User guide

Managing KVM console switches 41
Parameter Function
Encryption level
This control can be used to specify the encryption method to use for all Virtual Media
sessions. This information is used when new client connections are requested. At that
point, the console switch will attempt to negotiate for the highest enabled encryption
mechanism level. This setting is disabled by default.
To configure these settings:
1. Select Virtual Media.
2. Enable or disable the checkboxes in the Session Control area.
• If you clear the Lock to KVM Session option, your Virtual Media sessions can remain after the
Video Session Viewer that launches the session closes.
• If you select Allow Reserved Sessions, only the owner of the Virtual Media session can
establish a KVM session to a reserved Virtual Media session.
• If you select Read-Only Access, write access to Virtual Media sessions is prevented.
3. Select zero or more levels of encryption to encode Virtual Media data sent to the console switch in
the Encryption Level area. The highest level enabled will be used.
4. Click Apply to save any changes without exiting.
-or-
Click OK to save any changes and exit.
-or-
Click Cancel to exit without saving any changes.
Configuring authentication parameters
The Authentication subcategory enables you to select the type of authentication method to be used.
IMPORTANT: Before implementing LDAP functionality, see "HP IP Console Switch directory services
integration setup tutorial (on page 208)" for a better understanding of how LDAP works.
The three types of authentication are:
• Local Authentication (with local access control)
Provides secure managed switch based authentication, data transfers, and user name and password
storage. With two levels of access control, Console Switch Administrator and User, you can set
target server-specific access rights and inter-operate with existing firewalls, VPNs, and NAT-based
networks. This is the default setting and has the same functionality as in the previous software
release.
• LDAP Authentication Only (with local ACL)
Provides a secure managed directory-based authentication for passwords and user names and a
local switch-based authorization for ACLs. ACLs are maintained and stored in each individual
console switch. Passwords are only in the directory server. For more information on LDAP, see
"Using directory services integration (on page 182)."
• LDAP Authentication and Access Control