1. DL manuals
  2. Raritan
  3. Switch
  4. Dominion KX III
  5. Administrator's Manual

Raritan Dominion KX III Administrator's Manual

Summary of Dominion KX III

  • Page 1

    Copyright © 2014 raritan, inc. Dkx3a-v3.0.0-0b-e february 2014 255-62-0002-00 dominion kx iii administrator guide release 3.0.0

  • Page 2

    This document contains proprietary information that is protected by copyright. All rights reserved. No part of this document may be photocopied, reproduced, or translated into another language without express prior written consent of raritan, inc. © copyright 2014 raritan, inc. All third-party softw...

  • Page 3

    Iii contents chapter 1 introduction 1 overview ........................................................................................................................................ 1 what's new in help ..................................................................................................

  • Page 4

    Contents iv kx iii local console interface ..................................................................................................... 26 chapter 4 kx iii administrator help 27 overview ...........................................................................................................

  • Page 5

    Contents v stopping cc-sg management ........................................................................................ 180 diagnostics ................................................................................................................................ 181 network interface page .....

  • Page 6

    Contents vi noise filter ....................................................................................................................... 220 connection information .............................................................................................................. 221 access and co...

  • Page 7

    Contents vii unmount (remove) a smart card reader ...................................................................... 253 digital audio ............................................................................................................................... 254 supported audio device format...

  • Page 8

    Contents viii local console smart card access ............................................................................................ 273 local console usb profile options ........................................................................................... 275 kx iii local console factor...

  • Page 9

    Contents ix supported kx iii local port dvi resolutions .................................................................. 302 supported computer interface module (cims) specifications ........................................ 302 supported digital video cims for mac ....................................

  • Page 10

    Contents x changing a usb profile when using a smart card reader ........................................... 331 video mode and resolution notes ............................................................................................ 331 video image appears dark when using a mac ...................

  • Page 11

    Contents xi appendix f frequently asked questions 339 general faqs ............................................................................................................................ 339 remote access .............................................................................................

  • Page 13: Introduction

    1 in this chapter overview .................................................................................................... 1 what's new in help ................................................................................... 1 package contents ...................................................

  • Page 14

    Chapter 1: introduction 2 package contents each kx iii ships as a fully-configured stand-alone product in a standard 1u (2u for with the following contents: amount included item 1 kx iii device 1 kx iii quick setup guide 1 rackmount kit 2 ac power cords 1 set of 4 rubber feet (for desktop use) 1 app...

  • Page 15

    Chapter 1: introduction 3  dcim-ps2 dvi monitor support from the dvi local port  vga support via a dvi to vga converter  dvi support via a standard dvi cable support for tiering in which a base kx iii device is used to access multiple other tiered devices multiple user capacity (1/2/4/8 remote us...

  • Page 16

    Chapter 1: introduction 4 support for digital audio over usb port scanning and thumbnail view of up to 32 targets within a configurable scan set web-based access and management intuitive graphical user interface (gui) support for dual port video output 256-bit encryption of complete kvm signal, incl...

  • Page 17

    Chapter 1: introduction 5 diagram key dual power ac 100v/240v local usb ports dvi-d port 32 kvm ports utp cabling (cat5/5e/6) dual 10/100/1000 ethernet access tier port note: release kx iii 3.0.0 does not provide modem support, but will in a future release..

  • Page 18

    Chapter 1: introduction 6 dominion kx3-864 kx3-864 photos kx3-864 features diagram key dual power ac 100v/240v local usb ports dvi-d port 64 kvm ports utp cabling (cat5/5e/6) dual 10/100/1000 ethernet access tier port.

  • Page 19

    Chapter 1: introduction 7 diagram key note: release kx iii 3.0.0 does not provide modem support, but will in a future release. Supported users and ports per model model ports remote users kx3-864 64 8 kx3-832 32 8 kx3-808 8 8 kx3-464 64 4 kx3-432 32 4 kx3-416 16 4 kx3-232 32 2 kx3-216 16 2 kx3-132 3...

  • Page 20

    Chapter 1: introduction 8 kx iii online help kx iii online help is considered your primary help resource. Pdf versions of help are a secondary resource. See the kx iii release notes for important information on the current release before you begin using the kx iii. Kvm client help is provided as par...

  • Page 21: Getting Started

    9 in this chapter install and configure kx iii ........................................................................ 9 allow pop-ups ........................................................................................... 9 security warnings and validation messages ...............................

  • Page 22

    Chapter 2: getting started 10 additional security warnings even after an ssl certificate is installed in the kx iii, depending on your browser and security settings, additional security warnings may be displayed when you log in to kx iii. It is necessary to accept these warnings to launch the kx iii...

  • Page 23

    Chapter 2: getting started 11 example 1: import the certificate into the browser in this example, you import the certificate into the browser. Steps open an ie browser, then log in to kx iii. Click more information on the first java ™ security warning. Click view certificate details on the more info...

  • Page 24

    Chapter 2: getting started 12 steps click the content tab. Click certificates. The certificate import wizard opens and walks you through each step.  file to import - browse to locate the certificate  certificate store - select the location to store the certificate click finish on the last step of ...

  • Page 25

    Chapter 2: getting started 13 example 2: add the kx iii to trusted sites and import the certificate in this example, the kx iii's url is added as a trusted site, and the self signed certificate is added as part of the process. Steps open an ie browser, then select tools > internet options to open th...

  • Page 26

    Chapter 2: getting started 14 steps open an ie browser, then log in to kx iii. Click more information on the first java ™ security warning. Click view certificate details on the more information dialog. You are prompted to install the certificate. Follow the wizard steps. For details see, example 1:...

  • Page 27

    Chapter 2: getting started 15 or  http://ip-address/akc for the microsoft .Net-based active kvm client ip-address is the ip address assigned to your kx iii you can also use https, or the dns name of the kx iii assigned by your administrator (if applicable). You are always redirected to the ip addre...

  • Page 28

    16 in this chapter overview .................................................................................................. 16 kx iii remote console interface ............................................................. 16 kx iii local console interface .............................................

  • Page 29

    Chapter 3: kx iii interface and navigation 17 port access page (remote console display) after a successful login, the port access page opens listing all ports along with their status and availability. Ports connected to kvm target servers (blades and standard servers) are displayed in blue. Right-cl...

  • Page 30

    Chapter 3: kx iii interface and navigation 18 blade chassis - port access page the blade chassis is displayed in an expandable, hierarchical list on the port access page, with the blade chassis at the root of the hierarchy and the individual blades labeled and displayed below the root. Use the expan...

  • Page 31

    Chapter 3: kx iii interface and navigation 19 view by group tab the view by group tab displays blade chassis, 'standard' port groups, and dual video port groups. Click the expand arrow icon next to a group to view the ports assigned to the port group. See device management for information on creatin...

  • Page 32

    Chapter 3: kx iii interface and navigation 20 port action menu when you click a port name in the port access list, the port actionmenu appears. Choose the desired menu option for that port to execute it. Note that only currently available options, depending on the port's status and availability, are...

  • Page 33

    Chapter 3: kx iii interface and navigation 21 switch from switch from - switches from an existing connection to the selected port (kvm target server). This menu item is available only for kvm targets, and only when a virtual kvm client is opened. Note: this menu item is not available on the kx iii l...

  • Page 34

    Chapter 3: kx iii interface and navigation 22 note: this menu item is not available on the kx iii local console. The only way to disconnect from the switched target in the local console is to use the hot key. Power on power on - powers on the target server through the associated outlet. This option ...

  • Page 35

    Chapter 3: kx iii interface and navigation 23 left panel the left panel of the kx iii interface contains the following information. Note that some information is conditional - meaning it is displayed based on your role, features being used and so on. Conditional information is noted here. Informatio...

  • Page 36

    Chapter 3: kx iii interface and navigation 24 information description when displayed? Powerin1 status of the power 1 outlet connection. Either on or off, or auto-detect off always powerin2 status of the power 2 outlet connection. Either on or off, or auto-detect off always configured as base or conf...

  • Page 37

    Chapter 3: kx iii interface and navigation 25 collapse the left panel the left panel can be collapsed in order to increase the display area of the page. To collapse the left panel: click on the blue, left-facing arrow located approximately halfway down the left side of the panel. Once the panel is c...

  • Page 38

    Chapter 3: kx iii interface and navigation 26 kx iii local console interface there are many similarities among the kx iii local console and the kx iii remote console graphical user interfaces. Where there are differences, they are noted in the help. For details on using the local console see kx iii ...

  • Page 39: Kx Iii Administrator Help

    27 in this chapter overview .................................................................................................. 27 kx iii installation and configuration ........................................................ 28 rack pdu (power strip) outlet control .....................................

  • Page 40

    Chapter 4: kx iii administrator help 28 kx iii installation and configuration see the kx iii quick setup guide that came with your device or download it from raritan's support website for a quick reference to the basic, bear minimum setup steps. Additional information and optional steps included her...

  • Page 41

    Chapter 4: kx iii administrator help 29 5. When connecting cables to the rear panel of the kx iii drape them over the cable-support bar. Rear mount the steps correspond to the numbers shown in the rear rackmount diagrams. 1. Secure the cable-support bar to the front end of the side brackets, near th...

  • Page 42

    Chapter 4: kx iii administrator help 30 default value password raritan the first time you start the kx iii, you are required to change the default password. Ip address 192.168.0.192. Important: for backup and business continuity purposes, it is strongly recommended that you create a backup administr...

  • Page 43

    Chapter 4: kx iii administrator help 31 mouse settings raritan recommends using absolute mouse synchronization to minimize mouse settings on target servers. For other mouse modes, see additional supported mouse settings (on page 31). In this mode, absolute coordinates are used to keep the client and...

  • Page 44

    Chapter 4: kx iii administrator help 32 windows 7 and windows vista mouse settings configure these mouse settings in windows 7 ® and windows vista ® : configure the motion settings: set the mouse motion speed setting to exactly the middle speed disable the "enhanced pointer precision" option disable...

  • Page 45

    Chapter 4: kx iii administrator help 33 apple mac mouse settings configure these apple mac ® mouse settings: absolute mouse synchronization is required for proper mouse synchronization on kvm target servers running a mac ® operating system. In order for absolute mouse synchronization to work, a virt...

  • Page 46

    Chapter 4: kx iii administrator help 34 ibm aix mouse settings configure these ibm aix ® mouse settings: go to the style manager, click on mouse settings and set mouse acceleration to 1.0 and threshold to 3.0 step 3: connecting the equipment a. Ac power connect the power supply(s): 1. Attach the inc...

  • Page 47

    Chapter 4: kx iii administrator help 35 b. Network port the kx iii provides two ethernet ports for failover purposes - not for load-balancing. By default, only lan1 is active, and the automatic failover is disabled. Enable network failover if you want lan2 to use the same ip address should the kx ii...

  • Page 48

    Chapter 4: kx iii administrator help 36 2. Connect one end of a dvi cable into the dvi-d port on the back of the kx iii. 3. Connect the other end of the dvi cable into the dvi port on the dvi monitor. Connect to a vga monitor (optional) to connect to a vga monitor: 1. Connect a usb keyboard and mous...

  • Page 49

    Chapter 4: kx iii administrator help 37 change the default password the first time you start the kx iii, you are required to change the default password. To change the default password: 1. Once the unit has booted, enter the default username admin and password raritan. Click login. 2. Enter the old ...

  • Page 50

    Chapter 4: kx iii administrator help 38 select this option if you want to ensure redundant failover capabilities should the primary ethernet port (or the switch/router to which it is connected) fail. If it fails, kx iii fails over to the secondary network port with the same ip address, ensuring ther...

  • Page 51

    Chapter 4: kx iii administrator help 39  router discovery - use this option to automatically assign ipv6 addresses that have global or unique local significance beyond that of the link local, which only applies to a directly connected subnet. 2. Next, configure dns settings. Configure the dns setti...

  • Page 52

    Chapter 4: kx iii administrator help 40 specify power supply autodetection the kx iii provides dual power supplies. When both power supplies are used, the kx iii automatically detects them and notifies you of their status. Additionally, both the powerln1 and powerln2 auto detect checkboxes are autom...

  • Page 53

    Chapter 4: kx iii administrator help 41 5. For the synchronize with ntp server option: a. Enter the ip address of the primary time server. B. Enter the ip address of the secondary time server. Optional note: if dhcp is selected for the network settings on the network page, the ntp server ip address ...

  • Page 54

    Chapter 4: kx iii administrator help 42 step 5: launching the kx iii remote console log in to your kx iii remote console from any workstation with network connectivity that has microsoft .Net ® and/or java runtime environment ® installed. To launch the kx iii remote console: 1. Launch a supported we...

  • Page 55

    Chapter 4: kx iii administrator help 43 switch between target servers to switch between kvm target servers: 1. While already using a target server, access the kx iii port access page. 2. Click the port name of the target you want to access. The port action menu appears. 3. Choose switch from in the ...

  • Page 56

    Chapter 4: kx iii administrator help 44 change the keyboard layout code (sun targets) use this procedure if you are using a dcim-susb and want to change the keyboard layout to another language. To change the keyboard layout code (dcim-susb only): 1. Open a text editor window on the sun ™ workstation...

  • Page 57

    Chapter 4: kx iii administrator help 45 rack pdu (power strip) outlet control overview the kx iii allows you to control raritan px and rpc series rack pdu (power strip) outlets connected to the kx iii through a d2cim-pwr. Once a px or rpc series is setup and then attached to the kx iii, the rack pdu...

  • Page 58

    Chapter 4: kx iii administrator help 46 initially, when you open the powerstrip page, the power strips that are currently connected to the kx iii are displayed in the powerstrip drop-down. Additionally, information relating to the currently selected power strip is displayed. If no power strips are c...

  • Page 59

    Chapter 4: kx iii administrator help 47 to cycle the power of an outlet: 1. Click cycle next to the outlet you want to cycle. The power cycle port dialog opens. 2. Click ok. The outlet will then cycle (note that this may take a few seconds). 3. Once the cycling is complete the dialog will open. Clic...

  • Page 60

    Chapter 4: kx iii administrator help 48 cim compatibility in order to make use of usb profiles, you must use a virtual media cim with updated firmware. For a list of virtual media cims, see supported computer interface module (cims) specifications (on page 302). Available usb profiles the current re...

  • Page 61

    Chapter 4: kx iii administrator help 49 usb profile description bios dell optiplex 790 keyboard only use this profile for dell optiplex 790 when using keyboard macros during bios operations. Only keyboard is enabled with this profile. Restrictions:  mouse is disabled.  virtual cd-rom and disk driv...

  • Page 62

    Chapter 4: kx iii administrator help 50 usb profile description bios generic bios generic use this profile when generic os profile does not work on the bios. Warning: usb enumeration will trigger whenever virtual media is connected or disconnected. Restrictions:  usb bus speed limited to full-speed...

  • Page 63

    Chapter 4: kx iii administrator help 51 usb profile description bios lenovo thinkpad t61 & x61 bios lenovo thinkpad t61 and x61 (boot from virtual media) use this profile to boot the t61 and x61 series laptops from virtual media. Restrictions:  usb bus speed limited to full-speed (12 mbit/s) generi...

  • Page 64

    Chapter 4: kx iii administrator help 52 usb profile description mac os x ® 10.4.9 (and later) mac os x version 10.4.9 (and later) this profile compensates the scaling of mouse coordinates introduced in recent versions of mac os x. Select this if the remote and local mouse positions get out of sync n...

  • Page 65

    Chapter 4: kx iii administrator help 53 usb profile description  mass storage  usb bus speed limited to full-speed (12 mbit/s)  virtual cd-rom and disk drives cannot be used simultaneously warning: usb enumeration will trigger whenever virtual media is connected or disconnected. Troubleshooting 3...

  • Page 66

    Chapter 4: kx iii administrator help 54 2. Select single mouse mode. The mouse now responds. Note: mouse speed may be slow while in single mouse mode. 3. Once you are out of the boot menu and back to the os x, exit single mouse mode and switch back to absolute mouse mode. Selecting profiles for a kv...

  • Page 67

    Chapter 4: kx iii administrator help 55 user description unknown this is the default group for users who are authenticated externally using ldap/ldaps or radius or who are unknown to the system. If the external ldap/ldaps or radius server does not identify a valid user group, the unknown group is us...

  • Page 68

    Chapter 4: kx iii administrator help 56 relationship between users and groups users belong to a group and groups have privileges. Organizing the various users of your kx iii into groups saves time by allowing you to manage permissions for all users in a group at once, instead of managing permissions...

  • Page 69

    Chapter 4: kx iii administrator help 57 6. Click ok. Setting permissions permission description device access while under cc-sg management allows users and user groups with this permission to directly access the kx iii using an ip address when local access is enabled for the device in cc-sg. The dev...

  • Page 70

    Chapter 4: kx iii administrator help 58 permission description associations), event management (snmp, syslog), virtual media file server setups. Diagnostics network interface status, network statistics, ping host, trace route to host, kx iii diagnostics. Maintenance backup and restore database, firm...

  • Page 71

    Chapter 4: kx iii administrator help 59 port access option description will also be granted. In order for all users in a user group to see kvm switches that are added, each user must be granted control access. If they don't have this permission and a kvm switch is added at a later time, they will no...

  • Page 72

    Chapter 4: kx iii administrator help 60 4. Click ok. Group-based ip acl (access control list) important: exercise caution when using group-based ip access control. It is possible to be locked out of your kx iii if your ip address is within a range that has been denied access. This feature limits acc...

  • Page 73

    Chapter 4: kx iii administrator help 61 2. Enter the starting ip and ending ip fields. 3. Choose the action from the action drop-down list. 4. Click insert. If the rule number you just typed equals an existing rule number, the new rule is placed ahead of the exiting rule and all rules are moved down...

  • Page 74

    Chapter 4: kx iii administrator help 62 3. Set the port permissions. Specify the server ports that can be accessed by users belonging to this group (and the type of access). See setting port permissions (on page 58). 4. Set the ip acl (optional). This feature limits access to the kx iii device by sp...

  • Page 75

    Chapter 4: kx iii administrator help 63 adding a new user it is a good idea to define user groups before creating kx iii users because, when you add a user, you must assign that user to an existing user group. See adding a new user group. From the user page, you can add new users, modify user inform...

  • Page 76

    Chapter 4: kx iii administrator help 64 view the kx iii users list the user list page displays a list of all users including their user name, full name, and user group. The list can be sorted on any of the columns by clicking on the column name. From the user list page, you can add, modify, or delet...

  • Page 77

    Chapter 4: kx iii administrator help 65 username - username for user logins and target connections access from - ip address of client pc accessing the kx iii status - current active or inactive status of the connection to view users by port: choose user management > user by port. The users by port p...

  • Page 78

    Chapter 4: kx iii administrator help 66 modifying an existing user to modify an existing user: 1. Open the user list page by choosing user management > user list. 2. Locate the user from among those listed on the user list page. 3. Click the user name. The user page opens. 4. On the user page, chang...

  • Page 79

    Chapter 4: kx iii administrator help 67 4. If you choose ldap/ldaps, read the section entitled implementing ldap remote authentication for information about completing the fields in the ldap section of the authentication settings page. 5. If you choose radius, read the section entitled implementing ...

  • Page 80

    Chapter 4: kx iii administrator help 68  microsoft active directory. Active directory is an implementation of ldap/ldaps directory services by microsoft for use in windows environments. 8. Type the name of the active directory domain if you selected microsoft active directory. For example, acme.Com...

  • Page 81

    Chapter 4: kx iii administrator help 69 11. If you entered a distinguished name for the administrative user, you must enter the password that will be used to authenticate the administrative user's dn against the remote authentication server. Enter the password in the secret phrase field and again in...

  • Page 82

    Chapter 4: kx iii administrator help 70 15. Select the enable ldaps server certificate validation checkbox to use the previously uploaded root ca certificate file to validate the certificate provided by the server. If you do not want to use the previously uploaded root ca certificate file, leave thi...

  • Page 83

    Chapter 4: kx iii administrator help 71 once the test is completed, a message will be displayed that lets you know the test was successful or, if the test failed, a detailed error message will be displayed. It will display successful result or detail error message in failure case. It also can displa...

  • Page 84

    Chapter 4: kx iii administrator help 72 important notes group name is case sensitive. The kx iii provides the following default groups that cannot be changed or deleted: admin and . Verify that your active directory server does not use the same group names. If the group information returned from the...

  • Page 85

    Chapter 4: kx iii administrator help 73 9. The default number of retries is 3 retries. This is the number of times the kx iii will send an authentication request to the radius server. 10. Choose the global authentication type from among the options in the drop-down list:  pap - with pap, passwords ...

  • Page 86

    Chapter 4: kx iii administrator help 74 cisco acs 5.X for radius authentication if you are using a cisco acs 5.X server, after you have configured the kx iii for radius authentication, complete the following steps on the cisco acs 5.X server. Note: the following steps include the cisco menus and men...

  • Page 87

    Chapter 4: kx iii administrator help 75 returning user group information via radius when a radius authentication attempt succeeds, the kx iii determines the permissions for a given user based on the permissions of the user's group. Your remote radius server can provide these user group names by retu...

  • Page 88

    Chapter 4: kx iii administrator help 76 attribute data log out accounting-request(4) acct-status (40) stop(2) - stops the accounting nas-port-type (61) virtual (5) for network connections. Nas-port (5) always 0. Nas-ip-address (4) the ip address for the kx iii. User-name (1) the user name entered at...

  • Page 89

    Chapter 4: kx iii administrator help 77 user authentication process remote authentication follows the process specified in the flowchart below:.

  • Page 90

    Chapter 4: kx iii administrator help 78 changing a password to change your kx iii password: 1. Choose user management > change password. The change password page opens. 2. Type your current password in the old password field. 3. Type a new password in the new password field. Retype the new password ...

  • Page 91

    Chapter 4: kx iii administrator help 79 device management network settings use the network settings page to customize the network configuration (for example, the ip address, discovery port, and lan interface parameters) for your kx iii. There are two options available to set up your ip configuration...

  • Page 92

    Chapter 4: kx iii administrator help 80 a. Enter the ip address if needed. The default ip address is 192.168.0.192. B. Enter the subnet mask. The default subnet mask is 255.255.255.0. C. Enter the default gateway if none is selected from the ip auto configuration drop-down. D. Enter the preferred dh...

  • Page 93

    Chapter 4: kx iii administrator help 81 if none is selected for the ip auto configuration, the following network basic settings fields are enabled: global/unique ip address, prefix length, and gateway ip address allowing you to manually set the ip configuration.  router discovery - use this option ...

  • Page 94

    Chapter 4: kx iii administrator help 82 see lan interface settings (on page 82) for information in configuring this section of the network settings page. Note: in some environments, the default lan interface speed & duplex setting autodetect (autonegotiator) does not properly set the network paramet...

  • Page 95

    Chapter 4: kx iii administrator help 83 2. Choose the lan interface speed & duplex from the following options:  autodetect (default option)  10 mbps/half - both leds blink  10 mbps/full - both leds blink  100 mbps/half - yellow led blinks  100 mbps/full - yellow led blinks  1000 mbps/full (gig...

  • Page 96

    Chapter 4: kx iii administrator help 84 configuring ports access the port configuration page to access a port configuration: 1. Choose device settings > port configuration. The port configuration page opens. This page is initially displayed in port number order, but can be sorted on any of the field...

  • Page 97

    Chapter 4: kx iii administrator help 85 port name ports with no cim connected or with a blank cim name, a default port name of is assigned, where port# is the number of the kx iii physical port. Ports that are currently not connected to the kx iii via a cim have a status of not available. To rename ...

  • Page 98

    Chapter 4: kx iii administrator help 86 configuring standard target servers to name the target servers: 1. Connect all of the target servers if you have not already done so. See step 3: connect the equipment for a description of connecting the equipment. 2. Choose device settings > port configuratio...

  • Page 99

    Chapter 4: kx iii administrator help 87 configuring kvm switches the kx iii also supports use of hot key sequences to switch between targets. In addition to using hot key sequences with standard servers, kvm switching is supported by blade chassis and in tiered configurations. Important: in order fo...

  • Page 100

    Chapter 4: kx iii administrator help 88 e. Username field - enter the username parameter that will be used in the url. For example username=admin, where username is the username field. F. Password field - enter the password parameter that will be used in the url. For example password=raritan, where ...

  • Page 101

    Chapter 4: kx iii administrator help 89 8. Click ok. Configuring rack pdu (power strip) targets the kx iii allows you to connect rack pdus (power strips) to kx iii ports. Kx iii rack pdu configuration is done from the kx iii port configuration page. Note: raritan recommends no more than eight (8) ra...

  • Page 102

    Chapter 4: kx iii administrator help 90 diagram key px rack pdu with serial port d2cim-pwr kx iii d2cim-pwr to rack pdu serial port connection d2cim-pwr to kx iii target server port via cat5 cable naming the rack pdu (port page for power strips) note: px rack pdus (power strips) can be named in the ...

  • Page 103

    Chapter 4: kx iii administrator help 91 3. Click ok..

  • Page 104

    Chapter 4: kx iii administrator help 92 associating outlets with target servers the port page opens when you click on a port on the port configuration page. If an outlet is connected to the same server that the port is connected to, a power association can be made with the target server. A server ca...

  • Page 105

    Chapter 4: kx iii administrator help 93 4. Click ok. That rack pdu/outlet association is removed and a confirmation message is displayed. To remove a rack pdu association if the rack pdu has been removed from the target: 1. Click device settings > port configuration and then click on the active targ...

  • Page 106

    Chapter 4: kx iii administrator help 94 generic a generic option allows you to configure a blade chassis that is not a dell poweredge ® 1855, 1955 and m1000e, ibm bladecenter ® models e and h, hp bladesystem c3000 and c7000, or cisco ucs blade server. Hp hp bladesystem c3000 and c7000, and cisco ucs...

  • Page 107

    Chapter 4: kx iii administrator help 95 link to a blade chassis interface you are able to configure the connection to a blade chassis web browser interface if one is available. At the chassis level, up to four links can be defined. The first link is reserved for connection to the blade chassis admin...

  • Page 108

    Chapter 4: kx iii administrator help 96 3. On the port configuration page, click on the name of the blade chassis you want to configure. The port page will open. 4. Select the blade chassis radio button. The page will then display the necessary fields to configure a blade chassis. 5. Select generic ...

  • Page 109

    Chapter 4: kx iii administrator help 97 c. Username - enter the username used to access the interface. Optional d. Password - enter the password used to access the interface. Optional note: leave the username and password fields blank for drac, ilo, and rsa web applications or the connection will fa...

  • Page 110

    Chapter 4: kx iii administrator help 98 3. On the port configuration page, click on the name of the blade chassis you want to configure. The port page will open. 4. Select the blade chassis radio button. The page will then display the necessary fields to configure a blade chassis. 5. Select the dell...

  • Page 111

    Chapter 4: kx iii administrator help 99 if operating in auto-discovery mode, the installed box will display the slots containing blades during discovery. 5. In the blade chassis managed links section of the page, you are able to configure the connection to a blade chassis web browser interface if on...

  • Page 112

    Chapter 4: kx iii administrator help 100 select the cims native, display resolution from the display native resolution drop-down. This is the preferred resolution and timing mode of the digital cim. Once a resolution is selected, it is applied to the cim. 1. If no selection is made, the default 1024...

  • Page 113

    Chapter 4: kx iii administrator help 101 a. Active - to activate the link once it is configured, select the active checkbox. Leave the checkbox deselected to keep the link inactive. Entering information into the link fields and saving can still be done even if active is not selected. Once active is ...

  • Page 114

    Chapter 4: kx iii administrator help 102 5. Select the ibm ® blade chassis model from the blade server chassis model drop-down. To configure a ibm bladecenter h and e: 1. If you selected ibm bladecenter ® h or e, auto-discovery is available. Configure the blade chassis as applicable. Prior to config...

  • Page 115

    Chapter 4: kx iii administrator help 103 the first url link is intended for use to connect to the blade chassis administration module gui. Note: access to the url links entered in this section of the page is governed by the blade chassis port permissions. A. Active - to activate the link once it is ...

  • Page 116

    Chapter 4: kx iii administrator help 104 c. Maximum number of slots - enter the default maximum number of slots available on the blade chassis. D. Port number - the default port number for the blade chassis is 22. Not applicable. E. Username - not applicable. F. Password - not applicable. 2. Change ...

  • Page 117

    Chapter 4: kx iii administrator help 105 e. The username field and password field, which are both optional, contain the labels that are expected to be associated with the username and password entries. It is in these fields you should enter the field names for the username and password fields used o...

  • Page 118

    Chapter 4: kx iii administrator help 106 4. If username and password were entered, in the username field and password field, type the field names for the username and password fields that are used in the login screen for the web application. You must view the html source of the login screen to find ...

  • Page 119

    Chapter 4: kx iii administrator help 107 hp and cisco ucs blade chassis configuration (port group management) the kx iii supports the aggregation of ports connected to certain types of blades into a group representing the blade chassis. Specifically, cisco ® ucs, hp ® bladeserver blades and dell ® p...

  • Page 120

    Chapter 4: kx iii administrator help 108 4. Select the blade server group checkbox. If you want to designate that these ports are attached to blades housed in a blade chassis (for example, hp c3000 or dell poweredge 1855), select the blade server group checkbox. Note: this is especially important to...

  • Page 121

    Chapter 4: kx iii administrator help 109 supported blade chassis models this table contains the blade chassis models that are supported by the kx iii and the corresponding profiles that should be selected per chassis model when configuring them in the kx iii application. A list of these models can b...

  • Page 122

    Chapter 4: kx iii administrator help 110 blade chassis connection method recommended cim(s) generic if a d2cim-vusb or d2cim-dvusb is used when connecting to a blade-chassis configured as generic, you will be able to select the usb profiles from the port configuration page and the client's usb profi...

  • Page 123

    Chapter 4: kx iii administrator help 111 blade chassis connection method recommended cim(s) vga monitors with ddc support. Source: dell chassis management controller, firmware version 1.0, user guide hp ® bladesystem c3000 the hp c-class blade suv cable enables you to perform blade chassis administr...

  • Page 124

    Chapter 4: kx iii administrator help 112 blade chassis connection method recommended cim(s) the management module only features the leds for displaying status. All ethernet and kvm connections are fed through to the rear to the lan and kvm modules. The kvm module is a hot swap module at the rear of ...

  • Page 125

    Chapter 4: kx iii administrator help 113 blade chassis required/recommended action done.  do not designate any slots for scan operations in the ikvm gui setup scan menu. Ikvm may not work correctly otherwise.  do not designate any slots for broadcast keyboard/mouse operations in the ikvm gui setup...

  • Page 126

    Chapter 4: kx iii administrator help 114 blade chassis required/recommended action ibm ® /dell ® auto-discovery  it is recommended that auto-discovery be enabled when applying blade level access permissions. Otherwise, set access permissions on a blade-chassis wide basis.  secure shell (ssh) must ...

  • Page 127

    Chapter 4: kx iii administrator help 115 blade chassis sample url format password: calvin password field: text_password ibm ® bladecenter ® e or h http://192.168.84.217/private/welcome.Ssi configuring usb profiles (port page) you choose the available usb profiles for a port in the select usb profile...

  • Page 128

    Chapter 4: kx iii administrator help 116  ctrl-click to select several discontinuous profiles. 2. Click add. The selected profiles appear in the selected list. These are the profiles that can be used for the kvm target server connected to the port. To specify a preferred usb profile: 1. After selec...

  • Page 129

    Chapter 4: kx iii administrator help 117 configuring kx iii local port settings note: some changes you make to the settings on the local port settings page restart the browser you are working in. If a browser restart occurs when a setting is changed, it is noted in the steps provided here. To config...

  • Page 130

    Chapter 4: kx iii administrator help 118 configure the local port scan mode settings 1. If needed, configure the local port scan mode settings. These settings apply to scan settings feature, which is accessed from the port page. See scanning ports.  in the "display interval (10-255 sec):" field, sp...

  • Page 131

    Chapter 4: kx iii administrator help 119  us  portuguese (portugal)  us/international  norwegian (norway)  united kingdom  swedish (sweden)  french (france)  danish (denmark)  german (germany)  belgian (belgium)  german (switzerland)  hungarian  simplified chinese  spanish  traditiona...

  • Page 132

    Chapter 4: kx iii administrator help 120 select the local port connect key 1. Select the local port connect key. Use a connect key sequence to connect to a target and switch to another target. You can then use the hot key to disconnect from the target and return to the local port gui. Once the local...

  • Page 133

    Chapter 4: kx iii administrator help 121 b. Set the amount of time (in minutes) in which power save mode will be initiated. Select the local user authentication 1. Choose the type of local user authentication.  local/ldap/radius. This is the recommended option. For more information about authentica...

  • Page 134

    Chapter 4: kx iii administrator help 122 device services enabling ssh enable ssh access to allow administrators to access the kx iii via the ssh v2 application. To enable ssh access: 1. Choose device settings > device services. The device service settings page opens. 2. Select enable ssh access. 3. ...

  • Page 135

    Chapter 4: kx iii administrator help 123 configuring and enabling tiering the tiering feature allows you to access kx iii targets and pdus through one base kx iii device. Devices can be added and removed from a tiering configuration as needed up to a maximum of two tiered levels. When setting up the...

  • Page 136

    Chapter 4: kx iii administrator help 124 permitted kx iii tiering configurations before tiering devices, review before creating a tiering configuration (on page 123). Following are the permitted tiering configurations for kx iii: kx iii base device > kx iii tiered devices kx iii base device > kx ii ...

  • Page 137

    Chapter 4: kx iii administrator help 125 tiered kx iii connection example the following diagram illustrates the cabling configurations between a kx iii tiered device and a kx iii base device. Steps kx iii base device kx iii tiered device cim to connect the target server to kx iii the tiered device. ...

  • Page 138

    Chapter 4: kx iii administrator help 126 enabling tiering to enable tiering: 1. From the tier base device, select device settings > device services to open the device service settings page. 2. Select enable tiering as base. 3. In the base secret field, enter the secret shared between the base and th...

  • Page 139

    Chapter 4: kx iii administrator help 127 power control from tiered devices you can power on and off targets that are a part of the tiered configuration. These targets are accessed from the port access page. If targets and outlets are associated, power control is available from the port access page. ...

  • Page 140

    Chapter 4: kx iii administrator help 128 username and password are optional. If username and password are not provided, a login dialog will be displayed and, after being authenticated, the user will be directly connected to the target. The port may be a port number or port name. If you are using a p...

  • Page 141

    Chapter 4: kx iii administrator help 129 username and password are optional. If username and password are not provided, a login dialog will be displayed and, after being authenticated, the user will be directly connected to the target. The port may be a port number or port name. If you are using a p...

  • Page 142

    Chapter 4: kx iii administrator help 130 enabling the akc download server certificate validation if you are using the akc client, you can choose to use the enable akc download server certificate validation feature or opt not to use this feature. Note: when operating in ipv4 and ipv6 dual stack mode ...

  • Page 143

    Chapter 4: kx iii administrator help 131 2. Launch internet explorer ® using the kx iii ip address as the url. A certificate error message will be displayed. 3. Select view certificates. 4. On the general tab, click install certificate. The certificate is then installed in the trusted root certifica...

  • Page 144

    Chapter 4: kx iii administrator help 132 3. Select either or both enable snmp v1/v2c and enable snmp v3. At least one option must be selected. Required 4. Complete the following fields for snmp v1/v2c (if needed): a. Community - the device's community string b. Community type - grant either read-onl...

  • Page 145

    Chapter 4: kx iii administrator help 133 configure snmp traps on the event management - settings page, which can be quickly accessed by clicking the snmp trap configuration link. See configuring snmp traps (on page 135)for information on creating snmp traps and list of kx iii snmp traps for a list o...

  • Page 146

    Chapter 4: kx iii administrator help 134 configuring date/time settings use the date/time settings page to specify the date and time for the kx iii. There are two ways to do this: manually set the date and time. Synchronize the date and time with a network time protocol (ntp) server. To set the date...

  • Page 147

    Chapter 4: kx iii administrator help 135 configuring snmp traps simple network management protocol (snmp) is a protocol governing network management and the monitoring of network devices and their functions. Snmp traps are sent out over a network to gather information. The traps are configured on th...

  • Page 148

    Chapter 4: kx iii administrator help 136 note: ipv6 addresses cannot exceed 80 characters in length for the host name. B. Port number - the port number used by the snmp manager c. Security name - the username or service account name of the entity communicating with the snmp agent (up to 32 character...

  • Page 149

    Chapter 4: kx iii administrator help 137 note: if you disable snmp settings at any time, the snmp information is retained so you do not have to reenter if you re-enable the settings. To delete snmp traps: clear all of the snmp trap fields and save. Use the reset to factory defaults feature to remove...

  • Page 150

    Chapter 4: kx iii administrator help 138 trap name description cimconnected the cim is connected. Cimdisconnected the cim is disconnected. Cimupdatestarted the cim update start is underway. Cimupdatecompleted the cim update is complete. Configbackup the device configuration has been backed up. Confi...

  • Page 151

    Chapter 4: kx iii administrator help 139 trap name description rebootcompleted the kx iii has completed its reboot. Rebootstarted the kx iii has begun to reboot, either through cycling power to the system or by a warm reboot from the os. Scanstarted a target server scan has started. Scanstopped a ta...

  • Page 152

    Chapter 4: kx iii administrator help 140 trap name description vmimagedisconnected user attempted to unmount a device or image on the target using virtual media. Viewing the kx iii mib to view the kx iii mib: 1. Choose device settings > event management - settings. The event management - settings pa...

  • Page 153

    Chapter 4: kx iii administrator help 141 note: ipv6 addresses cannot exceed 80 characters in length for the host name. Use the reset to defaults feature to remove the syslog configuration. Configuring event management - destinations system events, if enabled, generate snmp notification events (traps...

  • Page 154

    Chapter 4: kx iii administrator help 142 power supply setup the kx iii provides dual power supplies, and can automatically detect and provide notification regarding the status of these power supplies. Use the power supply setup page to specify whether you are using one or both of the power supplies....

  • Page 155

    Chapter 4: kx iii administrator help 143 note: if either of these checkboxes is selected and power input is not actually connected, the power led at the front of the unit turns red. To turn off the automatic detection:  deselect the checkbox for the appropriate power supply. To reset to factory def...

  • Page 156

    Chapter 4: kx iii administrator help 144 connect and disconnect scripts the kx iii provides the ability to execute key macro scripts when connecting to or disconnecting from a target. You can create and edit your own scripts on the connection script page to perform additional actions when connecting...

  • Page 157

    Chapter 4: kx iii administrator help 145 3. In the apply selected scripts to ports section, select the target(s) you want to apply the script to using select all or clicking on the checkbox to the left of each target to apply the script to only select targets. 4. Click apply scripts. Once the script...

  • Page 158

    Chapter 4: kx iii administrator help 146 for example, select f1-f16 to display the function key set in the add box. Select a function key and add it to the script box. Next, select letters from the key set drop-down and add a letter key to the script. 8. Optionally, add text that will display when t...

  • Page 159

    Chapter 4: kx iii administrator help 147.

  • Page 160

    Chapter 4: kx iii administrator help 148 modifying scripts to modify existing scripts: 1. Click device settings > connection scripts. The connection scripts page opens. 2. In the available connection scripts section, select the script you want to modify and click modify. The page is then in edit mod...

  • Page 161

    Chapter 4: kx iii administrator help 149 5. Click import. The configuration scripts page opens and the imported scripts are displayed. To export a disconnect script: 1. Click device settings > configuration scripts. The configuration scripts page opens. 2. In the available connection scripts section...

  • Page 162

    Chapter 4: kx iii administrator help 150 creating port groups the kx iii supports the aggregation of multiple ports into a single port group. Port groups consist solely of ports configured as standard kvm ports. A port may only be a member of a single group. Ports that are available to be included i...

  • Page 163

    Chapter 4: kx iii administrator help 151 creating a dual video port group the dual video port groups feature allows you to group two video ports into one group. Use this feature when you need to connect to a server with two video cards/ports, and you want to access both ports from the same remote cl...

  • Page 164

    Chapter 4: kx iii administrator help 152 note: if a port is already a part of blade server port group, another dual video port group, or 'standard' port group, the port is not an option since ports can only belong to a single port group at a time. 3. Select the dual video port group radio button. 4....

  • Page 165

    Chapter 4: kx iii administrator help 153 3. Click apply. Click reset defaults to change back to english. Note: once you apply a new language, the online help is also localized to match your language selection. Security management security settings from thesecurity settings page, you can specify logi...

  • Page 166

    Chapter 4: kx iii administrator help 154 to reset back to defaults: click reset to defaults. Login limitations using login limitations, you can specify restrictions for single login, password aging, and the logging out idle users. Limitation description enable single login limitation when selected, ...

  • Page 167

    Chapter 4: kx iii administrator help 155 limitation description enter the number of days after which a password change is required. The default is 60 days. Log out idle users, after (1-365 minutes) select the "log off idle users" checkbox to automatically disconnect users after the amount of time yo...

  • Page 168

    Chapter 4: kx iii administrator help 156 strong passwords strong passwords provide more secure local authentication for the system. Using strong passwords, you can specify the format of valid kx iii local passwords such as minimum and maximum length, required characters, and password history retenti...

  • Page 169

    Chapter 4: kx iii administrator help 157 user blocking the user blocking options specify the criteria by which users are blocked from accessing the system after the specified number of unsuccessful login attempts. The three options are mutually exclusive: option description disabled the default opti...

  • Page 170

    Chapter 4: kx iii administrator help 158 option description timer lockout users are denied access to the system for the specified amount of time after exceeding the specified number of unsuccessful login attempts. When selected, the following fields are enabled:  attempts - the number of unsuccessf...

  • Page 171

    Chapter 4: kx iii administrator help 159 encryption & share using the encryption & share settings you can specify the type of encryption used, pc and vm share modes, and the type of reset performed when the kx iii reset button is pressed. Warning: if you select an encryption mode that is not support...

  • Page 172

    Chapter 4: kx iii administrator help 160 encryption mode description 140-2 mode. Aes-128 the advanced encryption standard (aes) is a national institute of standards and technology specification for the encryption of electronic data. 128 is the key length. When aes-128 is specified, be certain that y...

  • Page 173

    Chapter 4: kx iii administrator help 161 5. If needed, select vm share mode. This option is enabled only when pc-share mode is enabled. When selected, this option permits the sharing of virtual media among multiple users, that is, several users can access the same virtual media session. The default ...

  • Page 174

    Chapter 4: kx iii administrator help 162 enabling fips 140-2 for government and other high security environments, enabling fips 140-2 mode may be required. The kx iii uses an embedded fips 140-2-validated cryptographic module running on a linux ® platform per fips 140-2 implementation guidance secti...

  • Page 175

    Chapter 4: kx iii administrator help 163 fips 140-2 support requirements the kx iii supports the use of fips 140-2 approved encryption algorithms. This allows an ssl server and client to successfully negotiate the cipher suite used for the encrypted session when a client is configured for fips 140-2...

  • Page 176

    Chapter 4: kx iii administrator help 164 creating an ip access control list, 127.0.0.1 should not be within the range of ip addresses that are blocked or you will not have access to the kx iii local port. To use ip access control: 1. Select security > ip access control to open the ip access control ...

  • Page 177

    Chapter 4: kx iii administrator help 165 3. Choose the policy from the drop-down list. 4. Click replace. Your new rule replaces the original rule with the same rule #. To delete a rule: 1. Specify the rule # you want to delete. 2. Click delete. 3. You are prompted to confirm the deletion. Click ok. ...

  • Page 178

    Chapter 4: kx iii administrator help 166 when a self-signed certificate is created, the kx iii date and time are used to calculate the validity period. If the kx iii date and time are not accurate, the certificate's valid from - to date range may be incorrect, causing certificate validation to fail....

  • Page 179

    Chapter 4: kx iii administrator help 167  to generate self-signed certificate, do the following: a. Select the create a self-signed certificate checkbox if you need to generate a self-signed certificate. When you select this option, the kx iii generates the certificate based on your entries, and ac...

  • Page 180

    Chapter 4: kx iii administrator help 168 note: the csr and the private key file are a matched set and should be treated accordingly. If the signed certificate is not matched with the private key used to generate the original csr, the certificate will not be useful. This applies to uploading and down...

  • Page 181

    Chapter 4: kx iii administrator help 169 5. Edit the information in the restricted services banner message text box. Up to 6000 characters can be entered or uploaded from a text file. To do this, do one of the following: a. Edit the text by manually typing in the text box. Click ok. B. Upload the in...

  • Page 182

    Chapter 4: kx iii administrator help 170 maintenance audit log a log is created of the kx iii system events. The audit log can contain up to approximately 2k worth of data before it starts overwriting the oldest entries. To avoid losing audit log data, export the data to a syslog server or snmp mana...

  • Page 183

    Chapter 4: kx iii administrator help 171 device information the device information page provides detailed information about your kx iii device and the cims in use. This information is helpful should you need to contact raritan technical support. To view information about your kx iii and cims: choose...

  • Page 184

    Chapter 4: kx iii administrator help 172  d2cim-dvusb-dvi  d2cim-dvusb-hdmi  d2cim-dvusb note: only the numeric portion of the serial numbers are displayed for the dcim-usb, dcim-ps2 and dcim-usb g2 cims. For example, xxx1234567 is displayed. The serial number prefix gn is displayed for cims that...

  • Page 185

    Chapter 4: kx iii administrator help 173 backup and restore from the backup/restore page, you can backup and restore the settings and configuration for your kx iii. In addition to using backup and restore for business continuity purposes, you can use this feature as a time-saving mechanism. For inst...

  • Page 186

    Chapter 4: kx iii administrator help 174 2. To do this: a. Save the backup file. The backup file is saved locally on your client machine with the name and location specified. B. Once saved, locate the file and right-click on it. Select properties. C. In general tab, click change and select wordpad. ...

  • Page 187

    Chapter 4: kx iii administrator help 175 usb profile management from the usb profile management page, you can upload custom profiles provided by raritan tech support. These profiles are designed to address the needs of your target server’s configuration, in the event that the set of standard profile...

  • Page 188

    Chapter 4: kx iii administrator help 176 as noted, you may delete a custom profile from the system while it is still designated as an active profile. Doing so will terminate any virtual media sessions that were in place. Handling conflicts in profile names a naming conflict between custom and standa...

  • Page 189

    Chapter 4: kx iii administrator help 177 firmware upgrade important: do not turn off your kx iii unit or disconnect cims while the upgrade is in progress - doing so will likely result in damage to the unit or cims. To upgrade your kx iii unit: 1. Locate the appropriate raritan firmware distribution ...

  • Page 190

    Chapter 4: kx iii administrator help 178 upgrade history the kx iii provides information about upgrades performed on the kx iii and attached cims. To view the upgrade history: choose maintenance > upgrade history. The upgrade history page opens. Information is provided about the kx iii upgrade(s) th...

  • Page 191

    Chapter 4: kx iii administrator help 179 to reboot your kx iii: 1. Choose maintenance > reboot. The reboot page opens. 2. Click reboot. You are prompted to confirm the action. Click yes to proceed with the reboot..

  • Page 192

    Chapter 4: kx iii administrator help 180 stopping cc-sg management while the kx iii is under cc-sg management, if you try to access the device directly, you are notified that it the device is under cc-sg management. If you are managing the kx iii through cc-sg and connectivity between cc-sg and the ...

  • Page 193

    Chapter 4: kx iii administrator help 181 3. Click yes to remove the device cc-sg management. Once cc-sg management has ended, a confirmation will be displayed. Diagnostics network interface page the kx iii provides information about the status of your network interface. To view information about you...

  • Page 194

    Chapter 4: kx iii administrator help 182  statistics - produces a page similar to the one displayed here.  interfaces - produces a page similar to the one displayed here..

  • Page 195

    Chapter 4: kx iii administrator help 183  route - produces a page similar to the one displayed here. 3. Click refresh. The relevant information is displayed in the result field. Ping host page ping is a network tool used to test whether a particular host or ip address is reachable across an ip netw...

  • Page 196

    Chapter 4: kx iii administrator help 184 2. Type either the hostname or ip address into the ip address/host name field. Note: the host name cannot exceed 232 characters in length. 3. Click ping. The results of the ping are displayed in the result field. Trace route to host page trace route is a netw...

  • Page 197

    Chapter 4: kx iii administrator help 185 device diagnostics note: this page is for use by raritan field engineers or when you are directed by raritan technical support. Device diagnostics downloads the diagnostics information from the kx iii to the client machine. Two operations can be performed on ...

  • Page 198

    Chapter 4: kx iii administrator help 186 a. Click save to file. The file download dialog opens. B. Click save. The save as dialog box opens. C. Navigate to the desired directory and click save. D. Email this file as directed by raritan technical support. Kx iii local console the kx iii provides at-t...

  • Page 199

    Chapter 4: kx iii administrator help 187 security and authentication in order to use the kx iii local console, you must first authenticate with a valid username and password. The kx iii provides a fully-integrated authentication and security scheme, whether your access is via the network or the loca...

  • Page 200

    Chapter 4: kx iii administrator help 188 the browser will be restarted when this change is made.  us  portuguese (portugal)  us/international  norwegian (norway)  united kingdom  swedish (sweden)  french (france)  danish (denmark)  german (germany)  belgian (belgium)  german (switzerland)...

  • Page 201

    Chapter 4: kx iii administrator help 189 hot key: take this action: double click left alt key press the left alt key twice quickly double click left shift key press the left shift key twice quickly double click left ctrl key press the left ctrl key twice quickly select the local port connect key 1. ...

  • Page 202

    Chapter 4: kx iii administrator help 190 configure the power save feature (optional) 1. If you would like to use the power save feature: a. Select the power save mode checkbox. B. Set the amount of time (in minutes) in which power save mode will be initiated. Select the local user authentication 1. ...

  • Page 203

    Chapter 4: kx iii administrator help 191 command line interface (cli) overview the command line interface(cli) can be used to configure the kx iii network interface and perform diagnostic functions provided you have the appropriate permissions to do so. The following figures describe an overview of ...

  • Page 204

    Chapter 4: kx iii administrator help 192 ssh connection to the kx iii use any ssh client that supports sshv2 to connect to the kx iii. You must enable ssh access from the devices services page. Note: for security reasons, ssh v1 connections are not supported by the kx iii. Ssh access from a windows ...

  • Page 205

    Chapter 4: kx iii administrator help 193 navigation of the cli before using the cli, it is important to understand cli navigation and syntax. There are also some keystroke combinations that simplify cli use. Completion of commands the cli supports the completion of partially-entered commands. After ...

  • Page 206

    Chapter 4: kx iii administrator help 194 common commands for all command line interface levels following are the commands that are available at all cli levels. These commands also help navigate through the cli. Commands description top return to the top level of the cli hierarchy, or the “username” ...

  • Page 207

    Chapter 4: kx iii administrator help 195 setting network parameters network parameters are configured using the interface command. Admin > config > network > interface ipauto none ip 192.168.151.12 mask 255.255.255.0 gw 192.168.151.1 mode auto when the command is accepted, the device automatically d...

  • Page 208

    Chapter 4: kx iii administrator help 196 command description userlist list active user sessions. Enter admin > config > network. Command description help display overview of commands. History display the current session's command line history. Interface set/get network parameters. Ipv6_interface set...

  • Page 209

    Chapter 4: kx iii administrator help 197 configuring network the network menu commands are used to configure the kx iii network adapter. Commands description interface configure the kx iii device network interface. Name network name configuration ipv6 set/get ipv6 network parameters. Interface comma...

  • Page 210

    Chapter 4: kx iii administrator help 198 name command the name command is used to configure the network name. The syntax of the name is: name [devicename ] [hostname ] device name configuration devicename device name hostname preferred host name (dhcp only) name command example the following command...

  • Page 211

    Chapter 4: kx iii administrator help 199 recommendations for dual port video set the target server’s primary and secondary displays to the same video resolution in order to maintain mouse synchronization and minimize having to periodically resync. Depending on the desired orientation, the top displa...

  • Page 212

    Chapter 4: kx iii administrator help 200 target operating systems supported mouse modes comments linux ® intelligent and standard mouse modes linux ® users may experience display and mouse movement issues using single mouse mode. Raritan recommends linux users do not use single mouse mode. Mac ® ope...

  • Page 213

    Chapter 4: kx iii administrator help 201  other - enable single mouse cursor setting will not be applied  other - enable scale video setting will be applied  other - pin menu toolbar setting will be applied dragging and moving items between windows on the primary and secondary target requires a r...

  • Page 214

    Chapter 4: kx iii administrator help 202 example dual port video group configuration the following is a general example. Your configuration may vary in the type of cims used, the port you designate as the primary port, the ports you are connecting to and so on. In this example, we are using: a targe...

  • Page 215

    Chapter 4: kx iii administrator help 203 diagram key connection from the target's primary (first) video port to the kx iii connection from the target's secondary (second) video port to the kx iii ip connection between the kx iii and remote client target server - configure the display settings and la...

  • Page 216

    Chapter 4: kx iii administrator help 204 note: if the target primary and secondary displays are set to different resolutions the mouse will not stay in sync and will need to be periodically re-synced from the top-left target window. Step 2: connect the target server to the kx iii dual port video gro...

  • Page 217

    Chapter 4: kx iii administrator help 205 step 3: configure the mouse mode and ports once you have connected the target server to the kx iii through the target server video ports, it detects the connection and displays the ports on the port configuration page. For instructions, see configuring standa...

  • Page 218

    Chapter 4: kx iii administrator help 206 step 5: launch a dual port video group once you have created the dual video port group, it is available on the port access page. Two kvm channels are required to remotely connect to the dual video port group by clicking primary port. If two channels are not a...

  • Page 219

    Chapter 4: kx iii administrator help 207 direct port access and dual port video groups direct port access allows users to bypass having to use the device's login dialog and port access page. This feature also provides the ability to enter a username and password directly to proceed to the target, if...

  • Page 220

    Chapter 4: kx iii administrator help 208 from ldap/ldaps when an ldap/ldaps authentication is successful, the kx iii determines the permissions for a given user based on the permissions of the user's group. Your remote ldap server can provide these user group names by returning an attribute named as...

  • Page 221

    Chapter 4: kx iii administrator help 209 setting the registry to permit write operations to the schema to allow a domain controller to write to the schema, you must set a registry entry that permits schema updates. To permit write operations to the schema: 1. Right-click the active directory ® schem...

  • Page 222

    Chapter 4: kx iii administrator help 210 3. Click new and then choose attribute. When the warning message appears, click continue and the create new attribute dialog appears. 4. Type rciusergroup in the common name field. 5. Type rciusergroup in the ldap display name field. 6. Type 1.3.6.1.4.1.13742...

  • Page 223

    Chapter 4: kx iii administrator help 211 2. Scroll to the user class in the right pane and right-click it. 3. Choose properties from the menu. The user properties dialog appears. 4. Click the attributes tab to open it. 5. Click add..

  • Page 224

    Chapter 4: kx iii administrator help 212 6. Choose rciusergroup from the select schema object list. 7. Click ok in the select schema object dialog. 8. Click ok in the user properties dialog. Updating the schema cache to update the schema cache: 1. Right-click active directory ® schema in the left pa...

  • Page 225

    Chapter 4: kx iii administrator help 213 3. Go to the directory where the support tools were installed. Run adsiedit.Msc. The adsi edit window opens. 4. Open the domain. 5. In the left pane of the window, select the cn=users folder..

  • Page 226

    Chapter 4: kx iii administrator help 214 6. Locate the user name whose properties you want to adjust in the right pane. Right-click the user name and select properties. 7. Click the attribute editor tab if it is not already open. Choose rciusergroup from the attributes list. 8. Click edit. The strin...

  • Page 227

    215 in this chapter overview ................................................................................................ 215 connect to a target server ................................................................... 216 configuring connection properties ........................................

  • Page 228

    Chapter 5: virtual kvm client (vkc) help 216 there is one virtual kvm client for each target server connected. Virtual kvm client windows can be minimized, maximized, and moved around your computer desktop. Important: refreshing your browser closes the virtual kvm client connection, so exercise caut...

  • Page 229

    Chapter 5: virtual kvm client (vkc) help 217 configuring connection properties access connection properties to access connection properties: click connection > properties, or click the connection... Icon to open the connection properties dialog. About connection properties the virtual kvm client (vk...

  • Page 230

    Chapter 5: virtual kvm client (vkc) help 218 default connection property settings - optimized for best performance kx iii comes configured to provide optimal performance for the majority of video streaming conditions. Default connection settings are: optimized for: text readability - video modes are...

  • Page 231

    Chapter 5: virtual kvm client (vkc) help 219 optimize for: selections text readability when text readability is selected, all video modes are designed to provide high-quality, readable text. This setting is ideal when working with computer guis, such as when performing server administration and so o...

  • Page 232

    Chapter 5: virtual kvm client (vkc) help 220 in general, moving the slider to the left results in higher quality at the cost of higher bandwidth and, in some cases, lower frame rate. Moving the slider to the right enables stronger compression, reducing the bandwidth per frame, but video quality is r...

  • Page 233

    Chapter 5: virtual kvm client (vkc) help 221 connection information open the connection information dialog for real-time connection information, and copy the information from the dialog as needed. This is useful if, for example, you want to gather real-time information on your current connection. Se...

  • Page 234

    Chapter 5: virtual kvm client (vkc) help 222 steps click connection > info... To open the connection info dialog. Click copy to clipboard. Paste the information in a file of your choosing. Usb profiles set a usb profile for a target server from the virtual kvm client (vkc) by clicking usb profile in...

  • Page 235

    Chapter 5: virtual kvm client (vkc) help 223 keyboard send ctrl+alt+del macro due to its frequent use, a ctrl+alt+delete macro is preprogrammed. Selecting keyboard > send ctrl+alt+del, or clicking on the ctrl+alt+delete button in the toolbar sends this key sequence to the server or to the kvm switch...

  • Page 236

    Chapter 5: virtual kvm client (vkc) help 224 keyboard macros keyboard macros ensure that keystroke combinations intended for the target server are sent to and interpreted only by the target server. Otherwise, they might be interpreted by the computer on which the virtual kvm client is running (your ...

  • Page 237

    Chapter 5: virtual kvm client (vkc) help 225 a. To remove a step in the sequence, select it and click remove. B. To change the order of steps in the sequence, click the step and then click the up or down arrow buttons to reorder them as needed. 7. Click ok to save the macro. Click clear to clear all...

  • Page 238

    Chapter 5: virtual kvm client (vkc) help 226  click yes to replace the existing macro with the imported version.  click yes to all to replace the currently selected and any other duplicate macros that are found.  click no to keep the original macro and proceed to the next macro  click no to all ...

  • Page 239

    Chapter 5: virtual kvm client (vkc) help 227 4. Select the folder to save the macro file to, enter a name for the file and click save. If the macro already exists, you receive an alert message. 5. Select yes to overwrite the existing macro or no to close the alert without overwriting the macro. Vide...

  • Page 240

    Chapter 5: virtual kvm client (vkc) help 228 calibrating color use the calibrate color command to optimize the color levels (hue, brightness, saturation) of the transmitted video images. The color settings are on a target server-basis. Note: the calibrate color command applies to the current connect...

  • Page 241

    Chapter 5: virtual kvm client (vkc) help 229 if the video image looks extremely blurry or unfocused, the settings for clock and phase can be adjusted until a better image appears on the active target server. Warning: exercise caution when changing the clock and phase settings. Doing so may result in...

  • Page 242

    Chapter 5: virtual kvm client (vkc) help 230 note: some sun background screens, such as screens with very dark borders, may not center precisely on certain sun servers. Use a different background or place a lighter colored icon in the upper left corner of the screen. Screenshot from target command (...

  • Page 243

    Chapter 5: virtual kvm client (vkc) help 231 mouse options when in dual mouse mode, and provided the option is properly configured, the mouse cursors align. In dual mouse mode, when controlling a target server, the remote console displays two mouse cursors: one belonging to your kx iii client workst...

  • Page 244

    Chapter 5: virtual kvm client (vkc) help 232 dual mouse modes absolute mouse synchronization in this mode, absolute coordinates are used to keep the client and target cursors in synch, even when the target mouse is set to a different acceleration or speed. This mode is supported on servers with usb ...

  • Page 245

    Chapter 5: virtual kvm client (vkc) help 233 intelligent mouse synchronization conditions the intelligent mouse synchronization command, available on the mouse menu, automatically synchronizes mouse cursors during moments of inactivity. For this to work properly, however, the following conditions mu...

  • Page 246

    Chapter 5: virtual kvm client (vkc) help 234 mouse synchronization tips if you have an issue with mouse synchronization: 1. Verify that the selected video resolution and refresh rate are among those supported by the device. The kvm client connection info dialog displays the actual values that the de...

  • Page 247

    Chapter 5: virtual kvm client (vkc) help 235 single mouse mode single mouse mode uses only the target server mouse cursor and the local mouse pointer no longer appears onscreen. Note: single mouse mode does not work on windows or linux targets when client is running on a virtual machine. To enter si...

  • Page 248

    Chapter 5: virtual kvm client (vkc) help 236  united kingdom  korean (korea)  french (belgium)  norwegian (norway)  portuguese (portugal)  danish (denmark)  swedish (sweden)  german (switzerland)  hungarian (hungary)  spanish (spain)  italian (italy)  slovenian  translation: french - us...

  • Page 249

    Chapter 5: virtual kvm client (vkc) help 237 5. Click ok. Keyboard limitations turkish keyboards if using a turkish keyboard, you must connect to a target server through the active kvm client (akc). It is not supported by other raritan clients. Slovenian keyboards the limitation. Language configurat...

  • Page 250

    Chapter 5: virtual kvm client (vkc) help 238 language configuration method belgian keyboard indicator norwegian keyboard indicator danish keyboard indicator swedish keyboard indicator hungarian system settings (control center) spanish system settings (control center) italian system settings (control...

  • Page 251

    Chapter 5: virtual kvm client (vkc) help 239 a. Select 'enable single cursor mode' to enable single mouse mode as the default mouse mode when the server is accessed. B. Select 'enable scale video' to automatically scale the display on the target server when it is accessed. C. Select 'pin menu toolba...

  • Page 252

    Chapter 5: virtual kvm client (vkc) help 240 configuring port scan settings in vkc and akc configuring port scan options in vkc and akc applies to scanning from the kx iii remote console. To configure port scan options for the local console, see configure local console scan settings (on page 272) us...

  • Page 253

    Chapter 5: virtual kvm client (vkc) help 241 6. Click ok. View options view toolbar you can use the virtual kvm client with or without the toolbar display. To toggle the display of the toolbar (on and off): choose view > view toolbar. View status bar by default, the status bar is displayed at the bo...

  • Page 254

    Chapter 5: virtual kvm client (vkc) help 242 scaling scaling your target window allows you to view the entire contents of the target server window. This feature increases or reduces the size of the target video to fit the virtual kvm client window size, and maintains the aspect ratio so that you see...

  • Page 255

    Chapter 5: virtual kvm client (vkc) help 243 virtual media all kx iii models support virtual media. Virtual media extends kvm capabilities by enabling target servers to remotely access media from a client pc and network file servers. With this feature, media mounted on client pcs and network file se...

  • Page 256

    Chapter 5: virtual kvm client (vkc) help 244 cims required for virtual media you must use one of the following cims is to use virtual media: d2cim-vusb d2cim-dvusb d2cim-dvusb-dvi d2cim-dvusb-hdmi d2cim-dvusb-dp note that the black connector on the dvusb cims are used for the keyboard and mouse. The...

  • Page 257

    Chapter 5: virtual kvm client (vkc) help 245 supported virtual media types the following virtual media types are supported for windows ® , mac ® and linux ™ clients: internal and external hard drives internal and usb-mounted cd and dvd drives usb mass storage devices pc hard drives iso images (disk ...

  • Page 258

    Chapter 5: virtual kvm client (vkc) help 246 number of supported virtual media drives with the virtual media feature, you can mount up to two drives (of different types) that are supported by the usb profile currently applied to the target. These drives are accessible for the duration of the kvm ses...

  • Page 259

    Chapter 5: virtual kvm client (vkc) help 247 when checked, you will be able to read or write to the connected usb disk. Warning: enabling read/write access can be dangerous! Simultaneous access to the same drive from more than one entity can result in data corruption. If you do not require write acc...

  • Page 260

    Chapter 5: virtual kvm client (vkc) help 248 c. File server username - user name required for access to the file server. The name can include the domain name such as mydomain/username. D. File server password - password required for access to the file server (field is masked as you type). E. Click c...

  • Page 261

    Chapter 5: virtual kvm client (vkc) help 249 virtual media in a linux environment active system partitions you cannot mount active system partitions from a linux client. Linux ext3/4 drive partitions need to be unmounted via umount /dev/ prior to a making a virtual media connection. Drive partitions...

  • Page 262

    Chapter 5: virtual kvm client (vkc) help 250 virtual media file server setup (file server iso images only) this feature is only required when using virtual media to access file server iso images. Iso9660 format is the standard supported by raritan. However, other cd-rom extensions may also work. Not...

  • Page 263

    Chapter 5: virtual kvm client (vkc) help 251 smart cards using the kx iii, you are able to mount a smart card reader onto a target server to support smart card authentication and related applications. For a list of supported smart cards, smart card readers, and additional system requirements, see sm...

  • Page 264

    Chapter 5: virtual kvm client (vkc) help 252 smart card reader detected after a kvm session is established with a target server, a smart card menu and button are available in vkc and akc. Once the smart card button is selected or smart card is selected from the menu, the smart card readers that are ...

  • Page 265

    Chapter 5: virtual kvm client (vkc) help 253 update a smart card reader to update the smart card in the select smart card reader dialog: click refresh list if a new smart card reader has been attached to the client pc. Send smart card remove and reinsert notifications to send smart card remove and r...

  • Page 266

    Chapter 5: virtual kvm client (vkc) help 254 digital audio the kx iii supports end-to-end, bidirectional, digital audio connections for digital audio playback and capture devices from a remote client to a target server. The audio devices are accessed over a usb connection. Current device firmware is...

  • Page 267

    Chapter 5: virtual kvm client (vkc) help 255 audio playback and capture recommendations and requirements audio level set the target audio level to a mid-range setting. For example, on a windows ® client, set the audio to 50 or lower. This setting must be configured through the playback or capture au...

  • Page 268

    Chapter 5: virtual kvm client (vkc) help 256 in practice, the bandwidth used when an audio device connects to a target is higher due to the keyboard and video data consumed when opening and using an audio application on the target. A general recommendation is to have at least a 1.5mb connection befo...

  • Page 269

    Chapter 5: virtual kvm client (vkc) help 257 saving audio settings audio device settings are applied on a per kx iii device basis. Once the audio devices settings are configured and saved on the kx iii, the same settings are applied to it. For example, you can configure a windows ® audio device to u...

  • Page 270

    Chapter 5: virtual kvm client (vkc) help 258 operating system audio playback support review the table shown here to see which raritan client works with audio playback/capture for each operating system: operating system audio playback and capture supported by: windows ® active kvm client (akc) virtua...

  • Page 271

    Chapter 5: virtual kvm client (vkc) help 259 6. Select the audio format for the playback device from the format: drop-down. Note: select the format that you wish to use based on the available network bandwidth. Formats with lower sampling rates consume less bandwidth and may tolerate more network co...

  • Page 272

    Chapter 5: virtual kvm client (vkc) help 260 a speaker icon is displayed in the status bar at the bottom of the client window. It is grayed out when no audio is being used. When the speaker icon and microphone icon are displayed in the status bar, the session is being captured as it is streamed. Dis...

  • Page 273

    Chapter 5: virtual kvm client (vkc) help 261 adjusting capture and playback buffer size (audio settings) once an audio device is connected, the capture and playback buffer size can be adjusted as needed. This feature is useful for controlling the quality of the audio, which may be impacted by bandwi...

  • Page 274

    262 in this chapter overview ................................................................................................ 262 connect to a target server ................................................................... 262 akc supported microsoft .Net framework....................................

  • Page 275

    Chapter 6: active kvm client (akc) help 263 2. Click connect. See port action menu (on page 20) for details on additional available menu options. Akc supported microsoft .Net framework the active kvm client (akc) requires windows .Net ® version 3.5, 4.0 or 4.5. Akc works with both 3.5 and 4.0 instal...

  • Page 276

    Chapter 6: active kvm client (akc) help 264 akc supported browsers internet explorer ® 8 (and later) if you attempt to open akc from a browser other than internet explorer 8 (and later), you will receive an error message instructing you to check your browser and to switch to internet explorer. Prere...

  • Page 277: User Help

    265 in this chapter overview ................................................................................................ 265 accessing a target server .................................................................... 265 local console video resolutions ..........................................

  • Page 278

    Chapter 7: kx iii local console - kx iii end user help 266 local console video resolutions once a monitor is connected to the kx iii local console, kx iii detects the native resolution of the monitor. This is typically the largest resolution supported by the monitor. As long as the monitor's native ...

  • Page 279

    Chapter 7: kx iii local console - kx iii end user help 267 return to the kx iii local console interface - default hot key to return to the kx iii local console from the target server: press the scroll lock key twice rapidly. The video display switches from the target server interface to the kx iii l...

  • Page 280

    Chapter 7: kx iii local console - kx iii end user help 268 standard servers connect key action key sequence example the local port gui connected to target): double click scroll lock special sun key combinations the following key combinations for sun ™ microsystems server’s special keys operate on th...

  • Page 281

    Chapter 7: kx iii local console - kx iii end user help 269 scanning ports - local console use the port scanning feature to search for selected targets and display them in individual thumbnails as part of a slide show. This feature allows you to monitor up to 32 targets at one time since you can view...

  • Page 282

    Chapter 7: kx iii local console - kx iii end user help 270 scanning port slide show - local console when you start a scan, the port scan window opens. As each target is found, it is displayed as a thumbnail in a slide show. The slide show scrolls through the target thumbnails based on the default in...

  • Page 283

    Chapter 7: kx iii local console - kx iii end user help 271.

  • Page 284

    Chapter 7: kx iii local console - kx iii end user help 272 target status indicators during port scanning - local console in thumbnail view on the local console, the status of each target is indicated below the thumbnail on the page until it is the focus of the slide show view. The scanning status of...

  • Page 285

    Chapter 7: kx iii local console - kx iii end user help 273  display interval - changes the scan display interval.  interval between ports - change interval between switching different port during scan. Scan for targets - local console to scan for targets: 1. Click the set scan tab on the port acce...

  • Page 286

    Chapter 7: kx iii local console - kx iii end user help 274 2. From the local console, click tools. 3. Select the smart card reader from the card readers detected list. Select none from the list if you do not want a smart card reader mounted. 4. Click ok. Once the smart card reader is added, a messag...

  • Page 287

    Chapter 7: kx iii local console - kx iii end user help 275 local console usb profile options from the usb profile options section of the tools page, you can choose from the available usb profiles. The ports that can be assigned profiles are displayed in the port name field and the profiles that are ...

  • Page 288

    Chapter 7: kx iii local console - kx iii end user help 276 kx iii local console factory reset note: it is recommended that you save the audit log prior to performing a factory reset. The audit log is deleted when a factory reset is performed and the reset event is not logged in the audit log. For mo...

  • Page 289

    Chapter 7: kx iii local console - kx iii end user help 277 2. Use a pointed object to press and hold the reset button. 3. While continuing to hold the reset button, power the kx iii device back on. 4. Continue holding the reset button for 10 seconds..

  • Page 290: Functionality

    278 in this chapter overview ................................................................................................ 278 about the cat5 reach dvi .................................................................... 278 connect a kx iii and cat5 reach dvi .......................................

  • Page 291

    Appendix a: connecting a kx iii and cat5 reach dvi - provide extended local port functionality 279 connect a kx iii and cat5 reach dvi note: the images used in the diagrams are not specific to kx iii but the connections are accurate. This section introduces three scenarios involving kvm switches. Co...

  • Page 292

    Appendix a: connecting a kx iii and cat5 reach dvi - provide extended local port functionality 280 5. Turn on the kvm switch. Tip: the local or remote console can be equipped with a kvm drawer instead of a set of keyboard, mouse and monitor. See the illustration below. To increase the distance betwe...

  • Page 293

    Appendix a: connecting a kx iii and cat5 reach dvi - provide extended local port functionality 281 5. Turn on both kvm switches. To increase the distance between any computer and a kvm switch: 1. Set up an optional local console with the transmitter. 2. Set up a remote console by connecting the rece...

  • Page 294: III

    282 in this chapter overview ................................................................................................ 282 supported paragon ii cims and configurations ................................... 283 connecting the paragon ii to the kx iii ................................................

  • Page 295

    Appendix b: accessing a paragon ii from the kx iii 283 when you access the paragon ii system from kx iii or cc-sg (if the kx iii is managed by cc-sg), the paragon ii osui login screen appears for you to log in. In this integration, you can perform any osui functions implemented with current paragon ...

  • Page 296

    Appendix b: accessing a paragon ii from the kx iii 284 paragon cim supports does not support p2cim-ausbdual servers with usb- or sun ™ usb-type keyboard and mouse ports automatic skew compensation (when the cims are connected to paragon ii, not from a kx iii) intelligent mouse mode standard mouse mo...

  • Page 297

    Appendix b: accessing a paragon ii from the kx iii 285 kx iii-to-kx iii paragon cim guidelines the following system configuration guidelines should be followed when you are using paragon cims in a kx iii-to-kx iii configuration: concurrent access both kx iii kvm switches should be configured with th...

  • Page 298

    Appendix b: accessing a paragon ii from the kx iii 286 if a connection to the target is in place from the other kx iii, the availability is checked when a connection is attempted. Access is denied or allowed consistent with the pc-share policy in place for the kx iii. Until that time, the availabili...

  • Page 299

    Appendix b: accessing a paragon ii from the kx iii 287 paragon ii operation mode mode description supported? Port can be selected and controlled by more than one user, but only one user has keyboard and mouse control at any one time. Timeout, which is configured on the paragon ii, is not supported. ...

  • Page 300

    Appendix b: accessing a paragon ii from the kx iii 288 connecting the paragon ii to the kx iii to connect the paragon ii system to a kx iii: 1. Check whether the paragon ii user station that you want to connect to the kx iii is implemented with version 4.6 firmware (or later). If not, upgrade it. Th...

  • Page 301

    289 in this chapter overview ................................................................................................ 289 locate space in a cabinet for the kx iii ............................................... 290 add kx iii devices to dctrack ..................................................

  • Page 302

    Appendix c: managing kx iii in dctrack 290 locate space in a cabinet for the kx iii use dctrack's capacity management functionality to locate space in a cabinet in your data center for the kx iii. Search by: rack units - dctrack looks for a cabinet with enough rack units open to accommodate the kx i...

  • Page 303

    Appendix c: managing kx iii in dctrack 291 make and model - dctrack looks for a cabinet with enough available space in the cabinet based on the kx iii's dimensions, connectors, and so on see capacity management - locating and reserving cabinet space for an item in dctrack help. Add kx iii devices to...

  • Page 304

    Appendix c: managing kx iii in dctrack 292 import kx iii devices into dctrack if you are adding a large number of kx iiis, complete the 02_items_-_all_other_classes_for_3.X.Xls spreadsheet, which is provided by raritan, with the kx iii information, then import the spreadsheet into dctrack ® using th...

  • Page 305

    Appendix c: managing kx iii in dctrack 293 note that entire cabinets, along with the items in the cabinet and their connections and child devices, can also be cloned. So if you added a kx iii to a cabinet and use the same cabinet configuration throughout your data center, you can clone the cabinet. ...

  • Page 306

    Appendix c: managing kx iii in dctrack 294 visualize the kx iii in a cabinet elevation and on the floor map when you add the kx iii to dctrack ® , you place it in a cabinet. Provided the data center location the cabinet belongs to has a floor map associated with it, and the cabinet the kx iii is hou...

  • Page 307

    Appendix c: managing kx iii in dctrack 295 see locate an item on the floor map and items list (web client) in dctrack help. You can also view the kx iii in the cabinet elevation from the floor map. See cabinet elevations - floor map (web client) in dctrack help. Managing the kx iii lifecycle once th...

  • Page 308

    Appendix c: managing kx iii in dctrack 296 decommission a kx iii to storage submit a request to decommission the kx iii to storage if you plan to temporarily move it to an off-site location. See submit a request to decommission an item to storage in dctrack help. Decommission a kx iii to archive sub...

  • Page 309

    297 in this chapter hardware ............................................................................................... 297 software................................................................................................. 317 hardware kx iii dimensions and physical specifications domini...

  • Page 310

    Appendix d: specifications 298 dominion kx iii model description power & heat dissipation dimensions (wxdxh) weight operating temp humidity  1 local port for use at the rack 52 kcal mm f dkx3-232  32 server ports  2 remote users  1 local port for use at the rack dual power 110v/240v, 50-60hz 1.8...

  • Page 311

    Appendix d: specifications 299 dominion kx iii model description power & heat dissipation dimensions (wxdxh) weight operating temp humidity port for use at the rack dkx3-832  32 server ports  8 remote users  1 local port for use at the rack dual power 110v/240v, 50-60hz 1.8a 60w 52 kcal 17.3" x 1...

  • Page 312

    Appendix d: specifications 300 kx iii supported target server video resolutions 640x350@70hz 640x350@85hz 640x400@56hz 640x400@84hz 640x400@85hz 640x480@60hz 640x480@66.6hz 640x480@72hz 640x480@75hz 640x480@85hz 720x400@70hz 720x400@84hz 720x400@85hz 800x600@56hz 800x600@60hz 800x600@70hz 800x600@72...

  • Page 313

    Appendix d: specifications 301 1280x960@60hz 1280x960@85hz 1280x1024@60hz 1280x1024@75hz 1280x1024@85hz 1360x768@60hz 1366x768@60hz 1368x768@60hz 1400x1050@60hz 1440x900@60hz 1600x1200@60hz 1680x1050@60hz 1920x1080@60hz target server video resolution supported connection distances and refresh rates ...

  • Page 314

    Appendix d: specifications 302 supported kx iii local port dvi resolutions 1920x1080@60 1280x720@60 1024x768@60 (default) 1024x768@75 1280x1024@60 1280x1024@75 1600x1200@60 800x480@60 1280x768@60 1366x768@60 1360x768@60 1680x1050@60 1440x900@60 supported computer interface module (cims) specificatio...

  • Page 315

    Appendix d: specifications 303 cim model description dimensions (wxdxh) weight d2cim-dvus b-dvi digital cim that provides digital-to-analog conversion and support for virtual media, smartcard/cac, audio, absolute and relative mouse synchronization 1.7" x 3.5" x 0.8"; 43 x 90 x 19mm 0.25lb; 0.11kg d2...

  • Page 316

    Appendix d: specifications 304 cim model description dimensions (wxdxh) weight note that the black connector on the dvusb cims are used for the keyboard and mouse. The gray connector is used for virtual media. Keep both plugs of the cim connected to the device. The device may not operate properly if...

  • Page 317

    Appendix d: specifications 305 digital cim timing modes following are the default timing modes that are used when the kx iii communicates with a video source via a digital cim. The timing mode that is used is dependent on the native resolution of the video source. 1920x1080@60hz 1600x1200@60hz 1280x...

  • Page 318

    Appendix d: specifications 306 digital cim standard modes 1152x864@75hz vesa 1280x960@60hz vesa 1280x1024@60hz vesa 1360x768@60hz vesa 1400x1050@60hz vesa 1440x900@60hz vesa 1600x1200 @60hz vesa 1680x1050@60hz vesa 1920x1080@60hz vesa dvi compatibility mode dvi compatibility mode may be required if ...

  • Page 319

    Appendix d: specifications 307 kx iii network speed setting tion ion tion ion 100/full kx iii: 100/half switch: 100/full kx iii: 100/half switch: 100/full 100/full kx iii: 100/half switch: 100/full no communica tion no communicat ion 100/half 100/half 100/half kx iii: 100/full switch: 100/half 100/h...

  • Page 320

    Appendix d: specifications 308 dell chassis cable lengths and video resolutions in order to maintain video quality, raritan recommends using the following cable lengths and video resolutions when you are connecting to dell ® blade chassis from the kx iii: video resolution cable length 1024x768@60hz ...

  • Page 321

    Appendix d: specifications 309 if you are using a linux ® target, the following requirements must be met to use smart card readers with the raritan device. Ccid requirements if the raritan d2cim-dvusb vm/ccid is not recognized as a smart card reader by your linux target, you may need to update the c...

  • Page 322

    Appendix d: specifications 310 create a java ® library link a soft link must be created to the libpcsclite.So after upgrading rhel 4, rhel 5 and fc 10. For example, ln –s /usr/lib/libpcsclite.So.1 /usr/lib/libpcsclite.So, assuming installing the package places the libraries in /usr/lib or /user/loca...

  • Page 323

    Appendix d: specifications 311 unsupported smart card readers this table contains a list of readers that raritan has tested and found not to work with the raritan device, therefore they are unsupported. If a smart card reader does not appear in the supported smart card readers table or in the unsupp...

  • Page 324

    Appendix d: specifications 312 recommendations for audio connections when pc share mode is enabled if you are using the audio feature while running pc share mode, audio playback and capture are interrupted if an additional audio device is connected to the target. For example, user a connects a playb...

  • Page 325

    Appendix d: specifications 313 in practice, the bandwidth used when an audio device connects to a target is higher due to the keyboard and video data consumed when opening and using an audio application on the target. A general recommendation is to have at least a 1.5mb connection before running pla...

  • Page 326

    Appendix d: specifications 314 kx iii supported keyboard languages the kx iii provides keyboard support for the languages listed in the following table. Note: you can use the keyboard for chinese, japanese, and korean for display only; local language input is not supported at this time for the kx ii...

  • Page 327

    Appendix d: specifications 315 language regions keyboard layout spanish spain and most spanish speaking countries spanish portuguese portugal portuguese mac mini bios keystroke commands the following bios commands have been tested on intel-based mac ® mini target servers and mac lion ® servers runni...

  • Page 328

    Appendix d: specifications 316 keystroke description virtual media cim dual virtual media cim mac lion server hdmi cim startup mode and temporarily disable login items lion to boot to safe mode. "safe mode" in red does not appear for lion press command-v during startup start up in verbose mode.Admin...

  • Page 329

    Appendix d: specifications 317 port description kvm-over-ip) protocol, configurable port 5000 communication between raritan devices and systems, including cc-sg for devices that cc-sg management is available. By default, this is set to port 5000, but you may configure it to use any tcp port not curr...

  • Page 330

    Appendix d: specifications 318 operating systems browsers windows 7 ultimate sp1 64-bit  internet explorer 8,9,11  firefox 25  chrome 31 windows 7 ultimate 32-bit  internet explorer 8  firefox 25  chrome 31 windows 8 ® 64-bit  internet explorer 10  firefox 25  chrome 31 windows server 2012 ...

  • Page 331

    Appendix d: specifications 319 jre requirements and browser considerations for mac java runtime environment requirements for mac install java runtime environment 7 (jre) ® on pcs and macs ® when using the virtual kvm client (vkc) to access target servers via kx iii. This ensures in order to provide ...

  • Page 332

    Appendix d: specifications 320 events captured in the audit log and syslog following is a list and description of the events that are captured by the kx iii audit log and syslog: access login - a user has logged in to the kx iii access logout - a user has logged out of the kx iii active usb profile ...

  • Page 333

    321 in this chapter overview ................................................................................................ 321 java runtime environment (jre) notes ............................................... 321 ipv6 support notes .................................................................

  • Page 334

    Appendix e: informational notes 322 b. Click the view applets button. The java applet cache viewer opens. C. Deselect the enable caching checkbox if it is already checked. D. Click ok. 4. To clear the java cache: a. From the temporary files settings dialog, click the delete files button. The delete ...

  • Page 335

    Appendix e: informational notes 323 ipv6 support notes operating system ipv6 support notes java java ™ 1.7 supports ipv6 for the following: solaris ™ 10 (and later) linux ® kernel 2.1.2 (and later)/redhat 6.1 (and later) solaris 10 (and later) windows xp ® sp1 and windows 2003 ® , windows vista ® an...

  • Page 336

    Appendix e: informational notes 324 dual stack login performance issues if you are using the kx iii in a dual stack configuration, it is important you configured the domain system (dns) correctly in the kx iii in order to avoid delays when logging in. See tips for adding a web browser interface (on ...

  • Page 337

    Appendix e: informational notes 325 windows 2000 composite usb device behavior for virtual media the windows 2000 ® operating system does not support usb composite devices, like raritan’s d2cim-vusb, in the same manner as non-composite usb devices. As a result, the “safely remove hardware” system tr...

  • Page 338

    Appendix e: informational notes 326 cannot write to/from a file from a mac client if you are connecting to the kx iii from a mac ® 10.8.5 client running safari ® 6.1 with java ™ 1.7 and cannot write to/from a file on a target server or access virtual media, do the following to correct this: 1. In sa...

  • Page 339

    Appendix e: informational notes 327 virtual media via vkc and akc in a windows environment windows xp ® operating system administrator and standard user privileges vary from those of the windows vista ® operating system and the windows 7 ® operating system. When enabled in vista or windows 7, user a...

  • Page 340

    Appendix e: informational notes 328 virtual media linux drive listed twice for kx iii, users who are logged in to linux ™ clients as root users, the drives are listed twice in the local drive drop-down. For example, you will see eg /dev/sdc and eg /dev/sdc1 where the first drive is the boot sector a...

  • Page 341

    Appendix e: informational notes 329 usb port and profile notes vm-cims and dl360 usb ports hp ® dl360 servers have one usb port on the back of the device and another on the front of the device. With the dl360, both ports cannot be used at the same time. Therefore, a dual vm-cim cannot be used on dl3...

  • Page 342

    Appendix e: informational notes 330 usb profile help appears in the usb profile help window. For detailed information about specific usb profiles, see available usb profiles. Raritan provides a standard selection of usb configuration profiles for a wide range of operating system and bios level serve...

  • Page 343

    Appendix e: informational notes 331 changing a usb profile when using a smart card reader there may be certain circumstances under which you will need to change the usb profile for a target server. For example, you may need to change the connection speed to "use full speed for virtual media cim" whe...

  • Page 344

    Appendix e: informational notes 332 suse/vesa video modes the suse x.Org configuration tool sax2 generates video modes using modeline entries in the x.Org configuration file. These video modes do not correspond exactly with vesa video mode timing (even when a vesa monitor is selected). The kx iii, o...

  • Page 345

    Appendix e: informational notes 333 accent symbol (windows xp operating system clients only) from the virtual kvm client (vkc), the key combination of alt gr + 7 results in the accented character displaying twice when using french keyboards with windows xp ® clients. Note: this does not occur with l...

  • Page 346

    Appendix e: informational notes 334 language configuration method us intl default german keyboard indicator hungarian system settings (control center) spanish system settings (control center) swiss-german system settings (control center) norwegian keyboard indicator swedish keyboard indicator danish...

  • Page 347

    Appendix e: informational notes 335 4. Add and remove languages as necessary. Macros not saving on linux target servers if you receive the following error message when you create and then save a macro on a target server running linux ® fedora ™ 18 with java ™ 1.7.0 (update 45 and later), disable sel...

  • Page 348

    Appendix e: informational notes 336 single mouse mode when connecting to a target under cc-sg control when using firefox ® to connect to a kx iii target under cc-sg control using dcim-ps2 or dcim-usbg2, if you change to single mouse mode in the virtual kvm client (vkc), the vkc window will no longer...

  • Page 349

    Appendix e: informational notes 337 audio in a linux environment the following are known issues when using the audio feature in a linux ® environment. Linux ® users, use the default audio device for playback. Sound may not come through if a non-default sound card is selected. Suse 11 clients require...

  • Page 350

    Appendix e: informational notes 338 moving between ports on a device if you move a between ports on the same raritan device and resume management within one minute, cc-sg may display an error message. If you resume management, the display will be updated. Browser notes resolving issues with firefox ...

  • Page 351

    339 in this chapter general faqs ........................................................................................ 339 remote access ..................................................................................... 341 universal virtual media .................................................

  • Page 352

    Appendix f: frequently asked questions 340 question answer what is dominion kx iii? Dominion kx iii is a third-generation digital kvm (keyboard, video, mouse) switch that enables one, two, four or eight it administrators to access and control 8, 16, 32 or 64 servers over the network with bios-level ...

  • Page 353

    Appendix f: frequently asked questions 341 question answer how does dominion kx iii differ from remote control software? When using dominion kx iii remotely, the interface, at first glance, may seem similar to remote control software such as pcanywhere tm , windows ® terminal services/remote desktop...

  • Page 354

    Appendix f: frequently asked questions 342 question answer how many users can remotely access servers on each dominion kx iii? Dominion kx iii models offer remote connections for up to eight users per user channel to simultaneously access and control a unique target server. For one-channel devices l...

  • Page 355

    Appendix f: frequently asked questions 343 question answer what is the file size of the applet t hat’s used to access dominion kx iii? How long does it take to retrieve? The virtual kvm client (vkc) applet used to access dominion kx iii is approximately 500kb in size. The following chart describes t...

  • Page 356

    Appendix f: frequently asked questions 344 question answer do you support servers with dual video cards? Yes, dual video cards are supported with an extended desktop configuration available to the remote user. Universal virtual media question answer which dominion kx iii models support virtual media...

  • Page 357

    Appendix f: frequently asked questions 345 question answer what is required for virtual media? A dominion kx iii virtual media cim is required. There are two vga-based cims: a d2cim-vusb or d2cim-dvusb. The d2cim-vusb has a single usb connector and is for customers who will use virtual media at the ...

  • Page 358

    Appendix f: frequently asked questions 346 question answer why would i use a usb profile? Usb profiles are most often required at the bios level where there may not be full support for the usb specification when accessing virtual media drives. However, profiles are sometimes used at the os level, fo...

  • Page 359

    Appendix f: frequently asked questions 347 question answer how is bandwidth used in kvm-over-ip systems? Dominion kx iii offers totally new video processing that provides flexible, high performance video, efficient use of bandwidth and anytime/anywhere access via lan, wan or internet. The dominion k...

  • Page 360

    Appendix f: frequently asked questions 348 question answer what factors affect bandwidth? There are many factors that determine how much bandwidth will be used. The primary factor, noted above, is the amount of change in the target server’s video display. This is dependent on the user’s task and act...

  • Page 361

    Appendix f: frequently asked questions 349 question answer how do i optimize performance and bandwidth? Kx iii provides a variety of settings in our remote clients for the user to optimize bandwidth and performance. The default settings will provide an at-the-rack level of performance in standard la...

  • Page 362

    Appendix f: frequently asked questions 350 question answer what is the maximum remote (over ip) video resolution supported? The dominion kx iii is the first and only kvm-over-ip switch to support full high definition (hd) remote video resolution – 1920x1080 at frame rates up to 30 frames per second ...

  • Page 363

    Appendix f: frequently asked questions 351 question answer why does kx iii support ipv6 networking? U.S. Government agencies and the department of defense are now mandated to purchase ipv6-compatible products. In addition, many enterprises and foreign countries, such as china, will be transitioning ...

  • Page 364

    Appendix f: frequently asked questions 352 question answer what should i do to prepare a server for connection to dominion kx iii? Set the mouse parameter options to provide users with the best mouse synchronization and turn off screensavers and any power management features that affect screen displ...

  • Page 365

    Appendix f: frequently asked questions 353 question answer do i have to use hotkeys to switch between blades? Some blade servers require you to use hotkeys to switch between blades. With the dominion kx iii, you don’t have to use these hotkeys. Just click on the name of the blade server, and the dom...

  • Page 366

    Appendix f: frequently asked questions 354 question answer is absolute mouse synchronization supported? Servers with internal kvm switches inside the blade chassis typically do not support absolute mouse technology. For hp blade and some dell blade servers, a cim can be connected to each blade, so a...

  • Page 367

    Appendix f: frequently asked questions 355 question answer how far can my servers be from dominion kx iii? In general, servers can be up to 150 feet (45 m) away from dominion kx iii, depending on the type of server. (see target server video resolution supported connection distances and refresh rates...

  • Page 368

    Appendix f: frequently asked questions 356 question answer how do i connect a serially controlled (rs-232) device, such as a cisco router/switch or a headless sun server, to dominion kx iii? If there are only a few serially controlled devices, they may be connected to a dominion kx iii using raritan...

  • Page 369

    Appendix f: frequently asked questions 357 question answer can i use a usb keyboard or mouse at the local port? Yes. The dominion kx iii has usb keyboard and mouse ports on the local port. Dominion kx iii switches do not have ps/2 local ports. Customers with ps/2 keyboards and mice should utilize a ...

  • Page 370

    Appendix f: frequently asked questions 358 question answer what is the extended local port? The dominion kx2-808, kx2-832 and kx2-864 featured an extended local port. The corresponding dominion kx iii models do not have an extended local port. Instead all kx iii models have a tiering port. To extend...

  • Page 371

    Appendix f: frequently asked questions 359 question answer what type of power strips does dominion kx iii support? Raritan’s dominion px ™ and remote power control (rpc) power strips. These come in many outlet, connector and amp variations. Note that you should not connect the pm series of power str...

  • Page 372

    Appendix f: frequently asked questions 360 question answer can i access dominion kx iii over a wireless connection? Yes. Dominion kx iii not only uses standard ethernet, but also very conservative bandwidth with very high quality video. Thus, if a wireless client has network connectivity to a domini...

  • Page 373

    Appendix f: frequently asked questions 361 question answer i’m having problems connecting to the dominion kx iii over my ip network. What could be the problem? The dominion kx iii relies on your lan/wan network. Some possible problems include: ethernet auto-negotiation. On some networks, 10/100 auto...

  • Page 374

    Appendix f: frequently asked questions 362 question answer how do i physically connect multiple dominion kx iii devices together into one solution? To physically connect multiple kx iii devices together for consolidated local access, you can connect the tiering ports of multiple "tiered" (or "cascad...

  • Page 375

    Appendix f: frequently asked questions 363 question answer do i have to physically connect dominion kx iii devices together? Multiple dominion kx iii units do not need to be physically connected together. Instead, each dominion kx iii unit connects to the network, and they automatically work togethe...

  • Page 376

    Appendix f: frequently asked questions 364 question answer what type of video is supported by your cims? Our cims have traditionally supported analog vga video. Three new cims support digital video formats, including dvi, hdmi and displayport. These are the d2cim-dvusb-dvi, d2cim-dvusb-hdmi and d2ci...

  • Page 377

    Appendix f: frequently asked questions 365 question answer is the dominion kx iii fips 140-2 certified? The dominion kx iii uses an embedded fips 140-2 validated cryptographic module running on a linux platform per fips 140-2 implementation guidelines. This cryptographic module is used for encryptio...

  • Page 378

    Appendix f: frequently asked questions 366 question answer does dominion kx iii support strong passwords? Yes. The dominion kx iii has administrator-configurable, strong password checking to ensure that user-created passwords meet corporate and/or government standards and are resistant to brute forc...

  • Page 379

    Appendix f: frequently asked questions 367 question answer do enterprise and smb customers use smart cards, too? Yes. However, the most aggressive deployment of smart cards is in the u.S. Federal government. Which cims support smart card/cac? The d2cim-dvusb, d2cim-dvusb-dvi, d2cim-dvusb-hdmi and d2...

  • Page 380

    Appendix f: frequently asked questions 368 question answer what auditing or logging does dominion kx iii offer? For complete accountability, dominion kx iii logs all major user events with a date and time stamp. For instance, reported events include (but are not limited to): user login, user logout,...

  • Page 381

    Appendix f: frequently asked questions 369 question answer where do i find documentation on the dominion kx iii? The documentation is available at raritan.Com. The documentation is listed by firmware release. What documentation is available? A quick setup guide, online help, a pdf version of the hel...

  • Page 382

    Appendix f: frequently asked questions 370 question answer how do i migrate from the dominion kx ii to dominion kx iii? In general, kx ii customers can continue to use their existing switches for many years. As their data centers expand, customers can purchase and use the new kx iii models. Raritan’...

  • Page 383: Index

    371 a a. Ac power • 34 about connection properties • 217 about the cat5 reach dvi • 278 absolute mouse synchronization • 232 accent symbol (windows xp operating system clients only) • 333 access a target server from the kx iii • 42 access a virtual media drive on a client computer • 246 access and c...

  • Page 384

    Index 372 caret symbol (linux clie nts only) • 332 cc- sg notes • 337 change the default password • 37 change the keyboard layout code (sun targets) • 44 changing a password • 78 changing a usb profile when using a smart card reader • 331 changing the default gui language setting • 152 checking your...

  • Page 385

    Index 373 decommission a kx iii to archive • 296 decommission a kx iii to storage • 296 default connection property settings - optimized for best performance • 218 default login information • 29 dell • 93 dell blade chassis configuration • 97 dell chassis cable lengths and video resolutions • 95, 97...

  • Page 386

    Index 374 generic • 94 generic blade chassis configuration • 95 getting started • 9, 194, 204 group- based ip acl (access control list) • 56, 60, 62, 163 h handling conflicts in profile names • 176 hardware • 2, 297 help choosing usb profiles • 329 hot key sequences to access blade chassis • 94 hot ...

  • Page 387

    Index 375 left panel • 23 link to a blade chassis interface • 95 linux mouse settings • 33 list of kx iii snmp traps • 137 local console smart card access • 251, 273 local console usb profile options • 275 local console vide o resolutions • 266 local port - kx iiii • 356 local port consolidation, ti...

  • Page 388

    Index 376 port type • 85 power control from tiered devices • 127 power cycle • 22 power off • 22 power on • 22 power on or off a kx iii • 295 power supply setup • 142 prereq uisites for using akc • 216, 262, 264 prerequisites for using virtual media • 243 r rack mounting • 28 rack pdu (power strip) ...

  • Page 389

    Index 377 software • 3, 317 special sun key combinations • 268 specifications • 297 specify power supply autodetection • 40 ssh access from a unix/linux workstation • 192 ssh access from a windows pc • 192 ssh connection to the kx iii • 192 ssl certificates • 9, 44, 165 standard mouse mode • 233 ste...

  • Page 390

    Index 378 update a smart card reader • 253 updating the ldap schema • 207 updating the schema cache • 212 upgrade history • 178 upgrading cims • 115, 176 upgrading the kx iii firmware • 176 usb port and profile notes • 329 usb profile management • 175, 176 usb profiles • 47, 222 user authentication ...

  • Page 392

    U.S./canada/latin america monday - friday 8 a.M. - 6 p.M. Et phone: 800-724-8090 or 732-764-8886 for commandcenter noc: press 6, then press 1 for commandcenter secure gateway: press 6, then press 2 fax: 732-764-8887 email for commandcenter noc: tech-ccnoc@raritan.Com email for all other products: te...