Raritan Dominion KX II User manual

Copyright © 2012 Raritan, Inc.
DKX2-v2.4.0-0O-E
January 2012
255-62-4023-00
Dominion KX II
User Guide
Release 2.4.0

This document contains proprietary information that is protected by copyright. All rights reserved. No
part of this document may be photocopied, reproduced, or translated into another language without
express prior written consent of Raritan, Inc.
© Copyright 2012 Raritan, Inc. All third-party software and hardware mentioned in this document are
registered trademarks or trademarks of and are the property of their respective holders.
FCC Information
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a commercial installation. This equipment generates, uses, and can
radiate radio frequency energy and if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. Operation of this equipment in a residential
environment may cause harmful interference.
VCCI Information (Japan)
Raritan is not responsible for damage to this product resulting from accident, disaster, misuse, abuse,
non-Raritan modification of the product, or other events outside of Raritan's reasonable control or not
arising under normal operating conditions.
Rack Mount Safety Guidelines
In Raritan products which require Rack Mounting, please follow these precautions:
Operation temperature in a closed rack environment may be greater than room temperature. Do
not exceed the rated maximum ambient temperature of the appliances. See Specifications (on
page 286).
Ensure sufficient airflow through the rack environment.
Mount equipment in the rack carefully to avoid uneven mechanical loading.
Connect equipment to the supply circuit carefully to avoid overloading circuits.
Ground all equipment properly, especially supply connections, such as power strips (other than
direct connections), to the branch circuit.

iii
Contents
Chapter 1 Introduction 1
KX II Overview...............................................................................................................................2
KX II Help.......................................................................................................................................4
What's New in the Help.......................................................................................................4
Related Documentation.......................................................................................................5
KX II Client Applications ................................................................................................................5
Virtual Media..................................................................................................................................6
KX II Photos...................................................................................................................................7
Product Features ...........................................................................................................................9
Hardware.............................................................................................................................9
Software.............................................................................................................................10
Terminology.................................................................................................................................11
Package Contents........................................................................................................................13
Chapter 2 Installation and Configuration 14
Overview......................................................................................................................................14
Default Login Information.............................................................................................................14
Getting Started.............................................................................................................................15
Step 1: Configure KVM Target Servers.............................................................................15
Step 2: Configure Network Firewall Settings.....................................................................27
Step 3: Connect the Equipment.........................................................................................28
Step 4: Configure the KX II................................................................................................31
Step 5: Launch the KX II Remote Console........................................................................37
Step 6: Configure the Keyboard Language (Optional)......................................................39
Step 7: Configure Tiering (Optional)..................................................................................40
Chapter 3 Working with Target Servers 41
KX II Interfaces ............................................................................................................................41
KX II Local Console Interface: KX II Devices ..............................................................................42
KX II Remote Console Interface..................................................................................................42
Launching the KX II Remote Console...............................................................................42
Interface and Navigation....................................................................................................44
KX II Console Navigation...................................................................................................46
Scanning Ports ..................................................................................................................50
Managing Favorites...........................................................................................................52
Logging Out.......................................................................................................................55
Proxy Server Configuration for Use with MPC, VKC and AKC....................................................55
Virtual KVM Client (VKC) and Active KVM Client (AKC).............................................................57
About the Active KVM Client .............................................................................................57
Creating a New Attribute ...................................................................................................58

Contents
iv
Toolbar...............................................................................................................................59
Connection Properties.......................................................................................................61
Connection Information .....................................................................................................63
Keyboard Options..............................................................................................................64
Video Properties................................................................................................................69
Mouse Options...................................................................................................................74
Tool Options ......................................................................................................................79
View Options......................................................................................................................82
Digital Audio.......................................................................................................................84
Smart Cards.......................................................................................................................87
Help Options......................................................................................................................90
Multi-Platform Client (MPC).........................................................................................................90
Launching MPC from a Web Browser...............................................................................90
Chapter 4 Rack PDU (Power Strip) Outlet Control 92
Overview......................................................................................................................................92
Turning Outlets On/Off and Cycling Power .................................................................................93
Chapter 5 Virtual Media 96
Overview......................................................................................................................................97
Prerequisites for Using Virtual Media..............................................................................100
Virtual Media in a Linux Environment..............................................................................101
Conditions when Read/Write is Not Available.................................................................103
Using Virtual Media....................................................................................................................103
Virtual Media File Server Setup (File Server ISO Images Only).....................................104
Connecting to Virtual Media.......................................................................................................106
Mounting Local Drives.....................................................................................................106
Mounting CD-ROM/DVD-ROM/ISO Images....................................................................107
Disconnecting Virtual Media......................................................................................................109
Chapter 6 USB Profiles 110
Overview....................................................................................................................................110
CIM Compatibility.......................................................................................................................111
Available USB Profiles...............................................................................................................111
Selecting Profiles for a KVM Port ..............................................................................................117
Mouse Modes when Using the Mac OS-X USB Profile with a DCIM-VUSB...................118
Chapter 7 User Management 119
User Groups...............................................................................................................................119
User Group List................................................................................................................120
Relationship Between Users and Groups .......................................................................120
Adding a New User Group...............................................................................................120
Modifying an Existing User Group...................................................................................127
Users..........................................................................................................................................128
User List...........................................................................................................................128

Contents
v
Adding a New User..........................................................................................................129
Modifying an Existing User..............................................................................................129
Logging a User Off (Force Logoff)...................................................................................130
Authentication Settings..............................................................................................................131
Implementing LDAP/LDAPS Remote Authentication......................................................132
Returning User Group Information from Active Directory Server....................................136
Implementing RADIUS Remote Authentication...............................................................137
Returning User Group Information via RADIUS..............................................................141
RADIUS Communication Exchange Specifications.........................................................141
User Authentication Process...........................................................................................143
Changing a Password................................................................................................................144
Chapter 8 Device Management 145
Network Settings........................................................................................................................145
Network Basic Settings....................................................................................................146
LAN Interface Settings.....................................................................................................148
Device Services.........................................................................................................................150
Enabling SSH ..................................................................................................................150
HTTP and HTTPS Port Settings......................................................................................150
Entering the Discovery Port.............................................................................................151
Configuring and Enabling Tiering....................................................................................152
Enabling Direct Port Access via URL..............................................................................156
Enabling the AKC Download Server Certificate Validation.............................................157
Configuring Modem Settings .....................................................................................................158
Configuring Date/Time Settings.................................................................................................159
Event Management....................................................................................................................160
Configuring Event Management - Settings......................................................................160
Configuring Event Management - Destinations...............................................................163
Power Supply Setup ..................................................................................................................167
Configuring Ports.......................................................................................................................168
Configuring Standard Target Servers..............................................................................169
Configuring KVM Switches..............................................................................................171
Configuring Rack PDU (Power Strip) Targets.................................................................172
Configuring Blade Chassis..............................................................................................177
Configuring USB Profiles (Port Page).............................................................................198
Configuring KX II Local Port Settings..............................................................................201
Connect and Disconnect Scripts................................................................................................206
Applying and Removing Scripts.......................................................................................206
Adding Scripts..................................................................................................................207
Modifying Scripts .............................................................................................................210
Importing and Exporting Scripts......................................................................................210
Port Group Management...........................................................................................................211
Changing the Default GUI Language Setting............................................................................211
Chapter 9 Security Management 213
Security Settings........................................................................................................................213
Login Limitations..............................................................................................................214
Strong Passwords ...........................................................................................................216

Contents
vi
User Blocking...................................................................................................................217
Encryption & Share..........................................................................................................219
Enabling FIPS 140-2 .......................................................................................................222
Configuring IP Access Control...................................................................................................223
SSL Certificates.........................................................................................................................225
Security Banner .........................................................................................................................228
Chapter 10 Maintenance 230
Audit Log....................................................................................................................................230
Device Information.....................................................................................................................231
Backup and Restore ..................................................................................................................233
USB Profile Management..........................................................................................................235
Handling Conflicts in Profile Names................................................................................236
Upgrading CIMs.........................................................................................................................237
Upgrading Firmware ..................................................................................................................237
Upgrade History.........................................................................................................................239
Rebooting the KX II....................................................................................................................240
Stopping CC-SG Management..................................................................................................241
Chapter 11 Diagnostics 243
Network Interface Page.............................................................................................................243
Network Statistics Page.............................................................................................................244
Ping Host Page..........................................................................................................................246
Trace Route to Host Page.........................................................................................................246
Device Diagnostics ....................................................................................................................248
Chapter 12 Command Line Interface (CLI) 250
Overview....................................................................................................................................250
Accessing the KX II Using CLI...................................................................................................251
SSH Connection to the KX II .....................................................................................................251
SSH Access from a Windows PC....................................................................................251
SSH Access from a UNIX/Linux Workstation..................................................................251
Logging In..................................................................................................................................252
Navigation of the CLI.................................................................................................................252
Completion of Commands...............................................................................................252
CLI Syntax -Tips and Shortcuts.......................................................................................253
Common Commands for All Command Line Interface Levels........................................253
Initial Configuration Using CLI...................................................................................................254
Setting Parameters..........................................................................................................254
Setting Network Parameters............................................................................................254
CLI Prompts...............................................................................................................................255
CLI Commands..........................................................................................................................255
Security Issues ................................................................................................................256
Administering the KX II Console Server Configuration Commands..........................................256
Configuring Network ..................................................................................................................256
Interface Command.........................................................................................................257
Name Command ............................................................................................................258

Contents
vii
IPv6 Command................................................................................................................258
Chapter 13 KX II Local Console 259
Overview....................................................................................................................................259
Simultaneous Users...................................................................................................................259
KX II Local Console Interface: KX II Devices ............................................................................260
Security and Authentication.......................................................................................................260
Available Resolutions.................................................................................................................261
Port Access Page (Local Console Server Display) ...................................................................262
Accessing a Target Server ........................................................................................................264
Scanning Ports - Local Console ................................................................................................265
Using Scan Options.........................................................................................................266
Local Console Smart Card Access............................................................................................267
Smart Card Access in KX2 8xx Devices .........................................................................268
Local Console USB Profile Options...........................................................................................268
Hot Keys and Connect Keys......................................................................................................269
Connect Key Examples...................................................................................................269
Special Sun Key Combinations .................................................................................................270
Returning to the KX II Local Console Interface .........................................................................271
Local Port Administration...........................................................................................................271
Configuring KX II Local Console Local Port Settings......................................................272
KX II Local Console Factory Reset .................................................................................276
Connect and Disconnect Scripts................................................................................................277
Applying and Removing Scripts.......................................................................................277
Adding Scripts..................................................................................................................278
Modifying Scripts .............................................................................................................281
Resetting the KX II Using the Reset Button...............................................................................281
Appendix A Using KX II to Access Paragon II 283
Overview....................................................................................................................................283
Connecting the Paragon II to the KX II......................................................................................284
Appendix B Specifications 286
Physical Specifications ..............................................................................................................286
Computer Interface Module (CIMs) Specifications....................................................................288
Supported Operating Systems (Clients)....................................................................................288
Supported Browsers ..................................................................................................................289
Supported Paragon CIMS and Configurations..........................................................................290
KX II to KX II Guidelines..................................................................................................291
KX II to Paragon II Guidelines.........................................................................................292
Supported Distance for KX II Integration.........................................................................294
Supported Video Resolutions....................................................................................................294
Target Server Connection Distance and Video Resolution.............................................295
Smart Card Readers..................................................................................................................296
Supported and Unsupported Smart Card Readers.........................................................296
Smart Card Minimum System Requirements..................................................................297

Contents
viii
Dell Chassis Cable Lengths and Video Resolutions .................................................................299
Audio Bandwidth Requirements ................................................................................................300
Number of Supported Audio/Virtual Media and Smartcard Connections..................................301
Certified Modems.......................................................................................................................301
Devices Supported by the Extended Local Port........................................................................301
KX2 8xx Extended Local Port Recommended Maximum Distances.........................................301
Remote Connection...................................................................................................................302
Supported Keyboard Languages...............................................................................................302
TCP and UDP Ports Used.........................................................................................................303
Events Captured in the Audit Log and Syslog...........................................................................305
Network Speed Settings............................................................................................................305
Appendix C Updating the LDAP Schema 307
Returning User Group Information.............................................................................................307
From LDAP/LDAPS.........................................................................................................307
From Microsoft Active Directory ......................................................................................307
Setting the Registry to Permit Write Operations to the Schema ...............................................308
Creating a New Attribute............................................................................................................308
Adding Attributes to the Class ...................................................................................................309
Updating the Schema Cache.....................................................................................................311
Editing rciusergroup Attributes for User Members.....................................................................311
Appendix D Informational Notes 315
Overview....................................................................................................................................315
Java Runtime Environment (JRE) .............................................................................................315
IPv6 Support Notes....................................................................................................................316
Keyboards..................................................................................................................................317
Non-US Keyboards..........................................................................................................317
Macintosh Keyboard........................................................................................................319
Fedora........................................................................................................................................320
Resolving Fedora Core Focus.........................................................................................320
Mouse Pointer Synchronization (Fedora)........................................................................320
VKC and MPC Smart Card Connections to Fedora Servers...........................................320
Resolving Issues with Firefox Freezing when Using Fedora ..........................................320
Video Modes and Resolutions...................................................................................................321
SUSE/VESA Video Modes..............................................................................................321
Supported Video Resolutions Not Displaying..................................................................321
Audio..........................................................................................................................................322
Audio Playback and Capture Issues ...............................................................................322
Audio in a Linux Environment..........................................................................................322
Audio in a Mac Environment............................................................................................323
Audio in a Windows Environment....................................................................................323
USB Ports and Profiles..............................................................................................................323
VM-CIMs and DL360 USB Ports.....................................................................................323
Help for Choosing USB Profiles ......................................................................................323
Changing a USB Profile when Using a Smart Card Reader...........................................325
Virtual Media..............................................................................................................................326
Virtual Media via VKC and AKC in a Windows Environment..........................................326

Contents
ix
Virtual Media Not Refreshed After Files Added...............................................................327
Active System Partitions..................................................................................................327
Drive Partitions ................................................................................................................327
Virtual Media Linux Drive Listed Twice ...........................................................................328
Mac and Linux Locked, Mapped Drives..........................................................................328
Accessing Virtual Media on a Windows 2000 Server Using a D2CIM-VUSB.................328
Target BIOS Boot Time with Virtual Media......................................................................328
Virtual Media Connection Failures Using High Speed for Virtual Media Connections....328
CIMs...........................................................................................................................................328
Windows 3-Button Mouse on Linux Targets....................................................................328
Windows 2000 Composite USB Device Behavior for Virtual Media................................329
CC-SG .......................................................................................................................................329
Virtual KVM Client Version Not Known from CC-SG Proxy Mode..................................329
Single Mouse Mode - Connecting to a Target Under CC-SG Control Via VKC Using
Firefox..............................................................................................................................330
Proxy Mode and MPC .....................................................................................................330
Moving Between Ports on a Device.................................................................................330
Appendix E Frequently Asked Questions 331
Frequently Asked Questions......................................................................................................331
Index 345

1
In This Chapter
KX II Overview...........................................................................................2
KX II Help...................................................................................................4
KX II Client Applications............................................................................5
Virtual Media..............................................................................................6
KX II Photos...............................................................................................7
Product Features.......................................................................................9
Terminology.............................................................................................11
Package Contents...................................................................................13
Chapter 1
Introduction

Chapter 1: Introduction
2
KX II Overview
Raritan's Dominion KX II is an enterprise-class, secure, digital KVM
(Keyboard, Video, Mouse) switch that provides BIOS-level (and up)
access and control of servers from anywhere in the world via a web
browser. Up to 64 servers can be controlled with a standard KX II. With
the KX II 8-user model, up to 32 servers can be controlled with the KX2-
832 and up to 64 servers can be controlled with the KX2-864. A scan
feature allows you to locate and view up to 32 targets. The targets are
displayed as thumbnails in a slide show from which users connect to
each target.
The KX II supports up to 8 video channels, allowing up to eight
concurrent users to connect to eight different video targets at any given
point in time. Digital audio devices are supported, allowing you to
connect to playback and record devices from the remote client PC to the
target server. At the rack, the KX II provides BIOS-level control of up to
64 servers and other IT devices from a single keyboard, monitor, and
mouse. The integrated remote access capabilities of the KX II provide
the same levels of control of your servers via a web browser.
The KX II is easily installed using standard UTP (Cat 5/5e/6) cabling. Its
advanced features include virtual media, 256-bit encryption, dual power
supplies, remote power control, dual Ethernet, LDAP, RADIUS, Active
Directory®, Syslog integration, external modem capabilities, and web
management. The KX II 8-user model also provides an extended local
port located on the back of the device. These features enable you to
deliver higher up-time, better productivity, and bulletproof security - at
any time from anywhere.
KX II products can operate as standalone appliances and do not rely on
a central management device. For larger data centers and enterprises,
numerous KX II devices (along with Dominion SX devices for remote
serial console access and Dominion KSX for remote/branch office
management) can be integrated into a single logical solution using
Raritan's CommandCenter Secure Gateway (CC-SG) management unit.

Chapter 1: Introduction
3

Chapter 1: Introduction
4
Diagram key
Local port access
Tiering
IP-based network
access
Extended local port
Modem
Mobile access via iPhone®
and iPad®using CC-SG
Virtual media
Digital audio
Smart card access at
the rack
CIMs
Remote smart card
access
Cat5/6 cable
KX II Help
The KX II help provides information on how to install, set up, and
configure the KX II. It also includes information on accessing target
servers, using virtual media, managing users and security, and
maintaining and diagnosing the KX II.
See the KX II release notes for important information on the current
release before you begin using the KX II.
A PDF version of the help can be downloaded from the Raritan
Firmware and Documentation page on the Raritan website. Raritan
recommends that you refer to the Raritan website for the most up-to-date
user guides available.
To use online help, Active Content must be enabled in your browser. If
you are using Internet Explorer 7, you must enable Scriplets. Consult
your browser help for information on enabling these features.
What's New in the Help
The following information has been added based on enhancements and
changes to the equipment and/or user documentation.
New KX2-808 model with 8 KVM ports, 1 local port, 1 extended local
port, and support for 8 remote users over the network
Please see the KX II Release Notes for a more detailed explanation of
the changes applied to the appliance and this version of the help.

Chapter 1: Introduction
5
Related Documentation
The KX II help is accompanied by the KX II Quick Setup Guide, which
can be found on the Raritan Firmware and Documentation page of
Raritan's website (http://www.raritan.com/support/firmware-and-
documentation).
Installation requirements and instructions for client applications used with
the KX II can be found in the KVM and Serial Access Clients Guide,
also found on the Raritan website. Where applicable, specific client
functions used with the KX II are included in the help.
KX II Client Applications
The following client applications can be used in the KX II:
Product
Works with...
MPC
AKC
VKC
RSC
RRC
KX II (Generation 2)
KX II 2.2 (or later)
See the KVM and Serial Client Guide for additional information on the
client applications. Also see the Working with Target Servers (on page
41) section of this guide, which contains information on using the clients
with the KX II.
Note: MPC and VKC require the Java™Runtime Environment (JRE™).
AKC is .NET based.

Chapter 1: Introduction
6
Virtual Media
All KX II models support virtual media. Each KX II comes equipped with
virtual media to enable remote management tasks using the widest
variety of CD, DVD, USB, audio playback and record devices, internal
and remote drives, and images. The KX II supports virtual media access
of hard drives and remotely mounted images.
Virtual media sessions are secured using 256-bit AES or RC4
encryption.
The D2CIM-VUSB CIM and D2CIM-DVUSB (computer interface module)
support virtual media sessions to KVM target servers supporting the USB
2.0 interface. These CIMs also support Absolute Mouse Synchronization
as well as remote firmware update.
Note: The black connector on the DVUSB CIM is used for keyboard and
mouse. The gray connector is used for virtual media. Keep both plugs of
the CIM connected to the device. The device may not operate properly if
both plugs are not connected to the target server.

Chapter 1: Introduction
7
KX II Photos
KX II
KX2-808

Chapter 1: Introduction
8
KX2-832
KX2-864
CIMs

Chapter 1: Introduction
9
Product Features
Hardware
Integrated KVM-over-IP remote access
1U or 2U rack-mountable (brackets included)
Dual power supplies with failover; autoswitching power supply with
power failure warning
Support for tiering in which a base KX II device is used to access
multiple other tiered devices. See Configuring and Enabling
Tiering (on page 152) for more information on tiering.
Multiple user capacity (1/2/4/8 remote users; 1 local user)
UTP (Cat5/5e/6) server cabling
Dual Ethernet ports (10/100/1000 LAN) with failover
Field upgradable
Local User port for in-rack access
PS/2 keyboard/mouse ports. KX2-808, KX2-832 and KX2-864
are USB only
One front and three back panel USB 2.0 ports for supported USB
devices
Fully concurrent with remote user access
Local graphical user interface (GUI) for administration
Extended local port provides extended reach to in-rack access on
KX2 8xx devices
Centralized access security
Integrated power control
LED indicators for dual power status, network activity, and remote
user status
Hardware Reset button
Serial port to connect to an external modem
Supported users and ports per model:
Model
Remote users
Ports
KX II-864
8
64
KX II-832
8
32
KX II-808
8
8
KX II-464
4
64
KX II-432
4
32

Chapter 1: Introduction
10
Model
Remote users
Ports
KX II-416
4
16
KX II-232
2
32
KX II-216
2
16
KX II-132
1
32
KX II-116
1
16
KX II-108
1
8
Software
Virtual media support in Windows®, Mac®and Linux®environments
with D2CIM-VUSB and D2CIM-DVUSB CIMs
Support for digital audio over USB
Port scanning and thumbnail view of up to 32 targets within a
configurable scan set
Absolute Mouse Synchronization with D2CIM-VUSB CIM and
D2CIM-DVUSB CIMs
Plug-and-Play
Web-based access and management
Intuitive graphical user interface (GUI)
256-bit encryption of complete KVM signal, including video and
virtual media
LDAP, Active Directory®, RADIUS, or internal authentication and
authorization
DHCP or fixed IP addressing
Smart card/CAC authentication
SNMP and Syslog management
IPv4 and IPv6 support
Power control associated directly with servers to prevent mistakes
Integration with Raritan's CommandCenter Secure Gateway (CC-
SG) management unit
CC Unmanage feature to remove device from CC-SG control

Chapter 1: Introduction
11
Terminology
Help uses the following terminology for typical KX II components: