Raritan CCA-0N-V5.1-E Instruction Manual

Copyright © 2011 Raritan, Inc.
CCA-0N-v5.1-E
February 2011
255-80-5140-00-0N
CommandCenter Secure Gateway
Administrators Guide
Release 5.1

This document contains proprietary information that is protected by copyright. All rights reserved. No
part of this document may be photocopied, reproduced, or translated into another language without
express prior written consent of Raritan, Inc.
© Copyright 2011 Raritan, Inc. All third-party software and hardware mentioned in this document are
registered trademarks or trademarks of and are the property of their respective holders.
FCC Information
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a commercial installation. This equipment generates, uses, and can
radiate radio frequency energy and if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. Operation of this equipment in a residential
environment may cause harmful interference.
VCCI Information (Japan)
Raritan is not responsible for damage to this product resulting from accident, disaster, misuse, abuse,
non-Raritan modification of the product, or other events outside of Raritan's reasonable control or not
arising under normal operating conditions.

iii
Contents
What's New in the CC-SG Administrators Guide xvii
Chapter 1 Introduction 1
Prerequisites..................................................................................................................................1
Terminology/Acronyms..................................................................................................................2
Client Browser Requirements........................................................................................................4
Chapter 2 Accessing CC-SG 5
Browser-Based Access via the CC-SG Admin Client....................................................................5
JRE Incompatibility..............................................................................................................6
Thick Client Access........................................................................................................................6
Install the Thick Client .........................................................................................................6
Use the Thick Client ............................................................................................................7
CC-SG Admin Client......................................................................................................................8
Chapter 3 Getting Started 10
Licensing - Getting Started - New and Existing Customers.........................................................10
Licensing - Basic License Information.........................................................................................11
Available Licenses.............................................................................................................11
Find Your Physical Appliance Host ID and Check Number of Nodes In Database ..........12
Licensing - New Customers - Physical Appliance .......................................................................14
Licensing - Clusters - New Customers..............................................................................16
Licensing - Virtual Appliance with License Server.......................................................................17
Virtual Appliance Installation Requirements......................................................................17
Download Installation Files................................................................................................18
Install License Server Software on a Linux or Windows Server........................................18
Get Your License...............................................................................................................19
Copy the License File to the License Server.....................................................................21
Start the License Server....................................................................................................21
Install CommandCenter Secure Gateway on VMware ESX Server 4.0............................22
Log in to Diagnostic Console to Set CC-SG IP Address...................................................22
Log in to CC-SG ................................................................................................................23
Install and Check Out Your License ..................................................................................23
License Server Communication.........................................................................................24
Command Line Utilities for Managing License Server ......................................................25
Install or Upgrade VMware Tools......................................................................................27
Configure Backups and Snapshots of Virtual Appliance and Storage Servers.................27
Virtual Appliances with Remote Storage Servers..............................................................27

Contents
iv
Licensing - Limited Operation Before License Install ..................................................................28
Licensing - Existing Customers ...................................................................................................29
Licensing - Rehosting ..................................................................................................................29
Add a License ..............................................................................................................................30
Confirming IP Address.................................................................................................................30
Setting CC-SG Server Time ........................................................................................................30
Checking the Compatibility Matrix ...............................................................................................31
Checking and Upgrading Application Versions ...........................................................................32
Chapter 4 Configuring CC-SG with Guided Setup 33
Before You Use Guided Setup ....................................................................................................33
Associations in Guided Setup......................................................................................................34
Create Categories and Elements ......................................................................................34
Device Setup................................................................................................................................34
Discover and Add Devices ................................................................................................35
Creating Groups...........................................................................................................................36
Add Device Groups and Node Groups..............................................................................36
User Management .......................................................................................................................38
Add User Groups and Users .............................................................................................39
Chapter 5 Associations, Categories, and Elements 41
About Associations ......................................................................................................................41
Association Terminology ...................................................................................................41
Associations - Defining Categories and Elements ............................................................41
How to Create Associations ..............................................................................................42
Adding, Editing, and Deleting Categories and Elements.............................................................42
Add a Category..................................................................................................................42
Delete a Category..............................................................................................................43
Add an Element.................................................................................................................43
Adding Categories and Elements with CSV File Import..............................................................43
Categories and Elements CSV File Requirements ...........................................................44
Sample Categories and Elements CSV File......................................................................45
Import Categories and Elements.......................................................................................45
Export Categories and Elements.......................................................................................46
Chapter 6 Devices, Device Groups, and Ports 47
Viewing Devices...........................................................................................................................48
The Devices Tab................................................................................................................48
Device and Port Icons .......................................................................................................48
Port Sorting Options ..........................................................................................................49
Device Profile Screen........................................................................................................50
Topology View ...................................................................................................................51
Right Click Options in the Devices Tab.............................................................................52
Searching for Devices..................................................................................................................52
Wildcards for Search .........................................................................................................52
Wildcard Examples............................................................................................................52

Contents
v
Discovering Devices ....................................................................................................................53
Adding a Device...........................................................................................................................54
Add a KVM or Serial Device..............................................................................................54
Add a PowerStrip Device...................................................................................................56
Add a Dominion PX Device ...............................................................................................56
Editing a Device...........................................................................................................................57
Change the HTTP and HTTPS Ports for a KX2 Device ..............................................................57
Editing a PowerStrip Device or a Dominion PX Device...............................................................57
Adding Notes to a Device Profile.................................................................................................58
Adding Location and Contacts to a Device Profile ......................................................................59
Deleting a Device.........................................................................................................................59
Configuring Ports.........................................................................................................................60
Configure a Serial Port ......................................................................................................60
Configure a KVM Port........................................................................................................60
Nodes Created by Configuring Ports.................................................................................61
Editing a Port ...............................................................................................................................61
Deleting a Port .............................................................................................................................62
Configuring a Blade Chassis Device Connected to KX2.............................................................63
Blade Chassis Overview....................................................................................................63
Add a Blade Chassis Device.............................................................................................64
Edit a Blade Chassis Device .............................................................................................67
Delete a Blade Chassis Device.........................................................................................67
Move a Blade Chassis Device to a Different Port .............................................................68
Restore Blade Servers Ports to Normal KX2 Ports .....................................................................68
Bulk Copying for Device Associations, Location and Contacts ...................................................69
Configuring Analog KVM Switches Connected to KX2 2.3 or Higher..........................................70
Add a KVM Switch Connected to KX2...............................................................................70
Configuring Ports on an Analog KVM Switch Device Connected to KX2..........................70
Device Group Manager................................................................................................................71
Device Groups Overview...................................................................................................72
Add a Device Group ..........................................................................................................72
Edit a Device Group ..........................................................................................................76
Delete a Device Group ......................................................................................................76
Adding Devices with CSV File Import..........................................................................................77
Devices CSV File Requirements.......................................................................................77
Sample Devices CSV File .................................................................................................81
Import Devices...................................................................................................................81
Export Devices...................................................................................................................82
Upgrading a Device .....................................................................................................................82
Backing Up a Device Configuration.............................................................................................83
Restoring Device Configurations .................................................................................................84
Restore a Device Configuration (KX, KSX, KX101, SX, IP-Reach)..................................84
Restore All Configuration Data Except Network Settings to a KX2, KSX2, or KX2-101
Device................................................................................................................................85
Restore Only Device Settings or User and User Group Data to a KX2, KSX2, or KX2-101
Device................................................................................................................................85
Restore All Configuration Data to a KX2, KSX2, or KX2-101 Device ...............................86
Save, Upload, and Delete Device Backup Files................................................................86

Contents
vi
Copying Device Configuration .....................................................................................................87
Restarting a Device......................................................................................................................88
Pinging the Device.......................................................................................................................88
Pausing CC-SG's Management of a Device................................................................................88
Resuming Management of a Device............................................................................................89
Pause and Resume Management of Devices Using a Scheduled Task.....................................89
Device Power Manager................................................................................................................90
Launching a Device's Administrative Page..................................................................................90
Disconnecting Users....................................................................................................................91
Special Access to Paragon II System Devices............................................................................91
Paragon II System Controller (P2-SC) ..............................................................................91
IP-Reach and UST-IP Administration................................................................................92
Chapter 7 Managed Powerstrips 93
Configuring Powerstrips that are Managed by Another Device in CC-SG ..................................94
Configuring PowerStrips Connected to KX, KX2, KX2-101, KSX2, and P2SC...........................95
Add a PowerStrip Device Connected to a KX, KX2, KX2-101, KSX2, or P2SC Device...95
Move a KX, KX2, KX2-101, KSX2, or P2SC's PowerStrip to a Different Port...................95
Delete a PowerStrip Connected to a KX, KX2, KX2-101, KSX2, or P2SC Device ...........96
Configuring PowerStrips Connected to SX 3.0 and KSX ............................................................96
Add a PowerStrip Connected to an SX 3.0 or KSX device ...............................................96
Delete a PowerStrip Connected to an SX 3.0 or KSX Device...........................................97
Change a PowerStrip's Device or Port Association (SX 3.0, KSX)...................................97
Configuring Powerstrips Connected to SX 3.1 ............................................................................98
Add a Powerstrip Connected to an SX 3.1 Device............................................................98
Move an SX 3.1's Powerstrip to a Different Port...............................................................99
Delete a Powerstrip Connected to an SX 3.1 Device........................................................99
Configuring Outlets on a Powerstrip............................................................................................99
Chapter 8 Nodes, Node Groups, and Interfaces 101
Nodes and Interfaces Overview.................................................................................................101
About Nodes....................................................................................................................101
Node Names....................................................................................................................102
About Interfaces...............................................................................................................102
Viewing Nodes...........................................................................................................................102
Nodes Tab.......................................................................................................................102
Node Profile.....................................................................................................................103
Node and Interface Icons ................................................................................................105
Service Accounts.......................................................................................................................106
Service Accounts Overview.............................................................................................106
Add, Edit, and Delete Service Accounts..........................................................................107
Change the Password for a Service Account..................................................................107
Assign Service Accounts to Interfaces............................................................................108
Adding, Editing, and Deleting Nodes.........................................................................................109
Add a Node......................................................................................................................109
Nodes Created by Configuring Ports...............................................................................110
Edit a Node......................................................................................................................110
Delete a Node..................................................................................................................110

Contents
vii
Adding Location and Contacts to a Node Profile.......................................................................111
Adding Notes to a Node Profile .................................................................................................111
Configuring the Virtual Infrastructure in CC-SG ........................................................................112
Terminology for Virtual Infrastructure..............................................................................112
Virtual Nodes Overview...................................................................................................113
Add a Control System with Virtual Hosts and Virtual Machines......................................113
Add a Virtual Host with Virtual Machines ........................................................................116
Edit Control Systems, Virtual Hosts, and Virtual Machines.............................................118
Delete Control Systems and Virtual Hosts ......................................................................120
Delete a Virtual Machine Node........................................................................................120
Delete a Virtual Infrastructure..........................................................................................120
vSphere 4 Users Must Install New Plug-In......................................................................121
Synchronizing the Virtual Infrastructure with CC-SG.................................................................121
Synchronize the Virtual Infrastructure .............................................................................122
Enable or Disable Daily Synchronization of the Virtual Infrastructure.............................122
Reboot or Force Reboot a Virtual Host Node............................................................................123
Accessing the Virtual Topology View.........................................................................................123
Connecting to a Node................................................................................................................124
Firefox Users of the Access Client Must Download JNLP File........................................124
Pinging a Node ..........................................................................................................................124
Adding, Editing, and Deleting Interfaces....................................................................................125
Add an Interface ..............................................................................................................125
Edit an Interface...............................................................................................................135
Delete an Interface ..........................................................................................................135
Bookmarking an Interface..........................................................................................................136
Configuring Direct Port Access to a Node.................................................................................137
Bulk Copying for Node Associations, Location and Contacts....................................................137
Using Chat .................................................................................................................................138
Adding Nodes with CSV File Import ..........................................................................................138
Nodes CSV File Requirements........................................................................................139
Sample Nodes CSV File..................................................................................................148
Import Nodes...................................................................................................................148
Export Nodes...................................................................................................................149
Editing IP Addresses with CSV File Import................................................................................149
Adding, Editing, and Deleting Node Groups..............................................................................150
Node Groups Overview ...................................................................................................150
Add a Node Group...........................................................................................................151
Edit a Node Group...........................................................................................................154
Delete a Node Group.......................................................................................................154
Chapter 9 Users and User Groups 156
The Users Tab...........................................................................................................................157
Default User Groups ..................................................................................................................158
CC Super-User Group.....................................................................................................158
System Administrators Group..........................................................................................158
CC Users Group..............................................................................................................158
Adding, Editing, and Deleting User Groups...............................................................................159
Add a User Group............................................................................................................159
Edit a User Group............................................................................................................160
Delete a User Group........................................................................................................161

Contents
viii
Limit the Number of KVM Sessions per User............................................................................162
Configuring Access Auditing for User Groups...........................................................................162
Adding, Editing, and Deleting Users..........................................................................................163
Add a User.......................................................................................................................163
Edit a User.......................................................................................................................164
Delete a User...................................................................................................................165
Assigning a User to a Group......................................................................................................165
Deleting a User From a Group...................................................................................................166
Adding Users with CSV File Import ...........................................................................................166
Users CSV File Requirements.........................................................................................167
Sample Users CSV File...................................................................................................170
Import Users....................................................................................................................171
Export Users....................................................................................................................171
Your User Profile........................................................................................................................172
Change your password....................................................................................................172
Change your name..........................................................................................................172
Change your default search preference..........................................................................172
Change the CC-SG default font size...............................................................................173
Change your email address.............................................................................................173
Change the CC-SG Super User's Username..................................................................173
Logging Users Out.....................................................................................................................173
Bulk Copying Users ...................................................................................................................174
Chapter 10 Policies for Access Control 175
Adding a Policy..........................................................................................................................176
Editing a Policy ..........................................................................................................................177
Deleting a Policy........................................................................................................................178
Support for Virtual Media...........................................................................................................179
Assigning Policies To User Groups ...........................................................................................179
Chapter 11 Custom Views for Devices and Nodes 180
Types of Custom Views.............................................................................................................180
View by Category.............................................................................................................180
Filter by Node Group .......................................................................................................180
Filter by Device Group.....................................................................................................180
Using Custom Views in the Admin Client ..................................................................................181
Custom Views for Nodes.................................................................................................181
Custom Views for Devices...............................................................................................183
Chapter 12 Remote Authentication 187
Authentication and Authorization (AA) Overview.......................................................................187
Flow for Authentication....................................................................................................187
User Accounts .................................................................................................................188
Distinguished Names for LDAP and AD ....................................................................................188
Specify a Distinguished Name for AD .............................................................................188
Specify a Distinguished Name for LDAP.........................................................................189
Specify a Username for AD.............................................................................................189

Contents
ix
Specify a Base DN...........................................................................................................189
Specifying Modules for Authentication and Authorization .........................................................189
Establishing Order of External AA Servers................................................................................190
AD and CC-SG Overview ..........................................................................................................190
Adding an AD Module to CC-SG...............................................................................................190
AD General Settings........................................................................................................191
AD Advanced Settings.....................................................................................................192
AD Group Settings...........................................................................................................193
AD Trust Settings.............................................................................................................194
Editing an AD Module................................................................................................................195
Importing AD User Groups ........................................................................................................195
Synchronizing AD with CC-SG ..................................................................................................197
Synchronize All User Groups with AD.............................................................................198
Synchronize All AD Modules ...........................................................................................199
Enable or Disable Daily Synchronization of All AD Modules...........................................199
Change the Daily AD Synchronization Time ...................................................................200
Renaming and Moving AD Groups............................................................................................201
About LDAP and CC-SG............................................................................................................201
Add an LDAP (Netscape) Module to CC-SG.............................................................................201
LDAP General Settings ...................................................................................................202
LDAP Advanced Settings ................................................................................................202
Sun One LDAP (iPlanet) Configuration Settings.............................................................203
OpenLDAP (eDirectory) Configuration Settings..............................................................204
IBM LDAP Configuration Settings ...................................................................................204
About TACACS+ and CC-SG....................................................................................................205
Add a TACACS+ Module...........................................................................................................205
TACACS+ General Settings............................................................................................205
About RADIUS and CC-SG .......................................................................................................206
Add a RADIUS Module..............................................................................................................206
RADIUS General Settings ...............................................................................................206
Two-Factor Authentication Using RADIUS......................................................................207
Chapter 13 Reports 208
Using Reports ............................................................................................................................208
Sort Report Data..............................................................................................................208
Resize Report Column Width..........................................................................................208
View Report Details.........................................................................................................209
Navigate Multiple Page Reports......................................................................................209
Print a Report...................................................................................................................209
Save a Report to a File....................................................................................................209
Purge a Report's Data From CC-SG...............................................................................210
Hide or Show Report Filters ............................................................................................210

Contents
x
Audit Trail Report.......................................................................................................................210
Error Log Report ........................................................................................................................211
Access Report............................................................................................................................212
Availability Report......................................................................................................................212
Active Users Report...................................................................................................................213
Locked Out Users Report ..........................................................................................................213
All Users Data Report................................................................................................................213
User Group Data Report............................................................................................................214
Device Asset Report ..................................................................................................................214
Device Group Data Report ........................................................................................................215
Query Port Report......................................................................................................................215
Node Asset Report.....................................................................................................................216
Active Nodes Report..................................................................................................................217
Node Creation Report................................................................................................................217
Node Group Data Report...........................................................................................................218
AD User Group Report...............................................................................................................218
Scheduled Reports ....................................................................................................................219
Upgrade Device Firmware Report .............................................................................................220
Chapter 14 System Maintenance 221
Maintenance Mode ....................................................................................................................221
Scheduled Tasks and Maintenance Mode ......................................................................221
Entering Maintenance Mode......................................................................................................222
Exiting Maintenance Mode ........................................................................................................222
Backing Up CC-SG....................................................................................................................222
What is the difference between Full backup and Standard backup? ..............................224
Saving and Deleting Backup Files.............................................................................................224
Save a Backup File..........................................................................................................224
Delete a Backup File .......................................................................................................224
Restoring CC-SG.......................................................................................................................225
Resetting CC-SG.......................................................................................................................226
Restarting CC-SG......................................................................................................................229
Upgrading CC-SG......................................................................................................................229
Clear the Browser's Cache..............................................................................................231
Clear the Java Cache......................................................................................................231
Upgrading a Cluster...................................................................................................................232
Primary Node Upgrade Failure........................................................................................233
Migrating a CC-SG Database....................................................................................................233
Requirements for Migration .............................................................................................233
Migrate a CC-SG Database.............................................................................................233
CC-SG Shutdown ......................................................................................................................234
Restarting CC-SG after Shutdown.............................................................................................235
Powering Down CC-SG.............................................................................................................235
Ending CC-SG Session .............................................................................................................235
Log Out of CC-SG ...........................................................................................................235
Exit CC-SG ......................................................................................................................236