Raritan Dominion KX II User manual

Copyright © 2010 Raritan, Inc.
DKX2-v2.3.0-0M-E
July 2010
255-62-4023-00
Dominion KX II
User Guide
Release 2.3

This document contains proprietary information that is protected by copyright. All rights reserved. No
part of this document may be photocopied, reproduced, or translated into another language without
express prior written consent of Raritan, Inc.
© Copyright 2010 Raritan, Inc. All third-party software and hardware mentioned in this document are
registered trademarks or trademarks of and are the property of their respective holders.
FCC Information
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a commercial installation. This equipment generates, uses, and can
radiate radio frequency energy and if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. Operation of this equipment in a residential
environment may cause harmful interference.
VCCI Information (Japan)
Raritan is not responsible for damage to this product resulting from accident, disaster, misuse, abuse,
non-Raritan modification of the product, or other events outside of Raritan's reasonable control or not
arising under normal operating conditions.

iii
Contents
Chapter 1 Introduction 1
Dominion KX II Help.......................................................................................................................1
Related Documentation.......................................................................................................1
What's New in the Help.......................................................................................................2
Dominion KX II Overview...............................................................................................................3
Client Applications that Can Be Used with the Dominion KX II.....................................................5
Virtual Media..................................................................................................................................6
Product Photos ..............................................................................................................................7
Product Features ...........................................................................................................................9
Hardware.............................................................................................................................9
Software.............................................................................................................................10
Terminology.................................................................................................................................10
Package Contents........................................................................................................................12
Chapter 2 Installation and Configuration 13
Overview......................................................................................................................................13
Default Login Information.............................................................................................................13
Getting Started.............................................................................................................................14
Step 1: Configure KVM Target Servers.............................................................................14
Step 2: Configure Network Firewall Settings.....................................................................25
Step 3: Connect the Equipment.........................................................................................26
Step 4: Configure the Dominion KX II ...............................................................................29
Valid Special Characters for Target Names......................................................................32
Step 5 (Optional): Configure Keyboard Language............................................................35
Chapter 3 Working with Target Servers 36
Interfaces.....................................................................................................................................36
Dominion KX II Local Console Interface............................................................................37
Dominion KX II Remote Console Interface........................................................................37
Proxy Server Configuration for use with Dominion KX II, MPC, VKC and AKC..........................50
Multi-Platform Client Interface .....................................................................................................51
Launching MPC from a Web Browser...............................................................................51
Virtual KVM Client........................................................................................................................52
Overview............................................................................................................................52
Connecting to a KVM Target Server .................................................................................52
VKC Toolbar......................................................................................................................53
Switching Between KVM Target Servers ..........................................................................54
Power Controlling a Target Server....................................................................................54
Disconnecting KVM Target Servers ..................................................................................55
Choosing USB Profiles......................................................................................................56

Contents
iv
Connection Properties.......................................................................................................57
Connection Information .....................................................................................................59
Keyboard Options..............................................................................................................59
Video Properties................................................................................................................62
Mouse Options...................................................................................................................68
VKC Virtual Media.............................................................................................................73
Smart Cards (VKC, AKC and MPC)..................................................................................74
Tool Options ......................................................................................................................76
View Options......................................................................................................................79
Help Options......................................................................................................................80
Active KVM Client (AKC).............................................................................................................80
Overview............................................................................................................................80
AKC Supported Operating Systems and Browsers...........................................................81
Prerequisites for Using AKC..............................................................................................82
Chapter 4 Power Strip (Rack PDU) Outlet Control 83
Overview......................................................................................................................................83
Turning Outlets On/Off and Cycling Power .................................................................................84
Chapter 5 Virtual Media 87
Overview......................................................................................................................................88
Prerequisites for Using Virtual Media ..........................................................................................91
Using Virtual Media via VKC and AKC in a Windows Environment............................................92
Using Virtual Media......................................................................................................................93
File Server Setup (File Server ISO Images Only)........................................................................94
Connecting to Virtual Media.........................................................................................................96
Local Drives.......................................................................................................................96
Conditions when Read/Write is Not Available...................................................................97
CD-ROM/DVD-ROM/ISO Images......................................................................................97
Disconnecting Virtual Media........................................................................................................99
Chapter 6 USB Profiles 100
Overview....................................................................................................................................100
CIM Compatibility.......................................................................................................................101
Available USB Profiles...............................................................................................................101
Selecting Profiles for a KVM Port ..............................................................................................107
Mouse Modes when Using the Mac OS-X USB Profile with a DCIM-VUSB...................107
Chapter 7 User Management 108
User Groups...............................................................................................................................108
User Group List................................................................................................................109
Relationship Between Users and Groups .......................................................................109
Adding a New User Group...............................................................................................109
Modifying an Existing User Group...................................................................................116

Contents
v
Users..........................................................................................................................................117
User List...........................................................................................................................117
Adding a New User..........................................................................................................118
Modifying an Existing User..............................................................................................118
Logging a User Off (Force Logoff)...................................................................................119
Authentication Settings..............................................................................................................120
Implementing LDAP/LDAPS Remote Authentication......................................................121
Returning User Group Information from Active Directory Server....................................125
Implementing RADIUS Remote Authentication...............................................................126
Returning User Group Information via RADIUS..............................................................128
RADIUS Communication Exchange Specifications.........................................................128
User Authentication Process...........................................................................................130
Changing a Password................................................................................................................131
Chapter 8 Device Management 132
Network Settings........................................................................................................................132
Network Basic Settings....................................................................................................133
LAN Interface Settings.....................................................................................................135
Device Services.........................................................................................................................137
Enabling SSH ..................................................................................................................138
HTTP and HTTPS Port Settings......................................................................................138
Entering the Discovery Port.............................................................................................138
Configuring and Enabling Tiering....................................................................................139
Enabling Direct Port Access............................................................................................143
Enabling the AKC Download Server Certificate Validation.............................................144
Configuring Modem Settings .....................................................................................................145
Configuring Date/Time Settings.................................................................................................146
Event Management....................................................................................................................148
Configuring Event Management - Settings......................................................................148
Event Management - Destinations ..................................................................................150
Power Supply Setup ..................................................................................................................154
Configuring Ports.......................................................................................................................156
Configuring Standard Target Servers..............................................................................157
Configuring KVM Switches..............................................................................................158
Configuring Power Strip (Rack PDU) Targets.................................................................159
Configuring Blade Chassis..............................................................................................165
Configuring USB Profiles (Port Page).............................................................................185
Configuring Dominion KX II Local Port Settings..............................................................188
Chapter 9 Security Management 193
Security Settings........................................................................................................................193
Login Limitations..............................................................................................................194
Strong Passwords ...........................................................................................................195
User Blocking...................................................................................................................196
Encryption & Share..........................................................................................................197
Enabling FIPS 140-2 .......................................................................................................200

Contents
vi
Configuring IP Access Control...................................................................................................202
SSL Certificates.........................................................................................................................205
Security Banner .........................................................................................................................207
Chapter 10 Maintenance 209
Audit Log....................................................................................................................................209
Device Information.....................................................................................................................210
Backup and Restore ..................................................................................................................211
USB Profile Management..........................................................................................................214
Handling Conflicts in Profile Names................................................................................215
Upgrading CIMs.........................................................................................................................215
Upgrading Firmware ..................................................................................................................216
Upgrade History.........................................................................................................................219
Rebooting...................................................................................................................................219
Stopping CC-SG Management..................................................................................................221
Chapter 11 Diagnostics 223
Network Interface Page.............................................................................................................223
Network Statistics Page.............................................................................................................223
Ping Host Page..........................................................................................................................226
Trace Route to Host Page.........................................................................................................226
Device Diagnostics ....................................................................................................................228
Chapter 12 Command Line Interface (CLI) 230
Overview....................................................................................................................................230
Accessing the Dominion KX II Using CLI...................................................................................231
SSH Connection to the Dominion KX II.....................................................................................231
SSH Access from a Windows PC....................................................................................231
SSH Access from a UNIX/Linux Workstation..................................................................232
Telnet Connection to the Dominion KX II...................................................................................232
Enabling Telnet................................................................................................................232
Access Telnet from a Windows PC.................................................................................232
Logging In..................................................................................................................................233
Navigation of the CLI.................................................................................................................234
Completion of Commands...............................................................................................234
CLI Syntax -Tips and Shortcuts.......................................................................................234
Common Commands for All Command Line Interface Levels........................................235
Initial Configuration Using CLI...................................................................................................235
Setting Parameters..........................................................................................................235
Setting Network Parameters............................................................................................236
CLI Prompts...............................................................................................................................236
CLI Commands..........................................................................................................................236
Security Issues ................................................................................................................237
Administering the Dominion KX II Console Server Configuration Commands..........................237
Configuring Network ..................................................................................................................238
Interface Command.........................................................................................................238
Name Command...........................................................................................................239

Contents
vii
IPv6 Command................................................................................................................239
Chapter 13 Dominion KX II Local Console 240
Overview....................................................................................................................................240
Using the Dominion KX II Local Console...................................................................................240
Simultaneous Users ........................................................................................................240
Dominion KX II Local Console Interface....................................................................................241
Security and Authentication.......................................................................................................241
Local Console Smart Card Access............................................................................................242
Smart Card Access in KX2 8 Devices.............................................................................243
Local Console USB Profile Options...........................................................................................243
Available Resolutions.................................................................................................................244
Port Access Page (Local Console Server Display) ...................................................................245
Hot Keys and Connect Keys......................................................................................................247
Connect Key Examples...................................................................................................247
Special Sun Key Combinations .................................................................................................248
Accessing a Target Server ........................................................................................................249
Returning to the Dominion KX II Local Console Interface.........................................................249
Local Port Administration...........................................................................................................250
Configuring Dominion KX II Local Console Local Port Settings......................................250
Dominion KX II Local Console Factory Reset.................................................................254
Resetting the Dominion KX II Using the Reset Button ..............................................................255
Appendix A Specifications 256
Physical Specifications ..............................................................................................................256
Environmental Requirements ....................................................................................................258
Computer Interface Modules (CIMs)..........................................................................................259
Supported CIMs and Operating Systems (Target Servers).......................................................261
Supported Paragon CIMS and Configurations..........................................................................267
Dominion KX II to Dominion KX II Guidelines .................................................................268
Dominion KX II to Paragon II Guidelines.........................................................................269
Supported Operating Systems (Clients)....................................................................................271
Supported Browsers ..................................................................................................................272
Certified Modems.......................................................................................................................272
Devices Supported by the KX2-832 and KX2-864 Extended Local Port...................................273
Target Server Connection Distance and Video Resolution.......................................................273
KX2-832 and KX2-864 Extended Local Port Recommended Maximum Distances..................273
Remote Connection...................................................................................................................274
Supported Video Resolutions....................................................................................................274
Supported Keyboard Languages...............................................................................................275
Smart Card Readers..................................................................................................................276
Supported and Unsupported Smart Card Readers.........................................................276
Minimum System Requirements......................................................................................278

Contents
viii
TCP and UDP Ports Used.........................................................................................................279
Network Speed Settings............................................................................................................281
Appendix B Updating the LDAP Schema 283
Returning User Group Information.............................................................................................283
From LDAP......................................................................................................................283
From Microsoft Active Directory ......................................................................................283
Setting the Registry to Permit Write Operations to the Schema ...............................................284
Creating a New Attribute............................................................................................................284
Adding Attributes to the Class ...................................................................................................285
Updating the Schema Cache.....................................................................................................287
Editing rciusergroup Attributes for User Members.....................................................................287
Appendix C Informational Notes 291
Overview....................................................................................................................................291
Java Runtime Environment (JRE) .............................................................................................291
IPv6 Support Notes....................................................................................................................292
Keyboards..................................................................................................................................293
Non-US Keyboards..........................................................................................................293
Macintosh Keyboard........................................................................................................295
Mouse Pointer Synchronization (Fedora)..................................................................................296
Dell Chassis Cable Lengths and Video Resolutions .................................................................296
Fedora........................................................................................................................................297
Resolving Fedora Core Focus.........................................................................................297
VKC and MPC Smart Card Connections to Fedora Servers...........................................297
Resolving Issues with Firefox Freezing when Using Fedora ..........................................297
Video Modes and Resolutions...................................................................................................297
SUSE/VESA Video Modes..............................................................................................297
Supported Video Resolutions Not Displaying..................................................................298
USB Ports and Profiles..............................................................................................................298
VM-CIMs and DL360 USB Ports.....................................................................................298
Help for Choosing USB Profiles ......................................................................................298
Changing a USB Profile when Using a Smart Card Reader...........................................300
CIMs...........................................................................................................................................300
Windows 3-Button Mouse on Linux Targets....................................................................300
Windows 2000 Composite USB Device Behavior for Virtual Media................................301
Virtual Media..............................................................................................................................301
Virtual Media Not Refreshed After Files Added...............................................................301
Accessing Virtual Media on a Windows 2000 Server Using a D2CIM-VUSB.................302
Target BIOS Boot Time with Virtual Media......................................................................302
Virtual Media Connection Failures Using High Speed for Virtual Media Connections....302
CC-SG .......................................................................................................................................302
Virtual KVM Client Version Not Known from CC-SG Proxy Mode..................................302
Single Mouse Mode - Connecting to a Dominion KX II Target Under CC-SG Control Via
VKC Using Firefox...........................................................................................................302
Proxy Mode and MPC .....................................................................................................303
Moving Between Ports of the Dominion KX II .................................................................303

Contents
ix
Appendix D FAQs 304
General Questions.....................................................................................................................305
Remote Access..........................................................................................................................307
Universal Virtual Media..............................................................................................................309
USB Profiles...............................................................................................................................310
Bandwidth and KVM-over-IP Performance................................................................................312
Ethernet and IP Networking.......................................................................................................317
IPv6 Networking.........................................................................................................................320
Servers.......................................................................................................................................322
Blade Servers ............................................................................................................................323
Installation..................................................................................................................................326
Local Port...................................................................................................................................328
Extended Local Port (Dominion KX2-832 and KX2-864 Models Only) .....................................330
Power Control............................................................................................................................331
Scalability...................................................................................................................................333
Computer Interface Modules (CIMs)..........................................................................................335
Security......................................................................................................................................336
Smart Cards and CAC Authentication.......................................................................................338
Manageability.............................................................................................................................339
Miscellaneous............................................................................................................................340
Index 341

1
In This Chapter
Dominion KX II Help..................................................................................1
Dominion KX II Overview...........................................................................3
Client Applications that Can Be Used with the Dominion KX II.................5
Virtual Media..............................................................................................6
Product Photos..........................................................................................7
Product Features.......................................................................................9
Terminology.............................................................................................10
Package Contents...................................................................................12
Dominion KX II Help
The Dominion KX II help provides information on how to install, set up,
and configure the Dominion KX II. It also includes information on
accessing target servers and power strips, using virtual media, managing
users and security, and maintaining and diagnosing the Dominion KX II.
A PDF version of the help can be downloaded from the Raritan
Firmware and Documentation page
http://www.raritan.com/support/firmware-and-documentation/ on the
Raritan website. Raritan recommends that you refer to the Raritan
website for the most up-to-date user guides available.
In order to use online help, Active Content must be enabled in your
browser. If you are using Internet Explorer 7, you must enable Scriplets.
Consult your browser help for information on enabling these features.
Related Documentation
The Dominion KX II help is accompanied by a Dominion KX II Device
Quick Setup Guide and a Dominion KX II VMWare Quick Setup Guide,
which can be found on the Raritan Firmware and Documentation page
http://www.raritan.com/support/firmware-and-documentation/ of
Raritan's website. Installation requirements and instructions for client
applications used with the Dominion KX II can be found in the KVM and
Serial Access Clients Guide, also found on the Raritan website. Where
applicable, specific client functions used with the Dominion KX II are
included in the help.
Chapter 1
Introduction

Chapter 1: Introduction
2
What's New in the Help
The following information has been added based on enhancements and
changes to the equipment and/or user documentation.
You are now able to use a tiering configuration in which a base
Dominion KX II device is used to access multiple other tiered
devices. See Configuring and Enabling Tiering (on page 139) for
more information on tiering.
You are now able to configure HTTP and/or HTTPS ports used by
the Dominion KX II. See HTTP and HTTPS Port Settings (on page
138).
A security banner feature has been added that allows you to create
and display a security banner and optionally require users to accept
or decline a security agreement during the Dominion KX II login
process. See Security Banner (on page 207).
The Dominion KX II supports the P2CIM-APS2DUAL and
P2CIM-AUSBDUAL CIMs, which provide two RJ45 connections to
different KVM switches. See Supported Paragon CIMS and
Configurations (on page 267).
A new tab has been added to the Port Access page that allows you
to search for a server by name. See Port Access Page (on page
42).
Additional prerequisite information has been added to the help
regarding using AKC. See Prerequisites for Using AKC (on page
82).
You are now able to select the active USB profile from the local
console. See Local Console USB Profile Options (on page 243).
Please see the release notes for a more detailed explanation of the
changes applied to this version of the help.

Chapter 1: Introduction
3
Dominion KX II Overview
The Dominion KX II is an enterprise-class, secure, digital KVM
(Keyboard, Video, Mouse) switch that provides BIOS-level (and up)
access and control of servers from anywhere in the world via a web
browser. Up to 64 servers can be controlled with a standard Dominion
KX II. With the Dominion KX II 8-user model, up to 32 servers can be
controlled with the KX2-832 and up to 64 servers can be controlled with
the KX2-864.
The Dominion KX II supports up to 8 video channels, allowing up to eight
concurrent users to connect to eight different video targets at any given
point in time. At the rack, the Dominion KX II provides BIOS-level control
of up to 64 servers and other IT devices from a single keyboard, monitor,
and mouse. The integrated remote access capabilities of the Dominion
KX II provide the same levels of control of your servers via a web
browser.
The Dominion KX II is easily installed using standard UTP (Cat 5/5e/6)
cabling. Its advanced features include virtual media, 128-bit encryption,
dual power supplies, remote power control, dual Ethernet, LDAP,
RADIUS, Active Directory®, Syslog integration, external modem
capabilities, and web management. The Dominion KX II 8-user model
also provides an extended local port located on the back of the device.
These features enable you to deliver higher up-time, better productivity,
and bulletproof security - at any time from anywhere.
The Dominion KX II products can operate as standalone appliances and
do not rely on a central management device. For larger data centers and
enterprises, numerous Dominion KX II devices (along with Dominion SX
devices for remote serial console access and Dominion KSX for
remote/branch office management) can be integrated into a single logical
solution using Raritan's CommandCenter Secure Gateway (CC-SG)
management unit.

Chapter 1: Introduction
4

Chapter 1: Introduction
5
Diagram key
Cat5 cable
Remote virtual media USB
drive(s)
Computer Interface
Module (CIM)
Power strip
Dominion KX II
Local access
Note: KX2-832 and
KX2-864 also use an
extended local port.
Remote KVM and serial
devices
IP LAN/WAN
Modem
PSTN
Remote (network)
access
Client Applications that Can Be Used with the Dominion KX II
The following client applications can be used in the Dominion KX II:
Product
Works with...
MPC
RRC
VKC
RSC
AKC
KX II (Generation 2)
KX II 2.2 (or later)
See the KVM and Serial Client Guide for additional information on the
client applications. Also see the Working with Target Servers (on page
36) section of this guide, which contains information on using the clients
with the Dominion KX II.
Note: MPC and VKC require the Java™Runtime Environment (JRE™).
AKC is .NET based.

Chapter 1: Introduction
6
Virtual Media
All Dominion KX II models support virtual media. The benefits of virtual
media - mounting of remote drives/media on the target server to support
software installation and diagnostics - are now available in all of the
Dominion KX II models.
Each Dominion KX II comes equipped with virtual media to enable
remote management tasks using the widest variety of CD, DVD, USB,
internal and remote drives and images. Unlike other solutions, the
Dominion KX II supports virtual media access of hard drives and
remotely mounted images for added flexibility and productivity.
Virtual media sessions are secured using 128-bit AES or RC4
encryption.
The D2CIM-VUSB CIM and D2CIM-DVUSB (computer interface module)
support virtual media sessions to KVM target servers supporting the USB
2.0 interface. These CIMs also support Absolute Mouse
Synchronization™ as well as remote firmware update.
Note: The black connector on the DVUSB CIM is used for keyboard and
mouse. The gray connector is used for virtual media. Keep both plugs of
the CIM connected to the device. The device may not operate properly if
both plugs are not connected to the target server.

Chapter 1: Introduction
7
Product Photos
Dominion KX II
KX2-832

Chapter 1: Introduction
8
KX2-864

Chapter 1: Introduction
9
Product Features
Hardware
Integrated KVM-over-IP remote access
1U or 2U rack-mountable (brackets included)
Dual power supplies with failover; autoswitching power supply with
power failure warning
8, 16, 32, or 64 (on KX2-464) server ports
32 (KX2-832) or 64 (KX2-864) server ports
Support for tiering in which a base Dominion KX II device is used to
access multiple other tiered devices. See Configuring and
Enabling Tiering (on page 139) for more information on tiering.
Up to 8 video channels, depending on the device model, that allows
up to 8 users to connect to the Dominion KX II at once
Multiple user capacity (1/2/4/8 remote users; 1 local user)
UTP (Cat5/5e/6) server cabling
Dual Ethernet ports (10/100/1000 LAN) with failover
Field upgradable
Local User port for in-rack access
PS/2 keyboard/mouse ports. KX2-832 and KX2-864 are USB
only.
One front and three back panel USB 2.0 ports for supported USB
devices
Fully concurrent with remote user access
Local graphical user interface (GUI) for administration
Extended local port provides extended reach to in-rack access on
KX2 devices
Centralized access security
Integrated power control
LED indicators for dual power status, network activity, and remote
user status
Hardware Reset button
Serial port to connect to an external modem

Chapter 1: Introduction
10
Software
Virtual media with D2CIM-VUSB and D2CIM-DVUSB CIMs
Absolute Mouse Synchronization with D2CIM-VUSB CIM and
D2CIM-DVUSB CIMs
Plug-and-Play
Web-based access and management
Intuitive graphical user interface (GUI)
128-bit encryption of complete KVM signal, including video and
virtual media
LDAP, Active Directory®, RADIUS, or internal authentication and
authorization
DHCP or fixed IP addressing
Smart card/CAC authentication
SNMP and Syslog management
IPv4 and IPv6 support
Power control associated directly with servers to prevent mistakes
Integration with Raritan's CommandCenter Secure Gateway
(CC-SG) management unit
CC Unmanage feature to remove device from CC-SG control
Terminology
This manual uses the following terminology for the components of a
typical Dominion KX II configuration:

Chapter 1: Introduction
11
Diagram Key
TCP/IP
IPv4 and/or IPv6
KVM (Keyboard, Video, Mouse)
UTP Cable (Cat5/5e/6)
Dominion KX II
Local Access Console
Local User - an optional user console (consisting of a
keyboard, mouse, and multi-sync VGA monitor)
attached directly to the Dominion KX II to control KVM
target servers (directly at the rack, not through the
network). A USB smart card reader can also be
attached at the Local port to mount onto a target
server. An extended local port is also provided on the
DKX2-832 and DKX2-864 models.
Remote PC
Networked computers used to access and control KVM
target servers connected to the Dominion KX II. A USB
smart card reader can also be attached to the remote
PC and attached to a target server via the Dominion
KX II.
CIMS
Dongles that connect to each target server or power
strip. Available for all of the supported operating
systems.
Target Servers
KVM Target Servers - servers with video cards and
user interfaces (for example, Windows®operating
system®, Linux®, Solaris™, etc.) accessed remotely via
the Dominion KX II.
Dominion PX Power Strips
Raritan power strips accessed remotely via the
Dominion KX II.
See Supported CIMs and Operating Systems (Target Servers) (on
page 261) for a list of the supported operating systems and CIMs, and
see Supported Operating Systems (Clients) (on page 271) for a list of
the operating systems supported by the Dominion KX II remotely.