the Advanced encryption as recommended by Encryption Standard (AES) for added security.
  • Page 378: Smart Cards And Cac Authentication

    Yes. Customers can upload self-signed or certificate to the Dominion KX IIKX certificate authority-provided digital certificates IIII? to the Dominion KX III for enhanced authentication and secure communication. Does the KX III support a Yes. For government, military and other...
  • Page 379: Manageability

    CommandCenter? CommandCenter. For the local port, connect a compatible smart card reader to the USB port of the Dominion KX III. Manageability Question Answer Can Dominion KX III be remotely Yes.
  • Page 380: Documentation And Support

    (but are not limited to): user login, user logout, user access of a particular server, unsuccessful login, configuration changes, etc. Yes. In addition to Dominion KX III’s own Can Dominion KX III integrate with syslog? internal logging capabilities, Dominion KX III can send all logged events to a centralized syslog server.
  • Page 381: Miscellaneous

    DisplayPort video standards are supported with the digital video CIMs. How long is the hardware warranty The Dominion KX III comes with a standard for the KX III? two-year warranty, which can be extended to 5 years of warranty coverage.
  • Page 382 In general, KX II customers can continue to How do I migrate from the use their existing switches for many years. As Dominion KX II to Dominion KX III? their data centers expand, customers can purchase and use the new KX III models.
  • Page 383: Index

    Index Apple Mac Mouse Settings • 33 Applying and Removing Scripts • 144, 148 Assign the KX III an IP Address • 37 A. AC Power • 34 Associating Outlets with Target Servers • 92 About Connection Properties • 217 Audio •...
  • Page 384 Index Caret Symbol (Linux Clients Only) • 332 Configuring Event Management - Destinations CC-SG Notes • 337 • 133, 134, 136, 141 Change the Default Password • 37 Configuring Event Management - Settings • Change the Keyboard Layout Code (Sun 134, 141 Targets) •...
  • Page 385 Index Decommission a KX III to Archive • 296 DVI Compatibility Mode • 306 Decommission a KX III to Storage • 296 Default Connection Property Settings - Optimized for Best Performance • 218 E. Connect Target Servers to the KX III • 36 Default Login Information •...
  • Page 386 Index Generic • 94 Generic Blade Chassis Configuration • 95 Getting Started • 9, 194, 204 Java and Microsoft .NET Requirements • 319 Group-Based IP ACL (Access Control List) • Java Not Loading Properly on Mac • 322 56, 60, 62, 163 Java Runtime Environment (JRE) Notes •...
  • Page 387 Index Left Panel • 23 Multi-Language Keyboard JRE Requirement • Link to a Blade Chassis Interface • 95 Linux Mouse Settings • 33 List of KX III SNMP Traps • 137 Local Console Smart Card Access • 251, 273 Name Command • 198 Local Console USB Profile Options •...
  • Page 388 RADIUS Communication Exchange 9, 10, 14 Specifications • 75 Select the Local Console Keyboard Type • Raritan Client Navigation when Using Dual 118, 187 Video Port Groups • 206 Select the Local Port Connect Key • 120, 189 Rear Mount • 29 Select the Local Port Hotkey •...
  • Page 389 Index Software • 3, 317 Supported Paragon II CIMS and Special Sun Key Combinations • 268 Configurations • 161, 283 Specifications • 297 Supported Protocols • 41 Specify Power Supply Autodetection • 40 Supported Remote Connections • 306 SSH Access from a UNIX/Linux Workstation • Supported Smart Card Readers •...
  • Page 390 Index Update a Smart Card Reader • 253 Virtual Media Not Refreshed After Files Added Updating the LDAP Schema • 207 • 327 Updating the Schema Cache • 212 Virtual Media Notes • 325 Upgrade History • 178 Virtual Media via VKC and AKC in a Windows Upgrading CIMs •...
  • Page 392: United Kingdom

    For CommandCenter Secure Gateway: Press 6, then Press 2 Phone: +31-10-2844040 Fax: 732-764-8887 Email: tech.europe@raritan.com Email for CommandCenter NOC: tech-ccnoc@raritan.com Email for all other products: tech@raritan.com United Kingdom Monday - Friday 8:30 a.m. to 5 p.m. GMT China Phone +44(0)20-7090-1390...

Table of Contents