Home

Control Center Over the NET™ CC1000 User Manual

1. FAW Upgrade About Exit 214 Appendix B 3 In the dialog box that comes up navigate to the upgrade file KeyUpgrade dat and select it Once you click Open a window pops up stating that the upgrade was successful The figure for the number of concurrent users in the License Information panel changes to reflect the upgrade 2 CC Auth Key Status Utility mje x Pi Key status Key found Activated j r Key Information FAM version Ver 11 101 S N 1123456789 ticense Information m License Upgrade Concurrent users 71 Save Upgrade FAW Upgrade About Exit Note When the upgrade file is downloaded an email is sent containing the particulars along with a copy of the upgrade file in case there was a problem with the downloaded file as shown in the example below Offline upgrade email response Your CC Authentication key s upgrade data file is attached Please upgrade your CC Auth key with the attached file Key Info F W Version 1 1101 Serial number 123456789 License Upgrade Info From 31 to 61 concurrent users Confirmation Info Username CC Auth Key 123456789 Password 0404071455055016 If you have any problem with upgrading your CC Authentication key s license please confirm it online at http 192 168 3 100 using the username and password above 215 CC1000 User Manual Online Upgrade To perfor
2. 3 Select the device that you want to add to the group Select Device xj S CC1000J Devices 3 Canada 7 Y Taiwan Y Taipei S KN2116 03 LP6324 SNO116 N 3 Taizhong Device name PNS108 01 jt ja ln a 4 Click OK 54 gt 6 Chapter 4 The CC1000J Administrator Utility In the Access Configuration dialog box that appears set the permissions according to the information contained in the device s User Manual then click OK PN9108 Access Configuration x Device information MAC address 0010743401DB Name PN9108 01 Access rights User status Administrator e User Device session timeout 3 minute s Station settings Station Station 1 v Access allowed lt STATION 1 gt Accessible outlet s for lt Station 1 gt _ Outlet A Outlet B _ Outlet C _ Outlet D _ Outlet E Outlet F C Outlet G _ Outlet H Device defined settings When you return to the Group Properties screen the device that you selected appears in the Devices panel Group Properties Group Settings Group name Techdoc 01 Description Members Devices B frosty 2 png108 01 2 ijf gt jessica Remove a Remove Properties k 99 CC1000 User Manual Device Conflict If a user is a member of more than one group and each group has access to the same device the device
3. Deleting Device Nodes With the exception of the CC 000 Devices root folder node all folder and device nodes can be deleted by doing the following 1 Right click on the node you want to delete A popup menu similar to the one below appears CC1000 Administrator Utility Auth Server 1P 10 0 13 180 a mife x E CC1000 Devices 3 1 Cananda BL PN9108 T1 Ry Taiwan Bl CN6000 Bl KN2116 Bl KN9116 SNC 116 2 Click Delete to remove the folder device Note When you delete a folder node all subfolders and device nodes contained in it are also deleted 155 CC1000 User Manual Moving Folder Device Nodes Folders and devices can be moved to other folders by dragging and dropping Folder Device Node Properties To view and or edit the properties of any folder or device node right click on the node and click Properties on the popup menu that appears 156 Chapter 11 The Administrator Utility User Management The CC1000 Administrator Utility allows administrators to create delete and modify users and user attributes Note The Administrator Utility comes with a pre installed superadmin super administrator account This account can be used to download the Administrator Utility via browser to a remote site for remote administration purposes See Download Administrator Utility page 161 and Download page 185 for details The Username for this account is superadmi
4. 5 Shortcut to ccik B Shortcut to CC1KManagerS exe 2 My Documents My Computer K File name Usbkey v a Files of type Faw Upgrade File exe Cancel Places Open as read only Bey Services i Ms 4 Click Open The following warning message appears Warning E xi AN CC1O00 Service will be stopped for Fv Upgrade of the Security Key Do vou want to continue 138 Chapter 10 The CC1000 Manager 5 Click Yes The License Agreement comes up Firmware Upgrade Utility Welcome to lhe Firmware Upgrade Utility Put your device into Fimware Upgrade Mode Use the Frmware Upgrade Cable to connect its Firmware Upgrade Porl to your computer or connect via Ethernet Agree to the License Agreement Then Click Next LICENSE AGREEMENT LICENSE GRANT TEN Irternationd Co Ltd Licensor gants to you a non exclusive nontransferable license to access and use FIRMWARE UPGRADE UTILITY the Product during the Tem set foith below ou may install the Product on a hard disk or other slorage device instal and use the Product on a file server for use on a network for the purposes of i permanent installation onto hard disks or other storage devices or ii use of the Product over such network and make backup copies of the Product RESTRICTIONS ou agree nat to modify adapt tianslate reverse engineer recompile disassemble or othenvise attempt to discover the source code of the Product
5. In the Ports panel set the ports that LDAP and LDAPS secure LDAP listen on The LDAP User Management section becomes active after an administrator or user logs in by clicking the Login button After a successful log in the Users panel lists all the users that have been added to the CC1000J LDAP authorization database Note This is an authorization list that gives the users who are on it authorization to access the Administrator Utility The Administrator Utility is discussed in Chapter 4 The preconfigured LDAPManager entry is for the person responsible for managing the LDAP database Only the LDAPManager can Add or Delete users Regular users can only access the Edit function to modify their passwords The default LDAPManager Login name is dapmanager the LDAPManager password is password For security reasons we recommend that you change the password to something unique To add a user click Add fill in the user s username and password information then click OK To delete a user select the user from the list then click Delete In the confirmation dialog box that comes up click OK to delete the user or Cancel to abort the operation To change a user s password click Edit In the dialog box that comes up make your changes then click OK Apache Tomcat The HTTP port is the regular port that Apache Tomcat listens on The HTTPS port is the secure port that Apache Tomcat listens on The Shutdown port is the reg
6. Welcome to the Web Server Certificate Wizard Welcome to the Web Server Certificate Wizard This wizard helps you create and administer server certificates used in secure Web communications between your server and a client Status of your Web server You have a certificate installed for the selected server Certificate Wizard will help you to manage this certificate To continue click Next 116 Chapter 8 CC 1000 Server Setup 5 Click Next to continue the following screen appears IIS Certificate Wizard Server Certificate There are three methods for assigning a certificate to a Web site 6 Select Create a new certificate then click Next The following screen appears IIS Certificate Wizard Delayed or Immediate Request You can prepare a request to be sent later or you can send one immediately continues on next page 117 CC1000 User Manual 7 Select Send the request immediately to an online certification authority then click Next The following screen appears IIS Certificate Wizard Name and Security Settings Your new certificate must have a name and a specific bit length Type a name for the new certificate The name should be easy for you to refer to and remember Name o efault Web Site The bit length of the encryption key determines the certificate s encryption strength The greater the bit length the stronger the security H
7. Dal TA SAT Bicwice lt Back cancel continues on next page 81 CC1000 User Manual 8 We suggest that you keep the default value as shown in the diagram and click Next to move on The Configure DNS dialog box appears Active Directory Installation Wizard Config DHS The vazad car confia DAS for jour few doar BMS ls not avalab s Would you like this wizard to instal and configure a DNS server for yom nes domain E F Cancel 9 Select Yes install and configure DNS on this computer recommended then click Next The Permissions dialog box comes up Active Directory Installation Wizard at O xj Premmizzlonz o Selec delaull permisti ne har weer and gro objecta w Some serves programs such a Windows HT Remote Access Service read micmstion Haed an domain canalar Select this option if pou run server programs of pre windows 2000 servers or or lindos 2000 server that are members of pre wirdowes 2000 domara A Anormal Liber can read information on this domain f Peamieionz compatible only with Windows 2000 seners Seci his option il por ta tere piagam onl oa ino 2000 servers hal are mannan ol indies 000 domains Orly ad bernicalad uzm can tead dcir Or this dorreari Back Het gt Cancel 10 Depending on your installation you can choose either option Click Next to move on continues on next page 82 Chapter 7 Authentication Server Setup The Directory
8. Do you wish to continue 5 Click Y to import the configuration file s information click N to abort the operation After the file is successfully imported a message appears on screen to inform you of the fact 177 CC1000 User Manual Additional Installation Options Installing the Administrator Utility Separately In the previous sections it has been assumed that you are installing all of the CC1000 components on the same host The Administrator Utility can be installed and run separately on a stand alone host however To install the Administrator Utility separately do the following 1 Follow steps 1 5 in the Installation chapter for installing the CC1000 see Installation page 107 The following screen appears CC1000 Setup Setup Type Choose the setup type that best suits your needs Click the type of Setup you prefer Install All Components m Description Install Selected Component sl Install selected CC1000 componet s to this computer lt Back Cancel 2 In the list box select Install Selected Components then click Next The following screen appears CC1000 Setup Select Components Choose the components Setup will install Select the components you want to install and clear the components you do not want to install 7 CCIK Manager _ CCTK Log Server CC1K Admin Utility OCTK Auth Server Description Space Required on D 1660 K Space Availa
9. Note Before you can connect using a secure connection you must install the root certificate If you have not yet installed the root certificate on your computer see Installing the Root Certificate in the next section Otherwise click Login and skip to The Main Screen page 146 142 Chapter 11 The Administrator Utility Installing the Root Certificate Before you can log in to the Administrator Utility using a secure connection SSL a trusted Authentication Server root certificate must exist If there is no trusted root certificate when you try to log in the following dialog box appears The Authentication Server s root certificate is not trusted This may cause some operations to fail If you would like to install a trusted certificate click Yes To disregard this warning and continue anyway click No Note If you don t install the trusted root certificate you can still use the Administrator Utility to maintain all the data in the AD except you will not be able to set reset user passwords To install the root certificate do the following 1 Click Yes The Certificate dialog box comes up 21x General Details Certification Path Certificate Information This CA Root certificate is not trusted To enable trust install this certificate in the Trusted Root Certification Authorities store Issued to win2ks4oc1k t6 CC1O00 T6 COM Issued by win2ks4oc1k t6 CC1000 T6 COM
10. This program will install CC1000 on your computer It is strongly recommended that you nm si all Windows Bi ograms before runnin g this Setup progra Next gt Cancel Next gt 107 CC1000 User Manual 4 Click Next to continue The License Agreement appears CC1000 Setup License Agreement Please mad the following beerse agreement carefully Fress the PAGE DOWN key to see the rest of the agrearmar ea LICENSE AGREEMENT LICENSE GRANT TEN International Co Lid Licensor grants bo pou a non exclusive noan transtersble license to access and use FIRMWARE UPGRADE UTILITY the Product dung the Tem set forth below ou may metall the Product on a hard disk or other storage device install and use the Product on a file serves for use on a network for the purposes of fi permanent installation onto hard disks or other storage devices or i use of the Product gt Do you accept all the terns of the preceding License Agreement If you choose No the selup vall close To install E27 000 you must accept this agreement laite SRE d Back 5 Click Yes to accept the License Agreement In the Attention dialog box that comes up make sure that the indicated requirements have been completed CC1000 Setup E xi Attention After this setup you have to do the following additional configuration Please make sure that the following requirements have been completed
11. 5 When all your choices have been made click OK to perform the search About The About page provides information regarding the current version of the CC1000 Logout Clicking this button logs you out of your CC1000 session 190 Appendix A Technical Information Safety Instructions General Read all of these instructions Save them for future reference Follow all warnings and instructions marked on the device Do not place the device on any unstable surface cart stand table etc If the device falls serious damage will result Do not use the device near water Do not place the device near or over radiators or heat registers The device cabinet is provided with slots and openings to allow for adequate ventilation To ensure reliable operation and to protect against overheating these openings must never be blocked or covered The device should never be placed on a soft surface bed sofa rug etc as this will block its ventilation openings Likewise the device should not be placed in a built in enclosure unless adequate ventilation has been provided Never spill liquid of any kind on the device Unplug the device from the wall outlet before cleaning Do not use liquid or aerosol cleaners Use a damp cloth for cleaning The device should be operated from the type of power source indicated on the marking label If you are not sure of the type of power available consult your dealer or local
12. CC1000 User Manual Package Contents The CC1000 package consists of 1 CC1000 USB Authentication Key 1 USB Extension Bracket 2 USB Cables 1 External 1 Internal 1 Software CD 1 User Manual 1 Quick Start Guide Check to make sure that all of the components are present and in good order If anything is missing or was damaged in shipping contact your dealer Read this manual thoroughly and follow the installation and operation procedures carefully to prevent any damage to the switch or to any other devices on the CC1000 installation Features may have been added to the CC1000 since this manual was printed Please visit our Website to download the most up to date version of the manual Copyright 2006 ATEN International Co Ltd Manual Part No PAPE 0263 3AXG Printing Date 05 2007 Altusen and the Altusen logo are registered trademarks of ATEN International Co Ltd All rights reserved All other brand names and trademarks are the registered property of their respective owners CC1000 User Manual Contents FCO Mo malo 2 tada Gag a ains ii SITTA 2006 s raara a tati eri i User Io Maita iii Online Registration erise reier enan eee ene jii Telephone SUPpOr 2 054 ce0nc4 20d e da oh dd iii USErNOUCE 4 ve ela lll adios jii Package Contents eras ea egos tee A a bled is iv About This Manal 22 40 oi eh lee eee he bo ead tae Xi OVENVIEW oca ri E is ido ad ed Xi CONVENIOS ated sche e eta ada oe in A AOS xii Prod
13. Note At this time you may be asked to temporarily stop the Internet Information Services and insert the Windows Server 2003 CD 7 Click Finish to close the wizard 104 Chapter 7 Authentication Server Setup SNMP Installation To be sure that SNMP is enabled on your server follow the procedures given in the following sections 1 Under the Control Panel open Add Remove Programs 2 In the left panel click Add Remove Windows Components The Windows Component Wizard appears Windows Componenda fou can add dl demore components of Winders 2000 To add of remove a component cich the checkbos A shaded box means that only Eco vel bo mised To sen whale included in a componer click Mineral iat Serves 113 21 5 HE a Management and Monitoring Too 2HE F fat Message Queuing ener EME A Ador Senasa ine El Dispenplor Ircludel biali fot aniba And porno meted per omanos Tobal dik space required 129M8 Dietad Spaen maalaa oe chk 1536 MB Back Hed o Cancel 3 Select Management and Monitoring Tools then click Details The following screen appears Windiws Companies Wirard Coral a Winar nil A ES To add or iemo re a component cick the check bec A thadad bos mear that oriy part ofthe component willbe mitsled To cee whai indluded n component chek Detali lx Desorption Install Connection Manager Adriaan Ed and the Phone Book zar SEE Tobal ect efua iracar 1296
14. Welcome to the ctree Directory Installation Wizard This wizard helps vou install Active Directory services on thie TA rre irc ha server a doman conkeoller If thig is he first bir yo hawa inclalled Actives Director ik ig recommended Hat you heg mad the overviews in Activa Orectory Halp To continue click Met 3 Click Next to move on The Operating System Compatibility screen appears Active Directory Installation Wizard Operating Syztam Compatibility Improved secuity settings In Windows Sever 2003 affect older versions of Wl indo Domain controllers cumming indows Server 20039 mplamant zacunty zaltingz that require cllente sed other senaers to communicate with those domain qontrallens ns more DOCU way Tha loloradno colder versions of Windows cannot maak the maw requirements a Windows 25 Windows HT 405P3 or carter By default sigeli O hope versione of rado ill pect bes Stole to log ori iii a domain corfrollar running Windows Server 2003 o access domain nzourcer Feat mote infolmalon 900 Bach Camcel 4 Click Next to move on continues on next page 86 Chapter 7 Authentication Server Setup The Domain Controller Type dialog box appears Active Directory Installation Wizard Domain Controller Type Specify the role pou want this server to have Do vou want this server to become a domain controller for a new domain or ari additional domain controller for an
15. ALTUSCN Enterprise KVM Solutions by ATEN Control Center Over the NET CC1000 User Manual www altusen com CC1000 User Manual FCC Information This is an FCC Class A product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense RoHS This product is RoHS compliant SJ T 11364 2006 The following contains information that relates to China Ags EA ITA TE Beat O O O O O SR O O O O Oo O O RRA SAS MRAZ AYA PHS SYST 11363 20064H ERRE BK To O RTRHAKEDAGAR BRASAS DDR A DATAN EJ E i met HAS SiH SJ T 11363 20060 RS Ao X RTUASA SURELY EZR R HAMAS Sie HSJ T 11363 20069 Re EKo Fe CE Ke CC1000 User Manual User Information Online Registration
16. Be sure to register your product at our online support center International http support aten com North America http www aten usa com product_registration Telephone Support International 886 2 8692 6959 North America 1 888 999 ATEN User Notice All information documentation and specifications contained in this manual are subject to change without prior notification by the manufacturer The manufacturer makes no representations or warranties either expressed or implied with respect to the contents hereof and specifically disclaims any warranties as to merchantability or fitness for any particular purpose Any of the manufacturer s software described in this manual is sold or licensed as is Should the programs prove defective following their purchase the buyer and not the manufacturer its distributor or its dealer assumes the entire cost of all necessary servicing repair and any incidental or consequential damages resulting from any defect in the software The manufacturer of this system is not responsible for any radio and or TV interference caused by unauthorized modifications to this device It is the responsibility of the user to correct such interference The manufacturer is not responsible for any damage incurred in the operation of this system if the correct operational voltage setting was not selected prior to operation PLEASE VERIFY THAT THE VOLTAGE SETTING IS CORRECT BEFORE USE
17. External Cable Installation To connect to an external USB port refer to the diagram below as you perform the following steps 1 Install the USB Authentication Key bracket that came with your CC1000 package into one of the computer s expansion slot openings 2 Plug the USB Authentication Key into the USB socket on the bracket 3 Plug the B end of the USB cable into the bracket s USB port Plug the A end of the cable into one of the computer s USB ports 196 Appendix A Internal Cable Installation If your computer has a USB connector on the mainboard and you would prefer to connect to it rather than to an external USB port do the following 1 Install the USB Authentication Key bracket according to steps 1 and 2 of the External USB Installation procedure described above 2 Plug one end of the USB internal connector cable onto the bracket s connector pins Note The red wire goes to pin 1 at the bottom of the bracket To Mainboard J 3 Plug the other end of the cable into a USB connector on the mainboard See your mainboard manual for the connector s location Red Wire Internal Cable Pin Assignments The internal connector cable s pin assignments are as follows Pin Signal Color 2 Do White 3 Green 4 GND Black 197 CC1000 User Manual USB Authentication Key Specifications Function Bracket Environment 0 40 C Physical Metal and Plastic Properti
18. 155 editing permissions 46 moving 34 156 Removing users groups 46 viewing permissions 46 Directory Security 116 E editing device permissions 46 Editing folder nodes 156 Export Import Configurations 175 Exporting Configurations 175 Exporting configurations 57 F Features 2 Firmware Upgrade 219 Folder nodes moving 156 viewing editing 156 Folders adding 147 moving 34 Full computer name 101 103 195 G Generic devices 154 adding 32 Group Membership 174 Group Management 42 164 Group priority 49 Group Properties 43 52 Groups adding devices 54 168 adding users 52 165 Index creating 42 164 O deleting 43 165 Online Removing users 53 167 Registration iii removing users 49 Overview 1 P IIS Password Policy Setup Windows 2000 Server 97 Windows 2000 Server 93 Windows Server 2003 98 Windows Server 2003 94 IIS installation and Setup 97 Passwords Importing configurations 58 resetting 47 164 Installation Operation Overview 74 Q J Query the logs 70 189 Java Administrator Utility R Logging In 24 Removing Users 167 CC1000J Manager Reset anonymous password 93 Finishing Up 22 System Tab 20 Reset password policy 94 Resetting Passwords 47 164 Overview 5 RoHS ii K Root Certificate Key License Upgrade 210 installing 143 L S Log query 70 189 Safety Instructions Log Server 136 General 191 Close Exit 129 Rack Mounting 193 Events 128 Serial number
19. 7 109 Fields 128 Session Info 69 188 SJ T 11364 2006 ii SNMO Server settings 137 Overview 127 M SNMP 105 Main Screen 146 SNMP Server settings 20 Manager settings 133 System Info 67 186 Managing Users 21 163 System Requirements 73 Moving devices 34 156 Moving folder nodes 156 T Technical Information 191 Technical Support 194 225 CC1000 User Manual Telephone support iii Troubleshooting Authentication Server 205 CC1000 Administrator Utility 206 CC1000 Browser Operation 204 CC1000 Server 203 CC1000u 206 Installation 203 Trusted Certificates 200 U Uninstalling CC1000J 13 Upgrading CC1000 76 CC1000J 14 firmware 219 key license 210 USB Authentication Key Specifications 198 User Management 35 157 User Notice iii User Properties 41 226 User properties modifying 163 User Properties Configuration 47 User type 37 159 options 39 161 Users adding 35 157 adding devices to 49 adding to groups 52 165 deleting 41 163 removing from groups 49 V View License Tab 22 Viewing folder nodes 156 W Web Server Setup 114 default website configuration 114 Directory Security 116 Web Service Extensions Windows 20003 124
20. Note CCAuthKeyStatus exe only runs under Windows 2 In the License Upgrade panel of the dialog box that comes up click Save A CC Auth Key Status Utility m ej xj a IAE Pi Key status Key found Activated Y Key Information FAM version Ver 1 1 101 S N 1123456789 m License Information License Upgrade Concurrent users fai Upgrade FAW Upgrade About Exit The Key Information Data File CC1KAUpload dat is created in the same directory that the Key Status Utility resides in You will use that file to perform the Offline upgrade Performing the Upgrade To perform the upgrade follow these steps 1 Open a browser and log into the URL indicated in the email refer to page 210 with the Username and Password provided Note Accept the certificates when asked CC1000 User Manual 2 In the screen that comes up key in the order number indicated in the email that applies to the upgrade refer to page 210 then click Continue ATEN CC Authentication Key License Upgrade A NT gt User Information a r User nformabon i Order nismat ATR E55 pobl bd by ATIN jaamaina 04 Led Tisia A ight nae 3 In the License Upgrade Order Information screen that comes up a Key in the current number of licenses in the From field If you don t know what the current number is ask your customer It appears in the License Information panel when CCAuthKeyStatus exe
21. O Administrator 8 User Device session timeout 3 minute s Device settings _ Port configuration allowed Accessible ports 01 Ho wos Jos Jos Hoe moz Jos koo J10 Ja km 12 a da adios al 16 Device defined settings 4 When you return to the User Properties screen the device that you selected appears in the Devices panel Devices Status 350116 Enabled Personal 50 Chapter 4 The CC1000J Administrator Utility Device Panel Headings The headings at the top of the Device panel are described in the table below Heading Name Status Type Description Lists the name of the device Indicates whether the device is set as enabled or disabled If it is set as enabled it shows up in the user s tree view If it is set as disabled it doesn t show up in the user s tree view even though it is on line The administrator can use this function to temporarily deny a user access to a device without having to delete it and then reinstall it Indicates whether the device is accessed privately or as part of a group Device Button Functions The functions of the buttons associated with the panel are described in the table below Heading Enable Disable Add Remove Convert Properties Description Highlight a device in the list box and click Enable to allow the user to access the device This function only works for devices that are accessed pr
22. Spaca avalada ce dik 1OSLG MO Erea 4 Make sure that Simple Network Management Protocol is checked then click OK Next Finish to close the wizard Note On Windows Server 2003 if you encounter any problems related to SNMP make sure that SNMP Service and SNMP Trap Service have been started Control Panel Administrative Tools gt Services 105 CC1000 User Manual This Page Intentionally Left Blank 106 Chapter 8 CC1000 Server Setup Installation Before installing the CC1000 Server software we strongly recommend that you download and install all the updates for the Windows 2000 2003 server Note The computer you are installing the CC1000 Server on must have CA IIS and SNMP services enabled See pages 100 97 and 105 for details In addition to containing the CC1000 Manager discussed in Chapter 10 the CC1000 Server contains the CC1000 Web pages and provides the entry point for users when they log in To install CC1000 Server 1 Plug the CC1000 USB Authentication Key into a USB port on the computer you are installing the CC1000 Server on For security purposes the key can be installed inside the case See page 196 for details 2 Copy CC1 KSetup exe from the software CD that came with your package to a convenient location on your server 3 Go to the folder where CC KSetup exe is located and execute it The CC1000 Welcome screen appears C1000 Setup x Welcome to CC1000 Setup
23. Specify the AD Server s IP address and port 2 Provide a valid Username and Password for the AD Server 3 Click Find Now to generate a list of users in the Domain Users column 4 Select the user in the Domain Users column The user s information displays in the fields to the right of the column 5 Click OK 38 Chapter 4 The CC1000J Administrator Utility 4 Click one of the User Status options that is appropriate for the User Depending on your choice one of the following dialog boxes appears Super Administrator Options xi Administrator Options xi _ Download Administrator Utility r View backup log files lv View system information View device information R End session R View device information R R View session information lv End session User Options x View session information View device log A description of the options is given in the table below Option Download Administrator Utility View backup log files View system information View device information End session Description This option allows a Super Administrator to download the Administrator Utility executable file from the CC1000J Servers site The Administrator Utility can run as an independent module on Windows 2000 and higher and most Linux systems Selecting this option allows the Super Administrator to view and query the backup
24. Super Administrator Administrator User and the options selected when the user was created The table below shows the relation between the User Type and link type Link Access Download Optional System Info Optional Device Info Optional Session Info Default Log System Default Log Device Default Log Backup Optional About Default Logout All Default Ifa link is designated as Default it always appears on the web page Ifa link is designated as Optional it only appears if it has been selected as an option in the user s configuration For further details regarding configuration of User Types see User Management page 35 Each link is explained in the sections that follow 65 CC1000 User Manual Download Download provides a way for the Super Administrator to download the Administrator Utility executable file from the CC1000J Web Server thereby allowing the Super Administrator to manage the CC1000J from anywhere on the Internet Note 1 The Administrator Utility runs on most Linux systems For Windows systems you must use Windows 2000 or higher 2 Java 1 5 or higher must be installed on the computer that will run the Administrator Utility To download and run the Administrator Utility do the following 1 Click the Download link The following screen appears Control Center over ihe MET Fim Voy hares inj Derine Wen har mm i cig ff laana j ogee ors z or 2 Click the CC KAdmin
25. The procedure for installing CC1000J on a Linux system is similar to that for Windows but there are Java considerations to take note of first Some distributions install an earlier version of Java than the JDK 1 5 required by the CC1000J program To determine the Java version on your system open a terminal and enter the following Java version If the version it displays refers to a Java version that is earlier than JDK 1 5 you must install a JDK version that is 1 5 or higher Note The above only checks the JRE Java Runtime Environment version This is usually the same as the JDK but may not be so If you are unsure that the JDK is high enough we recommend a fresh install using a JDK version at least as high as the one specified in the requirements section of this manual see Requirements page 5 Make sure your PATH and JAVA_HOME environment variables point to the new version in your root bash_profile file For example PATH usr java jdk1 5 0_09 bin SPATH HOME bin JAVA_HOME usr java jdk1 5 0_09 BASH_ENV SHOME bashrc USERNAME root export USERNAME BASH_ENV PATH JAVA_HOME Even after you install an appropriate Java version and set the new PATH and JAVA_HOME environment variables the distribution may still not recognize the new version and continue to use its original Java version If the problem exists on your installation correct it by doing the following 1 Copy the CC1000J Setup ForLinux bin file from the
26. Valid from 11 09 05 to 11 09 15 143 CC1000 User Manual 2 Click Install Certificate to bring up the Certificate Import Wizard Certificate Import Wizard 1 x Welcome to the Certificate Import Wizard This wizard helps you copy certificates certificate trust lists and certificate revocation lists from your disk to a certificate store A certificate which issued by a certification authority is a confirmation of your identity and contains information used to protect data or to establish secure network connections A certificate store is the system area where certificates are kept To continue click Next Certificate Import Wizard l E E x Certificate Store Certificate stores are system areas where certificates ae kept Windows can automatically select a certificate store or you can specify a location Place dl certificates in the following store Gertificate store lt Back Cancel 4 Choose Automatically select the certificate store then click Next to move on 144 Chapter 11 The Administrator Utility The following dialog box appears Certificate Import Wizard E x Completing the Certificate Import Wizard You have successfully completed the Certificate Import wizard You have specified the following settings Certificate Store Selected Automatically determined by th Content Certificate Ej 5 Click Finish to close the dialog
27. a login dialog box similar to the one below appears x Username Password Authentication Server Name IP 10 0 100 193 Key in Username and Password set in LDAP see page 21 for details then click Login to bring up the Administrator Utility Main Screen C 100001 dirt rabos Udip gt lags berer baa 10 8 all Devices Users and Groups are created and managed from this screen The first time you run the utility except for a Super Administrator installed under the Users folder there are no device folders devices users or groups listed under the root folders The following sections describe how to create and manage Devices Users and Groups Note For security purposes the default Super Administrator password password should be changed to something unique 24 Chapter 4 The CC1000J Administrator Utility Device Management Creating Device Folders Device folders are containers for devices which allow you to organize your enterprise wide devices into useful categories location department etc To create a device folder do the following 1 Right click on the CC1000J Devices folder 2 In the pop up menu that appears select New Folder 4 CC1000 Administrator Utility Auth Server IP 10 0 100 193 File Ano Majano 14 Generic Device Browse 3 The Create folder dialog box appears Create Folder P x Name Description 4 Ente
28. any subweb _vti_bin folders and any cgi bin folders if they exist these folders should have execute to work properly and then click OK Steps 5 and 6 are for Windows 2000 Server Only 7 Click OK to accept the Website properties 115 CC1000 User Manual Configure Directory Security for Secure Communications 1 In the Control Panel select Administrative Tools Internet Services Manager A screen similar to the one on page 114 appears 2 In the left panel right click Default Web site In the menu that pops up click Properties 3 In the Default Web Site Properties dialog box that comes up select the Directory Security tab A screen similar to the one below appears Default Web Site Properties 2 x o Slagrators Performance ISAPI Filters Home Directory Documents HTTP Headers Custom Errors ASP NET Server Extensions Anonymous access and authentication control y Enable anonymous access and edit the authentication methods for this resource IP address and domain name restrictions Grant or deny access to this resource using IP addresses or internet domain names Edit m Secure communications Require secure communications and 5 Certificat enable client certificates when this Cven AGL ate resource is accessed View Certificate Edit OK Cancel Apply Help 4 Click Server Certificate the Certificate Wizard comes up
29. gt Indicates selecting the option on a menu or dialog box for example that comes next For example Start gt Run means to open the Start menu and then select Run 1 Indicates critical information Product Information For information about all ALTUSEN products and how they can help you connect without limits visit ALTUSEN on the Web or contact an ALTUSEN Authorized Reseller Visit ALTUSEN on the Web for a list of locations and telephone numbers International http www aten com North America http www aten usa com xii Chapter 1 Introduction Overview The CC1000 Control Center Over the Net provides secure centralized access administration and management of your entire network local and worldwide anywhere anytime By consolidating the management of your ALTUSEN ATEN IT devices the CC1000 allows every device to be securely accessed and controlled by means of a single IP address Servers and network equipment are integrated into a single tree view making the CC1000 ideal for enterprises with data centers and branch offices located in several remote locations An intuitive browser based GUI interface provides convenient access and control of all equipment The system comes in two configurations one designed to run under Windows the other to allow multiplatform operation designed to run under Java The Java based configuration for Windows and Linux is discussed in Chapters 2 5
30. gt ores OF dude C Esie O M Stat 712 2006 15 227 Ta End 1 3 2006 1H 2127 Copyright O 2004 2006 ATEN intenabonal Oo Lid Al rights reserved To query a log record do the following 1 Click the arrow at the right of the Log File field to drop down a list of available log files Only the log files that you have rights to view are available Note If you have rights to query the system log 1t will appear in the list 2 Select the items that you want to perform a query on in the Target List and add them to the Selected Targets list If you are searching on more than one item the order of the search will follow the order of your selection Note If you have rights to query backup log records you may need to select the main log file in the Log File Select field in order to have the backup log file appear in the Target List 3 If you want to search on a keyword enter it in the Keywords field otherwise leave the field blank Note The keyword can be a single word a phrase or even a sentence Continues on next page 189 CC1000 User Manual 4 In the Time panel if you want to search the entire record regardless of the time frame select All If you want to search a particular time range click the calendar icons at the right of the Start and End fields to bring up a dialog box to choose the dates and times for the search then choose whether the search will include or exclude the date time range
31. then click Save again To exit without saving any changes that you made click Exit A dialog box appears asking you to confirm that you want to discard your changes Click Yes to confirm and exit click No to return to the Configuration dialog box Minimizing the Window Once all CC1000 services have started successfully the CC1000 Manager minimizes itself When the main screen is minimized an icon representing the CC1000 Manager appears in the Windows system tray as follows To restore the main screen double click the icon To bring up a context menu that allows you to either restore the main screen or exit the program right click the icon 137 CC1000 User Manual Upgrading the USB Authentication Key Firmware The USB Authentication Key s firmware can be upgraded as newer versions become available New firmware versions are posted on our Website as they become available Check the Website regularly to look for the latest versions and information relating to them To upgrade the USB Authentication Key s firmware do the following 1 From the computer that the CC1000 Manager resides on go to our Website and download the usbkey upgrade package 2 Atthe bottom of the CC1000 Manager main screen click Security Key F W Upgrade 3 In the dialog box that comes up navigate to the directory that upgrade package is located in and select it Look in Ej Desktop Y Fe 4 My Recent Documents Desktop
32. 1 AD Active Directory has been installed 2 DNS Domain Name System has been installed 3 IIS Internet Information Service has been installed 4 CA Certification Authority has been installed 5 All Windows updates have been performed If all Windows updates have not been installed click Cancel to quit the CC1000 installation perform the updates and start the CC1000 software installation again de Cancel InstallShield 108 Chapter 8 CC 1000 Server Setup 6 Click Next to continue The Serial Number dialog box appears Product serial number E E ees ee The serial number can be found on the CC1000 s CD case Key in the serial number 7 Click Next to continue The following screen appears 1CC1000 Setup Choose CC1000 Destination Location Installshield 109 CC1000 User Manual 8 Select the destination folder for the CC1000 program then click Next to copy files and install components Important CC1000 Web Pages are put in the CC Kweb folder under the destination folder you selected You must specify the full path to the CC1Kweb folder as the Home Directory of the CC1000 Website when you configure the CC1000 Website see Web Server Setup page 114 After you click Next the following screen appears CC1000 Setup Setup Type Choose the setup type that best suits your needs Click the type of Setup you prefer Install 4ll Components p Description Install S
33. ASP NET 2 0 shown above 40607 is for example purposes The build number on your version may differ depending on what the currently released build version is 199 CC1000 User Manual Trusted Certificates Overview When you try to log in to the device from your browser a Security Alert message appears to inform you that the device s certificate is not trusted and asks if you want to proceed Information you exchange with this site cannot be viewed or E changed by others However there is a problem with the site s secunty certificate A The secunty certificate was issued by a company you have not chosen to trust View the certificate to determine whether you want to trust the certifying authority it The secunty certificate date is valid A The name on the security certificate is invalid or does not match the name of the site Do you want to proceed te tecate The certificate can be trusted but the alert is triggered because the certificate s name 1s not found on Microsoft list of Trusted Authorities You have two options 1 you can ignore the warning and click Yes to go on or 2 you can install the certificate and have 1t be recognized as trusted Ifyou are working on a computer at another location accept the certificate for just this session by clicking Yes If you are working at your own computer install the certificate on your computer see below for details After the certificate 1s inst
34. BA techdoc 01 ups Marcom 01 The Export dialog box appears Export x File name c01Kdata LDIF Progress 2 Click Start The configurations are exported to the specified file Note 1 You can change the default filename if you wish 2 By default the file is saved in the CC7000Java CC1000J App folder but you can key in or browse to a different folder 57 CC1000 User Manual Importing Configurations To import configurations from a file do the following 1 From the File menu choose Import CC1000 Administrator Utility Aut The Import Directory dialog box appears Import File name Browse Replace base DN Progress a 2 Key in or browse to the path and filename where the import file is located ropen j x ot Jaare c CC1KLogs CA Cc1KLogs_w070415_070421 CA CC1KLogs_w070422_070428 3 conf c lib ci var y CC1Kdata LDIF N File Name CC1Kdata LDIF Files of Type LDIF File 1dif v Open Cancel 58 Chapter 4 The CC1000J Administrator Utility 3 When you come back to the dialog box it looks similar to the one below SS ti File name OO0J Appiced1 Kd ata LDIF Replace base DN dc altusen dc com Progress If the file was originally exported by the Administration Utility its DN Distinguished Name configuration data appears in the text box to the right of the Replac
35. Failed to connect with Log Server IP xxxxx A total of yy log s was were lost Will try again in 1 minute Where xxxxx represents an actual IP address and yy represents a number indicating how many records were lost If you choose to use a remote log server you do not enable Use local integrated log server you have to specify the IP address of the computer that the log server is running on in this field If you choose to use a remote log server you do not enable Use local integrated log server you have to specify the Port that the log server on the remote computer is listening on The IP address and port settings of the Log Server entry must correspond to the ones you set when you configured the Log Server see page 127 136 Chapter 10 The CC1000 Manager SMTP Server Settings The CC1000 sends email notification of emergency occurrences on installed devices to users of those devices Note Recipients are designated in each device s configuration settings See the device s User Manual for details Specify the IP address or the domain name of the computer running your SMTP server in the Server field Specify the CC1000 administrator s email address in the Send From field Note This field cannot be blank Finishing Up To save your new settings and exit click Save If there is an error in any of the field entries the pointer will move to the invalid field to indicate so Change the entry to a valid one
36. File to Import Specify the file you want to import File name 184433D 2360 4683 4C1C 610E3B010133 CC1K Certificate pfx Browse Note More than one certificate can be stored in a single file in the Following Formats Personal Information Exchange PKCS 12 PFX P12 Cryptographic Message Syntax Standard PKCS 7 Certificates P7B Microsoft Serialized Certificate Store SST lt Back Cancel continues on next page 111 CC1000 User Manual 2 Keep the default settings click Next to continue The following dialog box appears Certificate Import Wizard 3 Keep the default settings click Next to continue The following dialog box appears Certificate Import Wizard Gerbificate storey continues on next page 112 Chapter 8 CC 1000 Server Setup 4 Keep the default settings click Next The following screen appears Certificate Import Wizard x Completing the Certificate Import Wizard You have successfully completed the Certificate Import wizard You have specified the following settings Certificate Store Selected Automatically determined by t Content PFX File Name DADOCUME 1 4DMINI 1 LO 5 Click Finish A window pops up to inform you that the procedure completed successfully Certificate Import Wizard xi G The import was successful Click OK to move on 6 When the following screen appears Click Finish to close the Ce
37. Server Setup A E 77 Configure Active Directory 0 0 00 eee eee 77 Windows 2000 Server 1 0 ccc eee eee 77 Windows Server 2008 0 ccc eens 85 Password Sep aid RS oe we Aen oe ed 93 Windows 2000 S IVErs cis bes ae ee ede ed Gentes wd ie ate eas 93 Windows Server 2008 0 0 ccc eens 94 IIS Installation and Setup 0 2 0 0 eee 97 Windows 2000 Server ti Check ee oe eek 97 Windows Server 2003 0 ccc eens 98 Certification Authority Installation o ooooooooo 100 Windows 2000 Severiano ee aw Ae bona wees ews 100 Windows Server 20038 200000 a ee 102 SNMP Instala eeu hie ie a eee ted BAe ee hast aes 105 Chapter 8 CC1000 Server Setup ASAAN soto cen tedss ood aeeatae Shae Benen Sagas ea gas 107 CenilicatelmpOniian gt lt is 2 lt Nawdetat atamentameat ola 111 Web Server SO li diras gure Geely aaa nein se Aare A 114 Configure the Default Web Site o o oooooooooo 114 Configure Directory Security for Secure Communications 116 Directory Security Setup for Windows 2000 Server 122 Enable Web Service Extensions for Windows Server 2003 124 FAISANT UD enka ss ee teat dc tee ic Niet a Arak Etim E ed 125 vii CC1000 User Manual Chapter 9 The Log Server IVON pil ro ee cee sh ee eh ees 127 EVO 25 Gch ite a a a A See eae eee ee ae 128 Fedo Bure A Sede cnet cnc ae ss case oe Sie eine ee eee ee 128 GIGS EX oss pte bs da ta wn ho id
38. Web Caring EEE Allow at H MEDNO H X ASIOn OO i i a e anieie ik Active Server Pages Allowed Default SMTP Virtual Server Prohibit Ll ASP NET v1 1 4322 Allowed e Ey Default NNTP Virtual Server 5 PE Properties 199 BITS Server Extensions Allowed 3 DAWINDOWS system32 MQISE Allowed 38 FrontPage Server Extensions 2002 Allowed Tasks gt Indexing Service Prohibited 3 Internet Data Connector Allowed Add anew Web service extension 149 Internet Printing Allowed Allow all Web service extensions For 4 3 Server Side Includes Allowed specific application em WebDAY pa ree Probibi all Wel sordos axtencions 89 Windows Media Services Multica Allowed Open Help 4 Extended A Standard 3 In the right panel select Active Server Pages then click Allow 4 In the right panel select Server Side Includes then click Allow 124 Chapter 8 CC 1000 Server Setup Finishing Up Before the CC1000 Server can function properly the CC1000 Log Server and CC1000 Manager Service must be started If they aren t already started do the following to start them 1 From the Start menu open Programs CC1000 CC1000 Log Server 2 Click CC1000 Log Server Note If the Log Server and CC1000 Server are installed on the same computer the Log Server cannot start independently The Log Server starts automatically when you start the CC1000 Manager 3 From the Start menu open Programs gt CC1000 gt CC1000 Manager
39. a new domain tree then click Next The following dialog box comes up Actve Directory Installation Wizard Create or Jom Forest Specify the location of the news donor f Create a new boreal of demain trees Select this option this ts the first domam in your organization or if you want the new domain tree ou sre cresting to be completely independent of our current forest Place this mew domain tree in an existing forest Select this option F you want the users im the mew domain tree to hawe socassa to 1 Do vou suant bo create a news forest or join an existing forest resources im existing domain trees and mos vers i Back Cancel continues on next page 79 CC1000 User Manual 4 Select Create a new forest of domain trees then click Next The New Domain Name dialog box comes up Active Directory Installation Wizard New Doman Name Speciy a name for the ner domar Type the fall DNS mama for the ra domai lf Your organization already has a ONS domain name registered with on Interest narnia authority you can uze that name Full DHS mame for naw domar celk com 5 Key in a name for the new domain in our example we used cclk com but you should give it a name that is meaningful for your installation then click Next The NetBIOS Domain Name dialog box comes up Active Directory Installation Wizard Metb105 Domain Name Speci y a NetBIOS name For the maw domain This ic
40. administrator fernando frosty jacob jessica E kelly superadmin The Import Directory dialog box appears Import File name P M Replace base DN Progress Start Exit 176 Chapter 11 The Administrator Utility 2 Key in or browse to the path and filename where the import file is located If the file was originally exported by the Administration Utility its DN Domain Name configuration data appears in the text box to the right of the Replace base DN entry 4 Replace base DN DC 001 k DE com Progress Start Exit 3 Choose whether to enable or disable the Replace base DN entry By default the Replace base DN checkbox is enabled That means that the import file s DN configuration data the entries in the text box to its right will be replaced by the AD s DN configuration If you are importing a file that was not created by exporting it from this Administrator Utility running on this computer you must key in this computer s DN configuration in the text box Ifthe Replace base DN checkbox is not enabled only the data in the import file that matches the Active Directory DN will be imported 4 Click Start A cautionary message appears When you importa previously exported configuration file the system s status is restored to what it was at the time that the imported file was created All changes since that time will be lost
41. describes how to set up your Authentication Server on a Windows 2000 Server or Windows Server 2003 system Chapter 8 CC1000 Server Setup takes you through the steps involved in installing the CC1000 program on your Windows 2000 Server or Windows Server 2003 Chapter 9 The Log Server explains how to configure the Log Server and how to query its records Chapter 10 The CC1000 Manager explains the CC1000 Manager interface and the procedures involved in configuring the CC1000 system Chapter 11 The Administrator Utility describes in detail how to use this utility to manage users groups and devices Chapter 12 Browser Operation describes how to log in and access the devices on your CC1000 installation using a standard browser Appendix A Technical Information provides technical as well as troubleshooting information Appendix B Authentication Key Utility explains how to use the utility to upgrade the authentication key s firmware and user licenses xi CC1000 User Manual Conventions This manual uses the following conventions Monospaced Indicates text that you should key in Indicates keys you should press For example Enter means to press the Enter key If keys need to be chorded they appear together in the same bracket with a plus sign between them Ctrl Alt l Numbered lists represent procedures with sequential steps Bullet lists provide information but do not involve sequential steps
42. distribution CD to a folder on your hard disk 2 Open a terminal and go to the directory where the CC1000J Setup ForLinux bin file is located 3 Enter the following commands export LAX DEBUG 1 sh CelU000 Selup F Orlinux Din Note If the installation program starts cancel it 11 CC1000 User Manual 4 In the screen output look for the line it will be in bold that starts USING Meis to see which Java your distribution is defaulting to 5 If the Using VM entry shows a path to a file named java in the old Java version directory go to that directory and either delete the java file or rename it 6 Log out and log back in Installing After making sure that the appropriate version of the JDK has been installed do the following 1 If you haven t already done so copy the CC 000J Setup ForLinux bin file from the distribution CD to a folder on your hard disk 2 Open the folder that you copied the installation file to and run the CC1000J Setup ForLinux bin program Note 1 You must run the installation program as the root user For some versions of Linux the program must be run in a terminal 2 Make sure that the installation file has executable permissions 3 Refer to the Windows installation procedure see page 6 for details on how to proceed once you start the installation program Chapter 2 CC1000J Server Installation Uninstalling CC1000J Uninstalling from a Windows System To uninstall CC1000J
43. existing domain oz This ss server will oe the first domain controller in the new ea Additional domain controller for an existing domain Y Proceeding with this option will delete all local accounts on this server All cruptographic keys vill be deleted and should be exported before continuing All encupted data such as EFS ercmpted files ar e mail should be decrypted before continuing or it willbe permanently inaccessible lt Back _ Cancel 5 Select Domain controller for a new domain then click Next The following dialog box appears Active Directory Installation Wizard a ES Create Hew Domain Hs Select which type of domain to create Sg Create a new Select this option if this ig the first domain in pour organization or if you want the neva domain to be completely independent of your curent forest 7 Child domain in sn existing domain tree If you want the new domain bo be a child of an existing domain select this option For example you could create a new domain named hesdoquerters example microsoft com ss a child domain of the domain example mierozofl com Domain tee in an existing forest IF you dont want the new domain to be a child of an existing domain select this option This will creste a new doman tree Hat ls separate from any existing trees z Back Cancel continues on next page 87 CC1000 User Manual 6 Select Domain in a new forest then click Next The New D
44. from a Windows system do the following 1 Open the Start menu 2 Navigate to the CC1000Java entry Programs gt CC1000Java and select Uninstall CC1000Java ES Windows Catalog Y Windows Update gt 7 Administrative Tools gt AltusenvNC Documents l Settings bE A Search gt Help and Support Run Log Off Administrator Windows Server 2003 Enterprise Edition RN Shut Down am PL ida Pa Uninstalling from a Linux System To uninstall CC1000J from a Linux system as root execute the following command install path Uninstal1l_Cc1000Java Uninstal1l_CC1000Java Where install path represents the directory that you specified for CC1000J s location when you installed the program CC1000 User Manual Upgrading the CC1000J If CC1000J has already been installed it is not necessary to perform a full install You can upgrade to the latest CC1000J version by running the CC1000J Upgrade program CC1000J Upgrade ForWindows exe for Windows CC1000J Upgrade ForLinux bin for Linux The files can be found in the CC1000 Java Version folder on the software CD that came with your CC1000J package CC1000 Software gt CC1000 Java Version When you run the upgrade program simply follow the Wizard to complete the procedure Note New versions of the Upgrade Program are put up on our website for download as they become available Check the website to get th
45. group folder that you want to add a user to and click on the name of the group 2 In the Group Properties screen that appears go to the bottom of the Members panel and click Add Group Properties Group Settings Group name Techdoc 01 Description Primary Techdoc Team Members Devices 3 In the Select User dialog box that appears select the user you want to add to the group from the list of users Select x 2 frosty R EN jacob 2 jessica 2 kelly B rif EN superadmin User name fernando 52 Chapter 4 The CC1000J Administrator Utility 4 Click OK The user is added to the group s Members list Group Properties Group Settings Group name Techdoc 01 Description Primary Techdoc Team Members Devices gt fernando 5 Click Exit to close the screen Removing Users from Groups To remove a user from a group select the group in the Member of panel then click Remove 53 CC1000 User Manual Adding Devices to Groups To add a device to a group do the following 1 Navigate to the group folder that you want to add a device to and click on the name of the group 2 In the Group Properties screen that appears go to the bottom of the Devices panel and click Add Group Properties Group Settings Group name Techdoc 01 Description Members
46. is no operator input for the amount of time specified here the CC1000J session is ended The Super Administrator timeout interval is from 1 1440 minutes default is 3 minutes The timeout interval for Administrators and Users can either be 1 1440 minutes or no timeout default is 3 minutes If an operator is connected to a device and that device has its own timeout interval the CC 1000 timeout interval won t begin until the operator is first timed out of the device session If the user unexpectedly disconnects i e closes the browser the CC1000J times out the user s session after the amount of time specified here The timeout interval is from 2 10 minutes default is 2 minutes Continues on next page 37 CC1000 User Manual Continued from previous page Note If you click the Browse button see Browse page 36 to add the Username and Description a Browse Domain Users input screen x Rind user Lonk in Windows Aciha De econ l Padiess 100311 Port 339 Username admiris lir Pasay rererere Domain users E Jotul L ca n Plane Location Gini al incam ti n Windows Sete 61000 T1 comer EE Hart nanst John Initials Lenin 6C1000 T1 comser Jack C100 T comer Las namie Lee Display names Johr Lee Dnecription Ligar for C1000 testing Emile Account information Liar login rmac JohnL MOCM00eT1 com User log a name pra Wiech Pi 2c1050 T14 Joma Account mines pl Mirror OK Cancel 1
47. list right click on the IUSR_XXXX entry where XXXX represents your computer name 3 In the context menu that appears click Reset Password The following dialog box comes up New password Confirm password Reset Password User must change password at next logon Cancel 93 CC1000 User Manual 4 Key in the new password For something easy to remember you can simply key in password Note Make sure that you don t have a check in the User must change password at next logon check box 5 Click OK A confirmation message appears Active Directory i x a UL The password For IUSR_TUSI M has been changed 6 Click OK to finish up Windows Server 2003 Since operators can log into the CC1000 with fewer characters than Windows Server 2003 s Password Policy allows this section describes how to adjust the Windows Server 2003 Password Policy to allow users to log in with passwords of fewer characters Although this procedure is optional unless the Password Policy 1s adjusted CC1000 operators won t be able to log in with simpler passwords Be aware however that by lowering the password policy you are also lowering system security To adjust the Windows Server 2003 Password Policy do the following 1 Open Control Panel Administrator Tools Domain Security Policy The following screen appears m Default Domain Security Settings i 5 x Bis deion per ep D XGA PE
48. lp 2 gt cute Mii baltai poe pril dirar Tapira Files Freel Ira pet vd toile nfl Ajar enga et ee Charro Po oher Pel I Fi pa the order ra dl Ca angy to H E az ll 6 When the browser asks what to do with the file KeyUpgrade exe select Save to disk 217 CC1000 User Manual 7 Leave the browser open exactly as it is go to where you downloaded the file and execute it The upgrade utility comes up and starts the upgrade The actions it performs are reported in the main panel Key Information Fa veo Pa sm VES Licenta niami Liternie Upgrade Concumen wer F To 0 Ve r Ev nti DET AL ugly hep bem DLL Lonmecirng be teres OU Connected tothe perra 004 Staring bo wegrada the OL Auth hey boen s OOF Upgrading the CCA Key boense 005 The CC Auth bey ocres eas successhully upgraded Pei a atte e Nie iz it hey el 8 When the upgrade is finished a window pops up to inform you that the upgrade was successful Click OK to close the popup The browser screen provides a summary of the upgrade tan eee feet bree CC Authentication Key License Upgrade Order summary Order 1D 1017000112 Licenses enged from 1 to 31 Key sere number 123490780 Key versi n number V1 1 101 _Cortewe tego SLEN com is published by ATEN Invtermanional Ca Lad Taiwan A nights reserved 9 Click Logout to exit or Continue to process another order 218 Appendix B Firmware Upgrade The CC1000 A
49. oR Ea Completing the Active Directory Installation Wizard Acia Directory iz nove installed on this compubar for the domain COTVOOO TE COM This doman conboller y ascsigmed bo thes e Detoult Fit Site Mame Sate are managed wath the Achve Directory Biag and Services ackramectratrees bon To close thit wizard chek Finis PL 14 Click Finish to complete the procedure A screen pops up informing you that the system must be restarted before the changes can take effect Active Directory Installation Wizard E xj Windows must be restarted before the changes made by the Active Directory Installation wizard take effect y Dont Restart Now 15 Click Restart Now to restart your system 92 Password Setup Chapter 7 Authentication Server Setup The following sections describe how to set up the password for anonymous users for IIS and CC1000 web access Windows 2000 Server To reset the anonymous user password on Windows 2000 Server do the following 1 Open Control Panel Administrative Tools gt Active Directory Users and Computers Users A screen similar to the one below appears L Active Directory Users and Computers Ioj xj lt Console Window Help 185 x Action view e gt Ex SEaBI2 arar lt et Tree 9 Active Directory Users and Computers E gp techdoc com tw 3 Builtin 3 Computers 4 D
50. power company The device is equipped with a 3 wire grounding type plug This is a safety feature If you are unable to insert the plug into the outlet contact your electrician to replace your obsolete outlet Do not attempt to defeat the purpose of the grounding type plug Always follow your local national wiring codes Do not allow anything to rest on the power cord or cables Route the power cord and cables so that they cannot be stepped on or tripped over If an extension cord is used with this device make sure that the total of the ampere ratings of all products used on this cord does not exceed the extension cord ampere rating Make sure that the total of all products plugged into the wall outlet does not exceed 15 amperes 191 CC1000 User Manual 192 To help protect your system from sudden transient increases and decreases in electrical power use a surge suppressor line conditioner or uninterruptible power supply UPS Position system cables and power cables carefully Be sure that nothing rests on any cables When connecting or disconnecting power to hot pluggable power supplies observe the following guidelines Install the power supply before connecting the power cable to the power supply Unplug the power cable before removing the power supply If the system has multiple sources of power disconnect power from the system by unplugging all power cables from the power supplies Never push objects of any kind in
51. support aten usa com 1 Online technical support is available to ALTUSEN cus tomers through our e Support Center http www aten usa com support Online troubleshooting that describes the most com monly encountered problems and offers possible solu tions to them online documentation including electronically available manuals and the latest drivers and firmware for your product are available at our web site http www aten usa com 1 888 999 ATEN When you contact us please have the following information ready beforehand Product model number serial number and date of purchase Your computer configuration including operating system revision level expansion cards and software Any error messages displayed at the time the error occurred The sequence of operations that led up to the error Any other information you feel may be of help 194 Appendix A Getting the Full Computer Name When you install the CA Certification Authority function and configure the CC1000 Authentication Server you will need to specify the full computer name The following sections show you how to get the full computer name For Windows 2000 Server 1 In the Control Panel Double click System 2 Click the Network Identification tab In the screen that appears the full computer name is displayed in the Full computer name field System Properties O o AS 7 xj General Network Identification Hardware Us
52. the device that you want CC1000 to allow Note 1 A number of 0 zero means unlimited connections up to the maximum number of connections set in the device itself 2 If the number specified here is greater than number of connections allowed by the device itself the number allowed by the device takes precedence over this number More connections than the ones allowed by the device will not be accepted 8 Select whether the device name or IP address appears when users log in via their browsers As a security precaution selecting the device s name keeps its IP address from being visible under the Operation Notes in the browser screen s main panel Device Properties x Model name JKN2NIB Hame kna Description KN2116 at Techdoc Taiwan MAC address joo 074328007 Notify email Jadmin techdoc com Browse Masimam connections fo Display Device name gt Cancel 9 Click OK to finish up The device is added to the folder CC1000 Administrator Utility Auth Server IP 10 0 13 180 E E ol x a i CC1000 Devices Cananda Bl PN9108 T1 3 13 Taiwan Bl snoiie fly CC1000 UsersiGroups 153 CC1000 User Manual Adding Generic Device Nodes The CC1000 supports the creation of a Generic device type This refers to a device that is not part of the Aten Altusen On the Net Over the Net line of products Since generic devices have no provision for CC management
53. the group that you want the user to be a member of then click OK Select Group i x A Marcom 01 A Marcom 02 A hs FA techdoc 02 Group name Techdoc 01 3 When you return to the User Properties screen the group can be seen in the Member of list Member of A Techdoc 01 48 Chapter 4 The CC1000J Administrator Utility Group Priority If the user is a member of more than one group you can adjust a group s priority by selecting and then clicking Up or Down to move it accordingly Member of A Techdoc 01 A Marcom 02 R A Techdoc 02 Removing Users From Groups To remove a user from a group select the group from the Member of list then click Remove Users and Devices Adding Devices to Users To add a device for the user to access do the following 1 Click the Add button at the bottom of the Devices panel 2 In the dialog box that appears select the device then click OK Note You may have to expand the folders to get to the device Select Device x Y CC1000J Devices A C 3 Taizhong i Device name SNO0116 49 CC1000 User Manual 3 The Access Configuration dialog box comes up Set the permissions according to the information contained in the device s User Manual then click OK SN0116 Access Configuration xi Device information MAC address 001074330108 Name SN0116 Access rights User status
54. to the License Agreement enable the Agree radio button 25 Firmware Upgrade Utility Welcome to the Firmware Upgrade Utility Put your device into Firmware Upgrade Mode Use the Firmware Upgrade Cable to connect its Firmware Upgrade Port to your computer or connect via Ethernet Agree to the License Agreement Then Click Next LICENSE AGREEMENT LICENSE GRANT TEN International Co Ltd Licensor grants to you a non exclusive non transferable license to access and use FIRMWARE UPGRADE UTILITY the Product during the Term set forth below ou may install the Product on a hard disk or other storage device install and use the Product on a file server for use on a network for the purposes of i permanent installation onto hard disks or other storage devices or fii use of the Product over such network and make backup copies of the Product RESTRICTIONS ou agree not to modify adapt translate reverse engineer recompile disassemble or otherwise attempt to discover the source code of the Product or create derivative works based on the Product or remove any proprietary notices or labels on the Product including copyright trademark or patent pending notices ou may not sublicense the Product or otherwise allow others to use the Product licensed to you ul l gree Don tAgree Help About Cancel Continues on next page 220 Appendix B Continued from previous page 6 The utility sea
55. 1s run see page 211 The To field is automatically filled when you click in it b Select that this is to be an Offline upgrade c Click Continue to move on ATEN CC Authentication Key License Upgrade en PA NA gt License Upgrade Order information a r Order informal Order ID 10147000135 Thad onder gala For 30 mora lisa Wij errar amp Wl bajara Upgrade Opti aTh eam is pobla by ATEN lover Co Led Tahaan Sll rig ranee 212 Appendix B 4 When the Upload Key Information screen comes up click Browse and 7 load the CCI KAUpload dat file that was generated in the Preliminary Steps section see page 211 then click Continue ATEN CC Authentication Key License Upgrade Tampi alar Cn ro cia A Upload he Rey information Cata Fit Kay ibarra data files Browse Cantina Changing your order request D yeu vish fo change the oder request click Changs onder to go back to the Order Info paga ALE cee le published by ATION fopemarionel Co Led Tabasa All rigtes reperced The next screen that comes up summarizes the transaction so far Click Continue to move on In the screen that appears next click Download to download the key license upgrade data file Keyupgrade dat X CC Authentication Key License Upgrade Bmg leen ree ar gt 6 Authentication Key License Upgrade by Disiributor Cueny information Plage keep the following raferanos number fo
56. 4 Click CC1000 Manager To test the installation in order to make sure that everything is working properly 1 Key the CC1000 Server s IP address in your browser 2 When the CC1000 Login Screen comes up key in your Username and Password If all went well you should see the CC1000 Main Screen Note 1 The CC1000 comes with a pre installed superadmin Super Administrator account You can use this account to test the installation The Username is superadmin the password is CC1KPassword The password is case sensitive For security purposes we strongly recommend changing the password to something unique 2 If this is a first time login or if your password was reset with the CC1000 Administrator Utility you will need to change your password 3 The CC1000 USB Authentication Key that was provided with your package must be plugged into the USB port of the computer that the CC1000 Server is running on in order for the program to come up successfully For security purposes the USB Authentication Key can plug in inside the case See USB Authentication Key Bracket Installation page 196 for details 125 CC1000 User Manual This Page Intentionally Left Blank 126 Chapter 9 The Log Server Overview The CC1000 Log Server records the events that take place on the CC1000 system and writes them to database file CC1 KLogs mdb which can be found in the same directory as the Log Server application The Log Server automatically
57. 45 for details A plus sign in front of a folder means that there are items nested inside of it Click the plus sign to expand the tree and show the nested items To access a device navigate through the folders to select it A screen similar to the one below appears Control Center over the NET ALTUSEN cana eee Node Inlet Sap l Dn i diii der Sep d CKA mi GRAE you AEA tD Eo rere Co DA TY era Os L A a eed ieee a ache ee a7 Ea 0 pio 7 If the device is on line its icon lights green and its IP address or device name appears under the Operation Notes heading in the main panel when you select it Usually there are two choices available to access a device Accessing it directly and logging in manually Accessing it via the CC1000J which doesn t require another log in If the device cannot be accessed directly however only the CC1000J access method appears Click the IP address or device name to bring up a new browser window with the device s web page displayed Note The device must be configured to operate with the CC1000J or its 64 status will be displayed as Off Line Refer to the device s User Manual for information on how to configure and operate it Chapter 5 CC1000J Browser Operation Main Page Links Overview Clicking the links at the top right of the main page brings up additional screens The number and type of links displayed are determined by the user s type
58. 7 14 10 26 48 Device type KN9116 IP 10 0 13 198 is online 00022 2006 07 14 10 27 15 Device type KN2116 IP 10 0 13 40 is offline 00023 2006 07 14 10 27 18 Device type KN2116 IP 10 0 13 40 is online 00024 2006 07 14 10 27 20 Device type KN9116 IP 10 0 13 198 is offline 00025 2006 07 14 10 27 22 Device type KN9116 IP 10 0 13 198 is online 00026 2006 07 14 10 27 51 Device type KN2116 IP 10 0 13 40 is offline 00027 2006 07 14 10 27 52 Device type KN2116 IP 10 0 13 40 is online 00028 2006 07 14 10 27 56 Device type KN9116 IP 10 0 13 198 is offline 00029 2006 07 14 10 27 57 CC1000 user Username administrator IP 10 0 13 180 Logged in 00030 2006 07 14 10 28 00 Device type KN9116 IP 10 0 13 198 is online 00031 2006 07 14 10 28 27 Device type KN2116 IP 10 0 13 40 is offline 00032 2006 07 14 10 28 29 Device type KN2116 IP 10 0 13 40 is online N 00033 2006 07 14 10 28 32 Device type KN9116 IP 10 0 13 198 is offline 00034 2006 07 14 10 28 43 CC1000 user Username administrator IP 10 0 13 180 Logged out 00035 2006 07 14 10 29 02 Device type KN2116 IP 10 0 13 40 is offline 00036 2006 07 14 10 29 07 Device type KN2116 IP 10 0 13 40 is online 00037 2006 07 14 10 33 00 Device type 5N0116 IP 10 0 13 201 is online 00038 2006 07 14 10 33 34 Device type SNO116 IP 10 0 13 201 is offline 00039 2006 07 14 10 33 35 Device typ
59. Appendix B Authentication Key Utility OV ETN Wee asta a ace eee ct Ate eh ansehen eee eee 207 Key Status Information 25 024 sea dae eae doen a 207 eV SS taste chow td ot Avs to dst See oe be eB ave erie 4 a oases 207 Key License Upgrade ax in iw tate ee ewe oi coe el 208 OMNE POCOS sacs ra ch eo eke ae ele ee esd oot ee 209 Performing the Upgrade 000 cece eee 209 FEU O Sh ure seo A ER 212 Online Upgrade sasare Saha sie Rhee eh ed eae 214 Firmware Upgrade cesar aras 217 Starting the Upgrade ooooooocooooooo eee 217 Upgrade Sucede diia Ea 220 CC1000 User Manual About This Manual Overview Chapter 1 Introduction introduces you to the CC1000 System Its purpose features and benefits are described Chapter 2 CC1000J Server Installation takes you through the procedures involved in installing the Java version of the CC1000 CC1000J on both Linux and Windows platforms Chapter 3 The CC1000J Manager explains the CC1000J Manager interface and the procedures involved in configuring the CC1000J system Chapter 4 The CC1000J Administrator Utility describes in detail how to manage users groups and devices Chapter 5 CC1000J Browser Operation describes how to use a standard browser to log in and access the devices on your CC1000J installation Chapter 6 CC1000 Installation Overview provides an installation overview of the Windows based component of the CC1000 Chapter 7 Authentication Server Setup
60. Create User dialog box one of the following User Options dialog boxes appears Super Administrator Options BEE T Download Administrator Util 4 View backup bg files fi View device infomation i Wien session information IV View system information End session JV View device information V End session User Options TT View device lag A description of the options is given in the table below Option Description Download Administrator This option allows a Super Administrator to download Utility the Administrator Utility executable file from the CC1000 Servers site The Administrator Utility can run as an independent module on Windows 2000 and higher systems View backup log files Selecting this option allows the Super Administrator to view and query the backup log files View system information Selecting this option allows the Super Administrator to view system information such as the number of Licenses and Connections available to the system View device information Selecting this option allows the Super Administrator to view information for all online devices on the installation Administrators can view information for the online devices that they have access rights to End session Selecting this option allows the Super Administrator to end Administrator and User CC1000 sessions Administrators can end User CC1000 sessions Continues on next page 161 CC1000 User Manu
61. Device i j O x a w CC1000 Devices H Cananda BL LP6324 Device name WK Cancel Note You may have to expand the folders to get to the device 172 Chapter 11 The Administrator Utility An Access Configuration dialog box that allows you to set user access permissions for the device appears CN 6000 Access Configuration eS lols Device information se address 004854655559 Mame emenn Access rights Device setings 4 Configure e Windows client W Java client I Powermanagement iv Log e View only Device defined setting Cancel Apply Note 1 The screenshot shows a dialog box for the CN 6000 Each Administrator Utility device has its own Access Configuration dialog box The makeup of the dialog boxes vary reflecting the device s function Refer to each device s User Manual for information about setting its user access rights 2 The CC1000 supports the creation of a Generic device type a non Administrator Utility product such as the LP6324 in the screenshot on page 172 This type of device doesn t have an Access Configuration dialog box 3 The Device defined setting field is reserved at the current time and should be left blank It may be given a particular function in future versions 173 CC1000 User Manual Group Membership If a user is a member of more than one group and each group has access to the same device the device s name will appear more than once
62. Groups gt Users and click on the user s name The User Properties screen appears Usar Properties liser amitine Username nfl Uber salus Pestiin rechdoc Super administrator Acminisicabor Emait rii ale Ot Te min bene Parres Ho timeni Timem after minubejs Repel FERFE Unexpected disconnection limeculafler 2 minubels Paavo dl Confirn passerait Member of The screen is divided into three major areas The top contains information about the user that was specified when the user was created see Adding Users page 35 as well as an area to reset or change a user s password see Resetting Passwords below The Member of panel lets you add the user to a group See Adding Users to Groups page 52 for details The Devices panel lets you assign devices to the user See Adding Devices to Users page 49 for details Note Users and Groups can also be added to devices from the Device Properties Configuration screen See Adding Users Groups to Devices page 45 Resetting Passwords To reset a user s password do the following 1 Check Reset password This enables the Password fields 2 Enter the new password then enter it again to confirm it 3 Click Apply to finish 47 CC1000 User Manual Users and Groups Adding a User to a Group To add a user to a group do the following 1 Click the Add button at the bottom of the Member of panel 2 In the dialog box that appears select
63. K 6 When you return to the Create User dialog box click OK The new user is added to the Users folder Yt CC10003 Administrator Utility Aut File Y Taiwan S Taipei KN2116 03 LP6324 PN9108 01 E gis gha gb yr SNO116 Q Taizhong Y CC1000J Users Groups Groups 7 Repeat steps 2 6 for each new user you want to add 40 Chapter 4 The CC1000J Administrator Utility Deleting Users To delete a user do the following 1 Navigate to the Users folder CC1000J Users Groups Users and right click on the username 2 Click Delete Y CC10003 Administrator Utility Aut File Y CC1000J Devices k 3 Canada Y Taiwan Y Taipei E KN2116 03 E LP6324 PN9108 01 E SN0116 3 Taizhong Y 201000 UsersiGroups QO Groups Y Users 3 fernan o e frosty m User Properties User accounts and permissions are managed through the User Properties screen See User Properties Configuration page 47 for details 41 CC1000 User Manual Group Management Groups allow administrators to easily and efficiently manage users and devices Since device access rights apply to anyone who is a member of the group administrators need only set them once for the group instead of having to set them for each user individually Multiple groups can be defined to allow some users access to specific devices while restricting other users from accessing those devices Creating Groups To cr
64. License Agreement Introduction Installation and Use of CC1000Java Requires Acceptance of the icense Agreement Following License Agreement 7 5 Ifany action at law or in equity including an action for declaratory relief or injunctive relief is brought to cut Folder enforce or interpret the provisions of this Agreement ation Surrey the prevailing party shall be entitled to reasonable E J attorneys fees in addition to any other relief to which Installation Corrplete the party may be entitled tallation Folder Any waiver by either party of any default or breach hereunder shall not constitute a waiver of any provision of this Agreement or of any subsequent default or breach of the same or a different kind InstallAnywhere by Macrovision 5 Click to enable the accept radio button then click Next to continue 6 In the dialog box that comes up key in your product s serial number the serial number can be found on the CC1000 s CD case then click Next to continue CC1000 User Manual 7 In the Choose Installation Folder dialog box specify the CC1000J s installation folder If you don t want to use the default entry click Choose to browse to the location that you want then click Next to continue 3 CC1000Java Introduction Installation Folder ation Folder Restore Default Folder Choose cut Folde Sra InstallAnywhere by Macrovision 8 In the Choose Shortcut Folder dialog box cli
65. Sekine Hre 13 A ieou Policies JP Accent Pelis Parre o locket pd x EN Local Pokies Hdl Polces ding user rights and security options pides i BB Evora Log diren Log En nt Log 5 af estricted Goues retrete Groups Resita Gree jj His Serios Dirien Serios System serving settings E eiry 5 E rie Srn repare Raib securky satlir i Fils System Fie security artir Wireless Metvork IEEE S02 11 F 3 El f ome ms T wireless M tork EDE O02 1 Wireless Network Pokey Adreretr tion Manage th E Ey Pubi key Pakir a Ey Sofware Peechrietion Pobries do Kiry Pri EM IP Security Policies on Active Dire inal Softorare Restriction Polos ir Security Poked of Activa ienet Protocol security Pec Adn 94 Chapter 7 Authentication Server Setup 2 Under Security Settings expand Account Policies then select Password Policy The following dialog box appears im Default Domain Security Settings 3 10 x Fie Action Yiew Help 28 ad x Be Policy Setting ra password history 24 passwords remembered 22 Maximum password age 42 days P 22 Minimum password age 1 days Br Kerberos Policy 22 Minimum password length 4 characters 3 Local Policies Re Password must meet complexity requirements Disabled 4 site ri G Ra Store passwords using reversible encryption Disabled estricted Groups AJ System Services 3 Registry G9 File System Y Wireless Network IEEE 802 11 F E Public Key Policies 3 Software Restriction P
66. Service Restore Mode Administrator Password dialog box comes up Active Directory Installation Wizard E i a Directoy Services Restore Mode Administrator Password Spaci an Administrator passwd to uga when starting the computer in Dinsctory Servicer Rao Moda Type and confirm the pageword pou want to assign bo this server s Adminigbabga account bo ba uzeed when the computar iz charked m Directory Servicec Fazctora Moda Easiwornd pu Canim pazzvered z Back am Cancel 11 Key in a password confirm it then click Next A Summary screen appears allowing you to review and confirm the options you selected Summan Review 2nd conii the opliona pou selected ou choza to Configura hiz server ax the hex domam controller ma mew forast of domain heaz The haw domain rami CE1000 T0 C0M Tht it loo thee mame of the rav loreal The HABIOS mama of iha domain le CCT ODO 110 Databare location OMIM TVA TOs ag file locaton ONT AM ToS Sycwol folder locaton Ow TS SOL The DHS fence vall be matalled and configured or hic computer To change an option chick Back To continua click Mext Back Next gt Carcel 12 If you want to make any changes click Back If the information is satisfactory click Next The wizard now configures Active Directory continues on next page 83 CC1000 User Manual During configuration the wizard displays the following screen Configuring Active Direcbo
67. Session Info provides information regarding online active sessions When you click the Session Info link a screen similar to the following appears Control Center over ihe NET ALTUSEN eee A Sgn jE The Super Administrator can end any Administrator or User session by selecting the desired Username and clicking End Session The numbers under the Connections heading represent the number of connections to installed devices and the number of subconnections to them For example if the entry under the heading were 2 5 it would mean that the user was connected to two devices through the CC1000J and that there were a total of five connections under those devices the subconnections 69 CC1000 User Manual Log When you click the Log link a screen similar to the one below appears Control Center over ine NET ALTUSEN To query a log record do the following 1 70 Click the arrow at the right of the Log File field to drop down a list of available log files Only the log files that you have rights to view are available Note If you have rights to query the system log it will appear in the list Select the items that you want to perform a query on in the Target List and add them to the Selected Targets list If you are searching on more than one item the order of the search will follow the order of your selection Note If you have rights to query backup log records you may need to select the m
68. The following screen appears IIS Certificate Wizard 1 i Certificate Request Submission You have chosen to submit the following certificate request To submit this request click Next Certification Authority tusi m techdoc com tw tusi m techdoc com tw Request parameters Issued To tusi m Friendly Name Default Web Site Country Region Tw State Province Taiwan City Sijhih Organization Aten International Organizational Unit Techdoc lt Back Cancel 14 Click Next to submit this request The following screen appears IIS Certificate Wizard Completing the Web Server D Certificate Wizard SY You have successfully completed the Web Server Certificate wizard A certificate is now installed on this server If you need to renew replace or delete the certificate in the future you can use the wizard again To close this wizard click Finish lt Back Cancel 15 Click Finish to complete the Web Server Certificate Wizard 16 When you return to the Directory Security screen click OK to complete the operation 121 CC1000 User Manual Directory Security Setup for Windows 2000 Server L 122 In the Control Panel select Administrative Tools Internet Services Manager A screen similar to the one on page 114 appears In the left panel right click Default Web site In the menu that pops up click Properties In the Default Web Site Properties dialo
69. USB host controller and USB Type A F port installed so that it can accept the CC1000 USB Authentication Key CC1000 Windows 2000 XP or Windows Server Family with Microsoft Log Server Jet Database Note This component can either be installed on a PC running one of the other components or on an independent PC CC1000 Windows Server Family with Active Directory AD and Authenticaton Server Certificate Services CA configured Note This component can either be installed on the PC that the CC1000 Manager is on or on an independent PC CC1000 Windows 2000 XP or Windows Server Family AA ny Note This component can either be installed on a PC running one of the other components or on an independent PC Note 1 For the Windows Server Family you can use any of the following Windows operating systems Windows 2000 Server Windows 2000 Advanced Server Windows 2000 Data Center Windows Server 2003 Standard Edition Windows Server 2003 Small Business Edition or Windows Server 2003 Enterprise Edition 2 All PCs must be have all of the latest updates from the Microsoft Update Website installed 3 All ALTUSEN ATEN IP products must be at a firmware level that contains the CC Management function and the CC Management function must be enabled Download and install the latest version of the relevant firmware from our Website 1f necessary 73 CC1000 User Manual Installation and Operation Overview The procedures involve
70. Wide Web Service are enabled 6 Select World Wide Web Service and click Details Make sure that all the items listed are enabled then click OK continues on next page 98 Chapter 7 Authentication Server Setup 7 Click OK in all the opened dialog boxes until you are back at the main Windows Components screen pictured in the following diagram Windons Lomponents Wizard Winker lamenta Hog can add a eee pagen of we Ta add o remove a component cick the checkhre A shaded beet moana hat onip apes lea aca To 162 hats inchaded m comparant chek Sad Ll bl rs Serviced 1 4 Mt A Ml Canad Serer 1 1 M FL a arar 7 OMA Dernen Includes ASP MET_ Intemel Infomation Seraces 15 and the Application Serve Conpale Total dish pete required Guo Eper madahi nin kth BH TMB Diecsdi cout _ 8 Click Next to have the components configured While the configuration procedure takes place a screen similar to the one below appears Windows Components Wizard l Configuring Components Setup is making the configuration changes you requested i Please wait while Setup configures the components This may take several minutes depending on the components selected Status Installing Distributed Transaction Coordinator E 9 When a screen appears to inform you that you have successfully completed the procedure click Finish 99 CC1000 User Manual Certification Authority Installa
71. age Devices Users and Groups 146 Chapter 11 The Administrator Utility Device Management Creating Device Folders Device folders allow you to organize your enterprise wide devices into useful categories location department etc To create a device folder do the following 1 Right click on the CC1000 Devices folder 2 In the pop up menu that appears select New Folder CC1000 Administrator Utility Auth Server 1P 10 0 13 180 3 iol xj Device Generic Device Browse 3 The Create folder dialog box appears dela Marne Descrptiorr ik Cancel 147 CC1000 User Manual 4 Enter a name and a description for the folder 101x Hame Canada Description Devices in Canada Cancel 5 Click OK The folder appears as a subfolder of the CC1000 Devices root node CC1000 Administrator Utility Auth Server IP 10 0 13 180 3 10 x a CC1000 Devices Ei Canada H A CC1000 UsersiGroups Adding Devices Devices are added to the device folders that are appropriate for them For example you would create a device node for a PN9108 that was in Canada in the Canada device folder Note You can nest device folders For example you could have a Vancouver device folder and a Toronto device folder as sub folders under the Canada folder There are two methods to add a device node The first is to manually add the device The second is to
72. ain log file in the Log File Select field in order to have the backup log file appear in the Target List If you want to search on a keyword enter it in the Keywords field otherwise leave the field blank Note The keyword can be a single word a phrase or even a sentence Continues on next page Chapter 5 CC1000J Browser Operation Continued from previous page 4 In the Time panel if you want to search the entire record regardless of the time frame select All If you want to search a particular time range click the calendar icons at the right of the Start and End fields to bring up a dialog box to choose the dates and times for the search then choose whether the search will include or exclude the date time range 5 When all your choices have been made click OK to perform the search About The About page provides information regarding the current version of the CC1000J Logout Clicking this button logs you out of your CC1000J session 71 CC1000 User Manual This Page Intentionally Left Blank 72 Chapter 6 CC1000 Installation Overview System Requirements The requirements for the computers running the CC1000 components under the Windows based configuration are given in the table below Component PC Requirements CC1000 Windows Server Family with IIS 5 0 6 0 and higher Server Certificate Services CA and SNMP configured At least one network card installed two are recommended A
73. al Continued from previous page Option Description View system log Selecting this option allows the Super Administrator or Administrator to view and query the system log files View session Selecting this option allows the Super Administrator information Administrator or User to see information regarding the sessions currently taking place online View device log Selecting this option allows the Super Administrator Administrator or User to view and query the device logs for the devices they have access rights to Note 1 View system log View session information and View device log are the defaults for the Super Administrator View device log is the default for Administrators 2 See Main Page Links page 184 for screenshots and more details regarding these selections Place a check in the boxes to enable the options that you want to allow then click OK When you return to the Create User dialog box click OK The new user is added to the Users folder CC1000 Administrator Utility Auth Server 1P 10 0 13 180 3 Oj x 1 0 04 5 4 A CC1000 Devices Y Cananda Y Taiwan CC1000 UsersiSroups e a Groups LQ Users amp administrator superadmin 7 Repeat steps 2 6 for each new user you want to add 162 Chapter 11 The Administrator Utility Deleting Users To delete a user do the following 1 Navigate to the Users folder CC1000 Users Groups Users and r
74. alled 1t will be recognized as trusted 200 Appendix A Installing the Certificate To install the certificate do the following 1 In the Security Alert dialog box click View Certificate The Certificate Information dialog box appears Certificate 2 xi General Details Certification Path Certifitate Information This CA Root certificate is not trusted To enable trust install this certificate in the Trusted Root Certification rities store Issued to Aten Issued by Aten Valid from 2003 11 26 to 2013 11 23 Install Certificate Note There is a red and white X logo over the certificate to indicate that it is not trusted 2 Click Install Certificate 3 Follow the Installation Wizard to complete the installation Unless you have a specific reason to choose otherwise accept the default options 4 When the Wizard presents a caution screen x A You are about to install a certificate from a certification authority CA daiming to represent Aten Windows cannot validate that the certificate is actually from Aten You should confirm its origin by contacting Aten The following number will assist you in this process Thumbprint sha 1 F3B66988 A134DD25 1E6FO9BC 895F6DCD B30FB7AF Warning If you install this root certificate Windows will automatically trust any certificate issued by this CA Installing a certificate with an unconfirmed thumbprint is a security risk If you
75. an t be disabled If you use two adapters one for an Intranet internal and one for the Internet external for example then you must enable the Secondary adapter click to put a check in the Use Secondary NIC checkbox and provide the appropriate IP address and port information 133 CC1000 User Manual The meanings of the fields are described in the following table Field Meaning IP The IP address assigned to the network adapter of the computer that the CC1000 Server is installed on This is the computer that the CC 1000 Manager is running on Device port The port is the port that the CC 1000 Manager uses to communicate with the devices on the installation CN 6000 PN9108 SNO116 etc Admin utility port The port that the CC 1000 Manager uses to communicate with the Administrator Utility Authentication Server IP The IP address of the computer that the Authentication Server is running on Note 1 You cannot use 0 0 0 0 or 255 255 255 255 for the IP address of either the Primary or Secondary NIC 2 No two ports on the same NIC can have the same value 3 You cannot use 0 0 0 0 or 255 255 255 255 for the IP address of the the Primary Authentication Server 4 You can use 0 0 0 0 for the IP address of the Secondary Authentication Server it means ignore this IP but you cannot use 259 299 29 5 299 Some setting examples are given below 1 CC1000 Manager and the Authentication Server are both ins
76. ans you have to install a driver for it When everything is working correctly follow the steps described below continues on next page 17 CC1000 User Manual When your server comes up the Configure Your Server dialog box appears window 2000 Configaas Your Serre e eY Configure Your Server Active Directory stores information about nelwork objects such 93 sar accounts and shared prntore and pros atcoce to thal information To make this server a domain controller you muet install Active Directory The Acine Chrectory Insiallation w zard conigures this sarar as a domain controller and sets up ONS fit ts mot already available om the network Use this wizard for the follow scenanos s No existing domain controller sets up your server as the first domain controller on the network Domain controller already on network seta wp your semen as an additional domain controler new child domain new domain tre or new fongit Important You need a partilion formatted wih the verson of NTFS used i Windows 2000 to host Active Directory Note If for some reason this dialog box doesn t come up automatically open L 78 Control Panel Administrative Tools gt Configure Your Server In the left panel click Active Directory then click Start at the bottom of the right panel to bring up the Active Directory Installation Wizard Active Directoy Installation wizard Domai Controller Te po Spec
77. as successful Click Finish to close the utilty Device List Slatus Messages CC1000 Key 000 gt Loading teshng fes gt Loading testing fles OK gt Searching for devices gt Preparing firmware upgrade gt Firmware version is not newer than device CC1000 Key 000 gt Preparing firmware upgrade OK gt Upgiading device CC1000 Key 000 gt Upqiading device CC1000 Key 000 DK gt Firmware upgrade OK Device Description Device FAW Ver 1 0 093 Upgrade Fw Ver 1 0093 MID 000 gt V Check Firmware Veision Progress Heb View Log lt Back Cancel 9 Click Finish to close the screen The CC1000 Manager restarts automatically after the upgrade is complete 140 Chapter 11 The Administrator Utility Introduction The CC1000 Administrator Utility CC1 KAdmin exe is a client utility that allows administrators to manage users and devices in the Active Directory The utility provides four management functions device management user management group management and configuration data import export All nodes device folder users and groups are managed from a tree view Node specific context menus can be accessed by right clicking on the node Getting Started 1 Double click the Administrator Utility icon on the desktop If this is the first time that you are running the utility a Read settings failed message appears 2 Click OK to b
78. atabase Database takder ESINI E TY S N TDS Brows Where do you want to store the Active Directory log Los folder C AWIMDOWS NTDS Brows seek f ne f occa 9 We suggest that you keep the default values as shown in the diagram and click Next to move on The Shared System Volume dialog box appears cti Directory lint allation 4 4ard Shand Syetem Wilii Spec ity iha bde ba Eo nhas aie thr cuenta Shure Tha SY WYOL folder stores the server s copy of the domain s public Her The contents dl lho S80 folder aro replcaled lo dl doman controllers m the domain The S47 SVGL bolde mitt be located oe an TES ola Enis a location for tha Fraval dar Ecler ication f Tard a SE AAA Bivak Bool Hent Cancel continues on next page 89 CC1000 User Manual 10 We suggest that you keep the default value as shown in the diagram and click Next The DNS Registration Diagnostics dialog box appears Peed bor Directory Inatallaticn Wizard Si DHS Regiztratien Giagrertics Wells ONS support of install ONS on the Computer Diagnostic Resulta r Tha tegration diagmaztic haz been run 3 limar hone al the DHS servers used by this computer responded within thes birt linbar al Far more information including saps bo coreest this problem see Help Detalle The 504 query foi dap iep de mides CC 1000 72 COM te find the piman DHE
79. b 2004 2006 ATEN Interrascral Ca Lid All rights reserved If the device is on line its icon lights green and its IP address appears under the Operation Notes heading in the main panel when you select it Usually there are two choices available to access a device Accessing it directly and logging in manually Accessing it via the CC1000 which doesn t require another log in If the device cannot be accessed directly however only the CC1000 access method appears Click the IP address to bring up a new browser window with the device s web page displayed Note The device must be configured to operate with the CC1000 or its status will be displayed as Off Line Refer to the device s User Manual for information on how to configure and operate it 183 CC1000 User Manual Main Page Links Overview Clicking a link on the main page s top row at the top brings up additional screens The number and type of links displayed are determined by the user s type Super Administrator Administrator User and the options selected when the user was created The table below shows the relation between the User Type and link type Link Access Download Optional System Info Optional Device Info Optional Session Info Default Log System Default Log Device Default Log Backup Optional About All Default Logout All Default Ifa link is designated as Default it is always available on the web page Ifa
80. be your server s IP address or your server s computer name We recommend that you keep the default the server s computer name not the full computer name then click Next The following screen appears IIS Certificate Wizard x Geographical Information The certification authority requires the following geographical information lt gt X Country Region Tw Taiwan v State province Taiwan y City locality Sijhih v State province and City locality must be complete official names and may not contain abbreviations lt Back Cancel continues on next page 119 CC1000 User Manual 11 Key in your geographic information then click Next The SSL Port screen appears x SSL Port Specify the SSL port for this web site lt gt NY SSL port this web site should use lt Back Cancel Note The SSL Port screen 1s for Windows Server 2003 only If you are running Windows 2000 Server ignore this step and go on to the next screen 12 Make sure to set 443 as the SSL port then click Next The following screen appears IIS Certificate Wizard x Choose a Certification Authority Certificate requests are sent to a certification authority available on your lt gt network X Select a certification authority to process your request lt Back Cancel continues on next page 120 Chapter 8 CC 1000 Server Setup 13 Keep the default settings click Next
81. bie ace nce aes 163 Resetting Passwords sra dios Sa eh deans 164 Group Management oooo eee eee eee ees 164 Creating Groups ern Gees bokeh cee es a a 164 Deleting GroupS 0 cc eee ees 165 Adding Users to Groups vi is34ei4 4 404 4 a 165 Removing Users from GroupS 2 2 0 0 2c ee eee 167 Adding Devices to Groups 00 0 eee ees 168 DEVICE ASSIONIMEN ss ta ads iia iia eek 170 Device Panel HeadingS 2 0 0 eee ees 170 viii CC1000 User Manual Device Button Functions 0 0 0 0 ccc eee 171 Device Access Rights 0 00 cece eee eee ees 172 Group Members NID i pista coc tet E butte kei arate 174 Export Import Configurations 0 0 0 0 0 ccc eee ee eee 175 Exporting Configurations 2 2 0 0 0 cee ees 175 Importing Configurations 1 sasaaa aaaeeeaa 176 Additional Installation Options 0 0 0 00 cece eee eee 178 Installing the Administrator Utility Separately 178 Chapter 12 Browser Operation OO GACH MM acer 8 ao dl Sia ane Sane cnt dios Soe oad ae Ave ores 181 Wiel Wi AQ CHA OUT ot taa a ide 182 TCO WIGW ister us is ero co lr bos Busty oe eer ne dc og as optica de 183 MealurRage LINKS capa daras ene added 184 OVEIVICW nt a ta Sow GR Sat Aa 184 DOW IMIO AG bates a Sete A A 185 SAA 186 PASA A es Aone Betas 187 Session IO abia ada ee eu Cee dats 188 POO itso cnet eat CA A emda Seek ae is See a 189 ABOU tonic ete dond Lode Do de
82. ble on D 1505500 K InstallShield lt Back Cancel 178 Chapter 11 The Administrator Utility 3 In the list select CCI K Admin Utility then click Next The following screen appears CC1000 Setup E Select Program Folder Please select a program folder Setup will add program icons to the Program Folder listed below You may type a new folder name or select one from the existing folders list Click Next to continue Administrative Tools Snaglt 7 Startup Windows Media InstallShield lt Back Cancel 4 Click Next The following screen appears to indicate that the stand alone installation of the Administrator Utility installed successfully CC1000 Setup Setup Complete Setup has finished installing CC1000 on your computer IV Open CC1000 readme file Click Finish to complete Setup 179 CC1000 User Manual This Page Intentionally Left Blank 180 Chapter 12 Browser Operation Devices on a CC1000 installation are accessed from a browser based GUI Only a single login to the CC1000 Server is required to access any of them An expandable tree view lets you locate and access any device on the entire installation no matter where in the world with just a few clicks of the mouse Logging In To log into the CC1000 do the following 1 Open the browser and specify the IP address of the CC1000 in the browser s URL location bar 2 When the Secu
83. box A Security Warning dialog box comes up Security Warning ee Bat xj A You are about to instal a certificate from a certification authority CA dairing to represent wiheks4Cc 1k 15 CCLODO T6 COM Windows cannot validate that the certificate is actually from win2ks40c1k t6 CC1000 T6 COM You should confirm its origin by contacting win2ks4oclk t6 0C1000 T6 COM The following number wil assist you in this prooess Thumberint shal 39858F9D 09546338 F1349762 EFS8735E B34F627F Warning If you irstall this root certificate Windows wil automaticaly trust any certificate issued by this CA Installing a certificate with an unconfirmed thumbprint a security risk If you dick Yes you acknowledge this risk Do you want to Instal the certificate G The import was successful 7 Click OK to finish up 145 CC1000 User Manual The Main Screen When you run the CC1000 Administrator Utility the main screen appears showing the Devices and Groups Users root nodes CC1000 Administrator Utility Auth Server IP 10 0 13 180 m i CC1000 Devices Ky CC1000 UserstGroups Devices Users and Groups are configured and managed from this screen The first time you run the utility except for a Super Administrator installed under the Users node there are no device folders devices users or groups listed under the root nodes The following sections describe how to use the CC1000 Administrator Utility to create and man
84. c1000 UsersiGroups Note When you create the device 1ts Properties screen appears Ignore this for the time being A complete discussion of how to configure the screen entries 1s given on page 44 Adding Generic Devices The CC1000J supports the creation of a Generic device type This refers to a device that is not part of the Aten Altusen On the Net Over the Net line of products Generic devices have no provision for CC management support and therefore cannot be added by browsing or be authenticated through the CC1000J You must log in to them with their own Username Password authentication procedure In addition they must be capable of browser based access To add a generic device do the following 1 Right click on the device folder that you want to add the new device to 2 In the popup menu that appears select New Generic Device 0010003 Administrator Utility Auth Server 1P 10 0 100 File 9 001000 Devices Generic Device be Browse gt Y cc1000 UsersiGroups 32 Chapter 4 The CC1000J Administrator Utility 3 In the dialog box that appears key in a name description optional and IP address for the device Create Generic Device X Name LPag2g sd Description ee IP address 10 0 100 222 Display 4 Choose whether to display the device s name or IP address under the Operation Notes in the main panel when users log into the CC1000J via their brow
85. ce List Status Messages CCOO gt Loading amp testing files gt Loading amp testing files OK gt Searching for devices gt Preparing firmware upgrade gt Preparing firmware upgrade OK gt Upgrading device CC1000 Key 000 gt Upgrading device CC1000 Key 000 OK gt Firmware upgrade OK m Device Description Device Fw Ver 1 0 093 Upgrade FAW Wer 1 0 092 MID 000 IV Check Firmware Version Progress Help View Log Click Finish to close the Firmware Upgrade Utility 222 A Adding device nodes manually 149 Adding devices 27 Adding Users 35 157 Additional Installation Options 178 Administration 141 Logging In 142 Administrator Utility installing separately 178 Main screen 146 Anonymous password reset 93 Authentication Key Bracket Installation 196 external cable installation 196 internal cable installation 197 B Browser Operation Device Info 68 187 Download 66 185 Log 70 189 Logging In 61 181 Main Page Layout 63 182 Main Page Links 65 184 Session Info 69 188 System Info 67 186 C CC1000 64 bit Windows 199 upgrading 76 CC1000 capable products 198 CC1000 Manager Button Functions 132 Configuration settings 133 Index Log server settings 136 Overview 131 Proxy setting 135 setting examples 134 SNMP server settings 137 Web site settings 135 CC1000 Manager Settings 133 CC1000 Server c
86. ce list see Adding Devices by browsing page 30 Note Devices to be added must be powered on and have CC management enabled and configured in their settings Browsing the device list is the simplest way to add a device to a folder because the device provides information about itself such as its name type and MAC address In this way you ensure the accuracy of the device information and save the time normally required to gather and type in the information Adding Devices Manually To manually add a device do the following 1 Right click on the folder that you want to add the new device to 2 In the pop up menu that appears select New Device 0010003 Administrator Utility Auth Server IP 10 0 10 File 9 yy CC1000J Devices i Canada yy Taiwan AT cower Device N i Taiz Delete Generic Device gt EY cc1000 UsersiGraur 27 CC1000 User Manual da 28 In the dialog box that appears drop down the Select Model list and select the device type that you want to add x Name i Description MAC address Notify email Browse Maximum connections MIS Display IP address v Cancel Note In this example we are adding a PN9108 The procedure for adding other devices is the same Enter a name description and MAC address for the device in the appropriate fields Enter an email address f
87. checkbox and provide the appropriate IP address and port information Chapter 3 The CC1000J Manager The meanings of the fields are described in the following table Field Meaning IP The IP address assigned to the network adapter of the computer that CC1000J is installed on Device port The port is the port that the CC 1000 Manager uses to communicate with the devices on the installation CN 6000 PN9108 SNO116 etc Admin utility port The port that the CC1000 Manager uses to communicate with the Administrator Utility Note 1 You cannot use 0 0 0 0 or 255 255 255 255 for the IP address of either the Primary or Secondary NIC 2 No two ports on the same NIC can have the same value Proxy Settings To allow users to access CC1000 managed devices over a WAN you have to enable the proxy function put a check in the Enable Proxy checkbox Since this function makes use of the Secondary Network Adapter it only becomes available if the Use Secondary NIC function is enabled refer to the discussion in the previous section After enabling Proxy Setting specify a range of ports for the CC 1000 Manager to use for this function The valid range is from 1024 to 65535 with a minimum difference of 500 Note 1 If the CC1000 Server is behind a firewall the proxy ports set here must be allowed by the firewall 2 If you use this feature when you Save the settings the program checks the Secondary network adapter and Proxy setting
88. ck one of the radio buttons to specify where you would like to create product icons then click Next to continue 9 In the dialog box that comes up specify the Java Home location where the JDK has been installed After the location has been confirmed click Next to continue Config amp Setup CC1000Java Xi Confirm JDK is installed JavaHom i Copy files E Program Files Javaljdki 5 0_09 Browse Status 1 Checking that the JDK is installed JDK is installed Click Next to continue Chapter 2 CC1000J Server Installation 10 The dialog box changes to inform you that files are being copied to the installation folder Once the files have been copied click Continue to move on Config amp Setup CC1000Java xi Confirm JDK is installed eon tine Copy files JE Program Files Java jdk1 5 0_09 Browse Status 1 Checking that the JDK is installed JDK is installed Click Next to continue 2 Copying files please wait Copy files completed successfully we LM 11 The Pre Installation Summary screen appears Y CC1000 Java lel Es Pre Installation Summary Introduction Please Review the Following Before Continuing License Agreement Product Name Choose Installation Folder Cc 1000Java Shortcut Folder ho Install Folder Pr allation Summary at EACC1000Java rstallirig Install Cornplate Shortcut Folder D Documents and SettingstAdministratoriStart Menu Programs CC 1000Ja
89. ctly in the device s ANMS settings 1 The CC1000 Server settings may have changed after you downloaded the Administrator Utility Download the utility again 2 If you are behind a firewall make sure that the LDAP and LDAPS ports 389 and 636 are allowed 3 If you are using LDAPS make sure you have installed the server root certificate 1 Make sure that you have installed the root certificate in the computer that the Administrator Utility is run ning on 2 If you access the AD Server remotely and it uses a firewall make sure port 445 Microsoft DS or port 139 NETBIOS or port 686 LDAPS is allowed 3 Make sure that your new password matches the Authentications Server s AD Server s password pol icy Domain Security Policy gt Account Policies gt Password Policy CC1000J Problem cannot log in to the CC1000u After log in to the CC1000J cannot bring up the page for the device want to access The device want to add cannot be found am not receiving email notifications of event trap situations USB Authentication Key errors The CC1000J Manager reports System settings Tomcat HTTP port 8080 conflict 1 2 Appendix A Resolution Make sure your Username and Password are correct If the login dialog box title CC 1000J Login is in a color other than white the total number of User licenses has been reached Only the Super Administra tor is allowe
90. d in setting up and operating a CC1000 system are explained in detail in the chapters of this manual The diagram and descriptions below offer a brief overview of the steps you will perform Installation Installation Overview Install Install Windows Server IIS Install Windows Updates Install Active Directory Set Up Plug In the Password Policy Authentication Key Note 1 Installation of Windows updates is optional but strongly recommended 2 It may be necessary to reboot between the procedures Install CC1000 Software Set Up the Web Server Configure the CC1000 Manager Add and Configure Users and Devices 1 Install and set up Windows Server making sure to install AD Active Directory IIS Internet Information Services and CA Certification Authority This is described in Chapter 7 Authentication Server Setup 2 Install and set up the CC1000 Server software making sure that IIS and SNMP have been properly configured and that the USB Authentication Key has been plugged into the computer running the CC1000 Server software This is described in Chapter 8 CC1000 Server Setup 74 3 Chapter 6 CC1000 Installation Overview Launch the CC1000 Log Server Configuration of the Log Server must be performed the first time that the program is launched This is described in Chapter 9 The Log Server Note Ifthe Log Server is installed on the same machine as the CC1000 Manager you don t have to
91. d to log in at this point You must wait until a license becomes available i e another users logs out before you can log in Check with your CC1000J administrator to find out whether you are authorized to access that device Make sure that CC Management has been enabled and specified correctly in the device s ANMS settings 1 Check that the email server settings have been speci fied correctly in the CC 1000 Manager Check that the email address specified in the related device s settings has been set correctly Check that the event trap settings for the related device has been specified correctly Stop the CC1000J Manager unplug the key replug the key restart CC1000J Manager Tomcat did not finish loading 1 Wait a few moments and try again 2 Try using a different port for Tomcat 207 CC1000 User Manual 208 Appendix B Authentication Key Utility Overview The Authentication Key Utility CCAuthKeyStatus exe is a program for accessing and updating the information and data contained in the CC1000 Authentication Key CCAuthKeyStatus exe can be found on the CD that comes with the CC1000 package This file should be copied to a convenient location on your computer Note CCAuthKeyStatus exe only runs under Windows When you run the program a screen similar to the one below appears A CC Auth Key Status Utility 5 x Key status Key found Activated y r Key Informat
92. dick Yes you acknowledge this risk Do you want to install this certificate Sa ea Click Yes 201 CC1000 User Manual 5 Next click Finish to complete the installation then click OK to close the dialog box Certificate Trusted The certificate is now trusted Security Alert x i Infomation you exchange with this site cannot be viewed or KY changed by others However there is a problem with the site s security certificate Y The security certificate is from a trusted certifying authority Y The security certificate date is valid A a match the name e Do you want to proceed te ven contea When you click View Certificate you can see that the red and white X logo is no longer present further indication that the certificate 1s trusted General Details Certification Path This certificate is intended for the following purpose s Ensures the identity of a remote computer Issued to Aten Issued by Aten Valid from 2003 11 26 to 2013 11 23 Install Certificate Issuer Statement 202 Troubleshooting Installation Problem While installing the CC 1000 software get the following error message The Active Directory is not installed properly Setup failed While installing the CC 1000 software get the following error message Setup failed to complete successfully Error code 0003 CC1000 Server Problem An error occurred and th
93. dows and Linux platforms that have Java 2 installed Requirements A supported Operating System Windows 2000 XP 2000 Server Server 2003 or Windows Vista Note Windows Vista is supported in CC1000J version 1 2 111 and higher Linux most versions JDK Ver 1 5 or higher All ALTUSEN ATEN IP products must be at a firmware level that contains the CC Management function and the CC Management function must be enabled Download and install the latest version of the relevant firmware from our Website if necessary CC1000J Components The CC1000J comprised of two components as shown in the table below Component Function CC1000 Administrator Utility Manages users and devices CC1000 Server Provides the user interface to the CC1000 system manages CC1000 sessions and access to devices Stores user and device information authenticates user access Stores all system logs in a searchable database Note Both components get installed to the same computer Users with proper authorization however can log into the CC1000J with a browser and download the CC1000 Administrator Utility component to any computer to administer the installation remotely CC1000 User Manual Windows Version Installation Before running the installation program make sure of that version 1 5 or higher of the JDK has been installed on your system If not you need to download and install it You can get the latest version of the JDK from the S
94. dure Note New versions of the Upgrade Program are put up on our website for download as they become available Check the website to get the most up to date version 76 Chapter 7 Authentication Server Setup Overview The Authentication Server component provides User and Device authentication services for the CC1000 Since it utilizes Windows 2000 Server or Windows Server 2003 s Active Directory and Certification Authority services this chapter takes you through configuring these services to work with the CC1000 system Note Since Active Directory Service is based on the Domain Name System DNS the DNS service must be installed on your Windows 2000 Server or Windows Server 2003 DNS is a component of Network services When Setup brings up the Network services dialog box during your installation of Windows 2000 Server or Windows Server 2003 be sure to enable Domain Name System put a check mark in its checkbox Configure Active Directory Windows 2000 Server After you have installed Windows 2000 server refer to the Microsoft documentation for this product for proper installation make sure that the network adapter is working correctly Open Control Panel Network and Dial up Connections If Local Area Connection appears in the window and the status is enabled the network is working correctly If not check if the network adapter appears under the Device Manager If the network adapter doesn t show up there it me
95. e 5N0116 IP 10 0 13 201 is online 00040 2006 07 14 10 34 09 Device type SNO116 IP 10 0 13 201 is offline 00041 2006 07 14 10 34 10 Device type SNO116 IP 10 0 13 201 is online 00042 2006 07 14 10 34 39 Device type SNO116 IP 10 0 13 198 is online 00043 2006 07 14 10 34 57 Device type KN9116 IP 10 0 13 198 is online 00044 2006 07 14 10 35 11 Device type SNO116 IP 10 0 13 198 is offline 00045 2006 07 14 13 43 27 Device type KN9116 IP 10 0 13 198 is online Settings Reset Clear Security Key FM Upgrade About Exit Messages concerning events that take place on the CC1000 appear in the Events panel The functions of the buttons at the bottom of the screen are explained in the sections that follow Note The Log Server button only appears when the Log Server is installed on the same PC that the CC1000 Manager is installed on 131 CC1000 User Manual Button Functions An overview of the button functions is given in the table below Button Log Server Settings Reset Clear Security Key F W Upgrade 132 Function The Log Server button brings up the Log Server dialog box See page 127 for details The Settings button brings up a dialog box that lets you set configuration values for the CC1000 system See page 133 for details The Reset button stops the program and then restarts it saving you the trouble of having to close
96. e CC1000 Manager no longer seems to be providing authenticaton services am not receiving email notifications of event trap situations Appendix A Resolution The Active Directory may not be installed yet Finish installing the CC 1000 software install the Active Directory then run CC1KSetup exe to successfully complete the CC1000 software installation Finish installing the CC 1000 software then run CC1KsSetup exe to successfully complete the CC 1000 software installation Resolution A USB Authentication Key error occurred This happens if an illegal operation is performed or the CC 1000 Manager ends abnormally When this happens the key automatically locks for about 10 minutes You can wait until the key automatically unlocks itself or else you can unlock it by simply unplugging and replugging it 1 Check that the email server settings have been spec ified correctly in the CC 1000 Manager 2 Check that the email address specified in the related device s settings has been set correctly 3 Check that the event trap settings for the related device has been specified correctly 203 CC1000 User Manual CC1000 Browser Operation Problem key in the IP address for the CC1000 Website but can t bring up the CC 1000 login page cannot log in to the CC1000 When try to log in get the following message Login failed You are attempting to log in from a computer that already has a browse
97. e Nodes by browsing Browsing is the most convenient way to add devices since most of the device information is automatically inserted rather than having to be keyed in Note Devices to be added by browsing must be powered on and have CC management enabled and configured in their settings To add a device node by browsing do the following 1 Right click on the folder node that you want to add the new device node to 2 Inthe popup menu that appears select New Browse 151 CC1000 User Manual 3 In the Browse unregistered device dialog box that appears select the device you want to add from the Found device list then click OK Browse Unregistered Devices ee Ioj x Found devices Device information Mame g 2116 Model name g 2116 MAC address 001074328007 4 In the dialog box that appears the Model Name and MAC address fields are already filled in 5 Give the device a more descriptive name and fill in the Description field if you like 6 Enter an email address for the person that the device will send messages to when important events such as SNMP traps occur on it in the Notify email field Note 1 This step is optional 2 You can use the Browse button to select the address from a list of users rather than inputting the address manually See Email page 158 for details 152 Chapter 11 The Administrator Utility 7 Specify the maximum number of simultaneous connections to
98. e base DN entry 4 Choose whether to enable or disable the Replace base DN entry By default the Replace base DN checkbox is enabled That means that the import file s DN configuration data the entries in the text box to its right will be replaced by the LDAP DN configuration If you are importing a file that was not created by exporting it from this Administrator Utility running on this computer you must key in this computer s DN configuration in the text box Ifthe Replace base DN checkbox is not enabled only the data in the import file that matches the CC Authentication Server DN will be imported 5 Click Start A cautionary message appears A When you import a previousty exported configuration file the system s status is restored to what it was at the time that the imported file was created All changes since that time will be lost Do you wish to continue 6 Click OK to import the configuration file s information click Cancel to abort the operation After the file is successfully imported a message appears on screen to inform you of the fact 59 CC1000 User Manual This Page Intentionally Left Blank 60 Chapter 5 CC1000J Browser Operation Devices on a CC1000J installation are accessed from a browser based GUI Only a single login to the CC1000J Server is required to access any of them An expandable tree view lets you locate and access any device on the entire installation no mat
99. e most up to date version Chapter 3 The CC1000J Manager Overview The CC1000J Manager works in tandem with the Administrator Utility and the CC1000J configuration parameters are set here To run the program make sure that the USB authentication key is attached then do the following Ona Windows system Open the Start menu navigate to the CC1000Java entry Programs CC1000Java and select CC1000JManager ES Windows Catalog Y Windows Update A 7 Administrative Tools gt 7 Altusenvuc A Documents a fi CC1000Java J Bi AdminUtility Settings aenting Uninstall CC1000Java Search gt Run Fe i y Y Help and Support Log Off Administrator 4 Windows Server 2003 Enterprise Edition 0 Shut Down A Y ica Ph la Pa s 1 Ona Linux system open a terminal session go to the directory that CC1000J is installed on and run the CC1000J Manager shell file CC1000JManager CC1000 User Manual The First Time The first time the CC1000J Manager comes up a screen like the one below appears See ns Hesel Cea ama Exil This screen appears with this message because the configuration parameters haven t been set yet After a brief pause the program automatically brings up the Settings dialog box where you specify the configuration parameters Chapter 3 The CC1000J Manager Once the settings have been properly configured see page 18 for deta
100. eate a group do the following 1 Expand the CC 000J Users Groups folder 2 Right click on the Groups 3 In the pop up menu that appears choose New Y CC10003 Administrator Utility File Y 001000 Devices 3 Canada Y Taiwan Y Taipei KN2116 03 gl pe LP6324 PN9108 01 oe 5N0116 3 Taizhong 9 Y CC1000J Users Groups D Groug 11 jie 4 In the Create Group dialog box that appears enter a group name and description then click OK Create Group 1 X Group name Techdoc 01 Description Primary Techdoc Team 42 Chapter 4 The CC1000J Administrator Utility 5 The new group is added to the Groups folder A Administrator Utility Au File e Y cc1000 Devices CC1000J Users Groups ii a Groups E o A Users k Deleting Groups To delete a group do the following 1 Navigate to the Groups folder CC1000J Users Groups gt Groups and right click on the Group s name 2 Click Delete Group Properties User accounts and permissions are managed through the Group Properties screen See Group Properties Configuration page 52 for details 43 CC1000 User Manual Device Properties Configuration User access and permissions for particular devices are configured through the device s Device Properties screen To bring up a device s screen navigate to the folder that the device resides in and click on its name A screen similar to the
101. eated in its device folder A A Utility Auth Server IF File o yy CC1000J Devices S Canada SI Taiwan Y Taipei E Taipei PON 01 US Taizhong R gt EY cc1000J UsersiGroups Note When you create the device its Properties screen appears Ignore this for the time being A complete discussion of how to configure the screen entries is given on page 44 29 CC1000 User Manual Adding Devices by browsing Browsing is the most convenient way to add devices since most of the device information is automatically inserted rather than having to be keyed in Note Devices to be added by browsing must be powered on and have CC management enabled and configured in their settings To add a device by browsing do the following 1 Right click on the folder that you want to add the new device to 2 In the popup menu that appears select New Browse 0010003 Administrator Utility Auth Server 1P 10 0 File 9 yy CC1000J Devices i Canada yy Taiwan o EY co1000 Usersi 3 In the Browse Unregistered Devices dialog box that appears select the device you want to add from the Found devices list then click OK Browse Unregistered Devices x Found devices Device information Name KN2116 Model name KN2116 MAC address 001074328007 30 Chapter 4 The CC1000J Administrator Utility 4 In the dialog box that appears the Name and MAC address fi
102. elds are already filled in xi Select model Name KN2116 03 Description Third KN2116 in Taipei MAC address 001074328007 Notify email jadmin techdoc com Browse Maximum connections 1 ol Display IP address v a ms Give the device a more descriptive name and fill in the Description field if you like Enter an email address for the person that the device will send messages to when important events such as SNMP traps occur on it in the Notify email field Note 1 This step is optional 2 You can use the Browse button to select the address from a list of users rather than inputting the address manually Specify the maximum number of simultaneous connections to the device that you want CC1000J to allow Note If the number specified here is greater than number of connections allowed by the device itself the number allowed by the device takes precedence over this number More connections than the ones allowed by the device will not be accepted Choose whether to display the device s name or IP address under the Operation Notes in the main panel when users log into the CC1000J via their browsers 31 CC1000 User Manual 9 Click OK to finish up The device is added to the folder E CC1000 Administrator Utility Auth Ser File 9 SI 201000 Devices i Canada Y Taiwan yy Taipei a E PON 01 K 3 Taizhong gt Y c
103. elected Component s Install all of CC1000 components into this computer InstallShield lt Back Cancel 9 Select Install All Components then click Next 10 In the screen that comes up accept the default choice for the location of the program icons or choose another location then click Next to complete this stage of the CC1000 Server software installation CC1000 Setup Select Program Folder Please select a program folder Setup will add program icons to the Program Folder listed below You may type a new folder name or select one from the existing folders list Click Next to continue InstallShield lt Back Cancel 110 Chapter 8 CC 1000 Server Setup Certificate Import After the previous stage of the software installation ends the Certificate Import Wizard appears Certificate Import Wizard x Welcome to the Certificate Import Wizard This wizard helps you copy certificates certificate trust lists and certificate revocation lists from your disk to a certificate store A certificate which is issued by a certification authority is a confirmation of your identity and contains information used to protect data or to establish secure network connections certificate store is the system area where certificates are kept To continue click Next 1 Click Next to continue The following dialog box appears Certificate Import Wizard x
104. enced options Coment 100 Chapter 7 Authentication Server Setup 4 Select Enterprise Root CA then Click Next The CA Identifying Information dialog box appears Windows Components Wizard CA Identifying Information Enter information bo identify this CA CA name wane asec k C1 O00 corr Organization YT Inc Organizational ymit Hat City Richmond State or provinca Country region cA p E mail CA desonption alid for jo Feas Espies 7 27 2015 5 10 FM Cancel 5 Key in the full computer name in the CA name field Important You must use the server s full computer name in this field See Getting the Full Computer Name page 195 for details Enter whatever suits your requirements for the validity period then click Next The following dialog box appears Windows Components eN Data Storage Location Specify the storage location for the configuration data database and log TT Store configuration information in a shared folder Shared folder qu _ D Presente evicting certificate database Browse 4 Back Cancel continues on next page 101 CC1000 User Manual 6 Keep the defaults for Certificate Database settings click Next and follow the instructions to complete the installation Note At this time you may be asked to temporarily stop the Internet Information Services and insert the Windows 2000 Se
105. er Profiles Advanced Windows uses the following information to identify your computer on the network Full computer name Domain To rename this computer of join a doren cla Properties Note The identification of the computer cannot be changed because The computer ls a domain controller The Certification Authority Service is installed on this computer Cancel For Windows Server 2003 1 In the Control Panel Double click System 2 Click the Computer Name tab In the screen that appears the full computer name is displayed in the Full computer name field System Properties fis E Re 71 xi Advanced l Automatic Updates Remote General Computer Name Hardware pa a Windows uses the following information to identify vour computer a on the network Computer description For example IIS Production Server or Accounting Server Full computer name Domain la rename this computer or pom a domain click Change Change Note The identification of the computer cannot be changed because The Certification Authority Service ts installed on this computer Cancel Arr 195 CC1000 User Manual USB Authentication Key Bracket Installation For security purposes the USB Authentication Key can be installed inside the case The key can either connect to an external USB port or if your computer has an internal USB connector on the mainboard you can connect to the internal port
106. er in the list and thereby increase its priority Note Devices for which there is only one entry or that are accessed privately are always enabled They do not need to be prioritized 174 Chapter 11 The Administrator Utility Export Import Configurations The Administrator Utility can export CC1000 user and device configurations contained in Active Directory to a file It can also import CC1000 user and device configurations from previously generated configuration files and incorporate the data into Active Directory Exporting Configurations To export configurations to a file do the following 1 From the CC1000 Administration Utility File menu choose Export CC1000 Administrator Utility Auth Server 1P 10 0 13 180 7 loj x S i CC1000 UsersiGroups EEN Groups Marcom Techdoc File name CCI Kdata LDIF Browse Progress ca 2 Key ina filename for the output configuration file then click Start The configurations are exported to the specified file Note By default the file is saved in the CC KSoftware CC1 KApp folder but you can key in or browse to a different folder 175 CC1000 User Manual Importing Configurations To import configurations from a file do the following 1 From the CC1000 Administration Utility File menu choose Import CC1000 Administrator Utility Auth Server 1P 10 0 13 180 Ey CC1000 UsersAGroups c i Groups Marcom Techdoc EL Users
107. er s email address If the email address is entered here it will show up in a device s Notify email list See Adding Device Nodes Manually page 149 Selecting this sets password as the user s password You must set the password unless you select Use password as default password Note The password must match the Authentication Server s password policy see Password Setup page 93 To be sure there is no mistake in the password you are asked to enter it again The two entries must exactly match Continues on next page 158 Chapter 11 The Administrator Utility Continued from previous page Field Description User status There are three categories Super Administrator Administrator and User see page 161 for details There is no limitation on the number of accounts that can be created in each category Note 1 The Super Administrator is not allowed to access devices from a browser login to the CC 1000 2 lf the User status you want to choose is already selected click to select it again to bring up the User Type Options dialog box Session timeout 1 If there is no online device connected to the CC1000 and there is no operator input for the amount of time specified here the CC 1000 session is ended The Super Administrator timeout interval is from 1 1440 minutes default is 3 minutes The timeout interval for Administrators and Users can either be 1 1440 minutes or no timeout default i
108. ername and password cannot log in T 2 3 Resolution Make sure that the username has not been changed or deleted Make sure that the password has not been reset Do not use third party LDAP tools to add or change CC1000 configuration data in AD 205 CC1000 User Manual CC1000 Control Center Over the NET Problem cannot log in to the CC1000 Control Center Over the NET with my CC1000 username and password cannot log in to the Authentication Server with the CC1000 Control Center Over the NET even though enter the correct Username and Password The device want to add cannot be found The Administrator Utility that downloaded could not connect to the CC 1000 Server could not reset change a password using the Administrator Utility 206 Resolution You must log in with your domain administrator s username and password as set in the Active Directory If your CC 1000 username and password is different from this then you will not be able to log in to the CC 1000 Control Center Over the NET with it If Use secure connection is enabled the Authentication Server s root certificate must be installed Make sure that the root certificate has been properly installed Install the Authentication Server root certificate if necessary 1 Make sure the CC1000 Manager is running and all services have started successfully 2 Make sure that CC Management has been enabled and specified corre
109. ertificate import 111 installation 107 CC1000J Components 5 Linux Installation 11 Requirements 5 uninstalling 13 upgrading 14 User Management 21 Windows Installation 6 CC1000J Administrator Utility Getting Started 23 Logging In 24 CC1000J Manager Configuration 18 Finishing Up 22 First Time 16 Log Server settings 20 Manager Tab 18 Overview 15 Proxy settings 19 SNMP server settings 20 System Tab 20 View Licenses Tab 22 Certificate Import 111 Certification Authority Installation Windows 2000 Server 100 Windows Server 2003 102 Configurations 223 CC1000 User Manual Export Import 175 exporting 57 175 Importing 176 importing 58 Configure Active Directory Windows 2000 Server 77 Windows Server 2003 85 Convert 51 171 Creating Groups 42 164 D Deleting devices 34 155 Groups 43 165 Users 41 163 Device Assignment 170 Button Functions 171 panel button functions 51 Panel Headings 170 panel headings 51 Device conflict 56 Device Folders adding 147 Adding devices 27 creating 25 Nesting 26 Properties 26 Device Info 68 187 Device Management 25 147 Device nodes adding manually 149 Device priority 56 174 Device Properties 34 Device Properties Configuration 44 Devices adding 27 148 adding by browsing 30 151 Adding generic 32 154 224 Adding manually 27 149 adding to groups 54 168 Adding to users 49 Adding users groups 45 deleting 34
110. erything is working correctly follow the steps described below to configure Active Directory 1 If the Manage Your Server window is available select Add or remove a role then click Next The Configure Your Server Wizard appears Configure Your Server Wizard NE x Server Role Ei You cen set up this server bo perform one or more specfic roles IF you want bo add more than ane sole to this server you can rum this wizard agan Select aros IF thee role has not ben dded you con add E JF it hag olkody Geer added you can remove it IF the role you want bo add or remove is rot listed open Add or Remon Programs Server Role Domain Controller Active File server Directory Print server Ho application server 115 ASP MET Meo Damasin controllers shore directory dats Mal server POs SMTP hic and Manage user logon processes ard Terminal server he drectory searches Remote access VPN server Mo Domain Controler Active Director alo Besd show domain controllers DNS serwer Mo DHCP perver Pla Streaming media server Ao WINS saryat Mo Buck MES Cancel Note Ifthe Manage Your Server window is not available open Control Panel gt Administrative Tools gt Configure Your Server Wizard continues on next page 85 CC1000 User Manual 2 Select Domain Controller Active Directory and click Next The Active Directory Installation Wizard appears Active Directory Installation Wizard E xj
111. es 149 329 Dimensions 1 209 x 2 14 x 4 65 cm CC1000 Capable ALTUSEN ATEN IP Products The following is a list of ALTUSEN ATEN IP products that are capable of being managed in a CC1000 Control Center Over the NET installation CN5660 CN6000 IP8000 KHI5161 KL8108 KL9116 KN2108 KN2116 KN9108 KN9116 PN9108 SNO108 SNO116 198 Appendix A Running CC1000 on 64 bit Windows To run CC1000 on a 64 bit Windows system you must run ASP NET 2 0 in 32 bit mode not 64 bit mode Note You must use a CC1000 version that is higher than V1 0 094 CC1000 V1 0 094 and lower do not run properly on 64 bit Windows To run ASP NET 2 0 in 32 bit mode follow these steps l Ze Click Start gt Run Key in cmd then click OK Key in the following command all on one line to enable 32 b1t mode cscript SSYSTEMDRIVES inetpubladminscriptsladsutil vbs SET W3SVC AppPools Enable32bitApponWin64 1 Note There is a space between adsutil vbs and SET Key in the following command all on one line to install the 32 bit version of ASP NET 2 0 and to install the script maps at the IIS root and under SSYSTEMROOT S Microsoft NET Framework v2 0 40607 aspnet_ regiis exe i Note There is no space between aspnet_ and regiis exe Make sure that the status of ASP NET version 2 0 40607 32 bit is set to Allowed in the Web service extension list in Internet Information Services Manager Note The build version of
112. figuration by selecting it in the tree list 34 Chapter 4 The CC1000J Administrator Utility User Management The CC1000J Administrator Utility allows administrators to add delete and modify users and user attributes Note The Administrator Utility comes with a pre installed superadmin super administrator account The Username for this account is superadmin the password is CC KPassword The password is case sensitive For security purposes we strongly recommend changing the password to something unique Adding Users To add a user do the following 1 Expand the CC 000J Users Groups folder 2 Right click on the Users folder In the pop up menu that appears click New CC1000J Administrator Utility Auth Server IP 10 File Y 001000 Devices KN2116 03 ho fhe la z T Uas PN9108 01 3 Taizhong e cc1000 UsersiGroups 3 Groups en he 35 CC1000 User Manual 3 The Create User dialog box appears x Username Browse Description Email Password User status Use password as default C Super administrator Password O Administrator Confirm password User Session timeout 5 No timeout Timeout after 3 minute s Unexpected disconnection timeout after 2 minute s Enter the required information in the appropriate fields A description of each of the items is given in the table below Field Description Username Enter a use
113. g box that comes up select the Directory Security tab A screen similar to the one on page 116 appears In the Anonymous access and authentication control panel click Edit Default Web Site Properties xi Web Site Operators Performance ISAPI Filters Home Directory Documents Director Sectiritn Ane HIP m Sec Ups L Authentication Methods Teia rn l aa sions Anonymous access No user name password required to access this resource Account used for anonymous access Edit Authenticated access required when anonymous access is disabled or access is restricted using NTFS access control lists Basic authentication password is sent in clear text Select a default domain I Digest authentication for Windows domain servers JV Integrated Windows authentication For the following authentication methods user name and password are Edit Cancel Help OK Cancel continues on next page Chapter 8 CC 1000 Server Setup 5 Make sure there is a check in the check box for Anonymous access then click Edit Default Web Site Properties ax Web Site Operators Performance ISAPI Filters Home Directory Documents Director Seearita UTTO andan Pintar Cones ACDMET Canine Du sions Authentication Methods x Anc v Anonymous access i No user name password required to access this resource Anonymo
114. have corected the pionen parem the OMS ciel taal teat Bere Cancel 11 Select Install and configure DNS server on this computer etc then click Next The Permissions dialog box comes up Active Directory Installation Wizard 3 a S pe E xl Permissions Fai Select default permissions for user and group objects 2 Some server programs such as Windows NT Remote Access Service read information stored on domain controllers Amon Nena A Po A AA A A IR ce this option if you nun server programs on pre indows 2000 server in systems or on Windows 2000 or Windows Server 2003 operating systems that are members of pre Windows 2000 domains A Anonymous users can tead information on this domain Select this option if you run server programs only on Windows 2000 or windows Server 2003 operating systems that are members of Active Directory domaine Only authenticated users can read information on this domain Depending on your installation you can choose either option Unless you have a specific reason to change the setting however we recommend that you select Permissions compatible only with Windows 2000 or Windows 2003 operating systems then click Next to continue continues on next page 90 Chapter 7 Authentication Server Setup The Directory Service Restore Mode Administrator Password dialog box comes up Activo Directory Installation Wizard ieee Director Geico Aenima Modo Adrminttratos Farru Th
115. he CA Type then click Next The CA Identifying Information dialog box appears Windows Components Wizard x CA Identifying Information Small gamma Enter information to identify this CA Ps Distinguished name suffix DC TechDoc DC com DC tw Preview of distinguished name CN tusi m TechDoc com tw DC TechDoc DC com D C tw Walidity period Expiration date fro Years y 11 28 2015 4 10 PM coca to 5 Key in the full computer name in the Common name for this CA field Important You must use the server s full computer name in the Common name for this CA field See Getting the Full Computer Name page 193 for details Enter whatever suits your requirements for the validity period then click Next continues on next page 103 CC1000 User Manual 6 In the Certificate Database Settings dialog box that appears keep the default settings for the database and log locations Windows Components Wizard x Certificate Database Settings ee Enter locations for the certificate database database log and configuration Py information Certificate database D WINDOWS system32 CertLoc Browse Certificate database log D WINDOWS system32 CertLog Browse Store configuration information in a shared folder Shared folder P Preserve existing certificate database lt Back Cancel Help Simply click Next and follow the instructions to complete the installation
116. he CC1000 Server is behind a firewall the proxy ports set here must be allowed by the firewall 2 If you use this feature when you Save the settings the program checks the Secondary network adapter and Proxy settings fields If there is an error it brings the cursor to the invalid field and asks you to re enter the information for that field Web Site Settings This field specifies the location of the CC1000 s web page directory See Important page 110 and Note page 115 for details 135 CC1000 User Manual Log Server Settings There are four settings for this section as described in the table below Field Use local integrated log server Check and notify log server status IP Port Purpose This field lets you specify whether you are using a local or remote log server A local log server refers to one that is installed on the same computer that the CC1000 Manager is installed on A remote log server is one that is installed on an independent computer Note If you enable Use local integrated log server the IP and Port fields are disabled since there is no need to set them If this function is enabled and the connection to the log server is lost you are notified about the status in the Events panel You will see either of the following messages 1 No records were lost Failed to connect with Log Server IP xxxxx No logs were lost Will try again in 1 minute 2 Some records were lost
117. he System Info link a screen similar to the following appears Control Center over the NET ALTUSCN Dine System ind ete into Sesat n Info Log Abda COMM Device Tree Welcome frosty Root I Canada system Information ap Program Information Mam Control Canter aver the NET Model CCL000 License users unlimited connections Server Information Domain sm 10 0 13 180 TP address 10 0 13 160 Web server Microsoft 0 0 HI TFS statue 0n DHS SMUE n Coprright 2004 2005 ATEN International Co lol Alright reserved System Info shows system information such as the number of Licenses and Connections available to the system This information is set and stored in the USB Authentication Key 186 Chapter 12 Browser Operation Device Info When the Super Administrator or Administrator clicks the Device Info link a screen similar to the following appears Control Center over the NET ALTUSCN Dikan System indo Dewce into Session Indo Log Abost a 61000 Device Tree Welcome irocty Root EM Canada Online Device Information of Coprright dr 2004 2006 ATEN International Co Utd Al rights reserved The screen provides information regarding all online devices The Object ID entry represents the SNMP related OID Object Identifier If the device doesn t support SNMP N A will appear in this field UP Time refers to the amount of time the device has been powe
118. ht a device in the list and click Disable to disable user access to the device This function only works for devices that are accessed privately Allows the administrator to add devices to the list of devices that a user can access Highlight a device and click Remove to remove a device from the list This function cannot be used to remove a device that the user accesses through a group This function converts a device that is accessed through a group to device that is personal to the user To convert a group device in the list to a personal one select it and click Convert The status of the new personal device is Enabled the status of the old group device is now Disabled If the private device is removed however the status of the original group device automatically reverts to being Enabled Note A personal device cannot be converted to a group device To view and change device properties select the device and click Properties Note Properties of devices belonging to groups can only be viewed not changed 171 CC1000 User Manual Device Access Rights Before a user can access a device access rights to the device must first be granted To grant a user access rights to a device do the following 1 Open the User Properties dialog box see page 163 2 In the Devices panel click Add 3 When the Select Device dialog box appears Select the device that you want to grant the user access to then click OK Select
119. i pasword e urad when pow chert lba computer in Dirazia Sakar Rasma hinds oe omar Hes pappia WORE Bo apek bo thes Adri cli acgpuni urad this eee bb abaid in Deco Panico Alsons oda The oilte mode dar bal abtout iv dihererd from to doman Airiai accoun Tha parido Ror ha ecc might ba different co ba cure bo ramambal bolt Arico Pida Eeer TEF Contin pariat For mone inicr abii Dichon Sanear Plechore Plede gtn f 12 Key in a password confirm it then click Next A Summary screen appears allowing you to review and confirm the options you selected a biar Porra lr brm alalim Viel a O Lied EA Paria al oe a opt ee ee oa a bee i ee er ee sa De fas ri coed es we ree al ol haeam ees k Po reen dian raare ST EA T hy ip phem Lha rean ra Bh reres ransk Tha Bil BOS rara el ho heres p DEIA EE he DES panic el Ls nie ered cad cri tee OU Then DAA bee A o ee al OA A dl E pora DAA hana Ta charge eh pl o tec Tce rra eg DEA Hu canal continues on next page 91 CC1000 User Manual 13 If you want to make any changes click Back If the information is satisfactory click Next The wizard now configures Active Directory Active Directory Installation Wizard The zar amp configurma chre Drecios This process can lake several minutes or considerably longe depending on the options pou heave selected Sarlo When configuration has completed the following screen appears
120. id ae ee ti aed 190 LOGOUT 4642 65 seer A eke OR ales eaten ee 190 Appendix A Technical Information Sally INSIMUCHONS e nera 191 CCC hala bt aces ate ee a a ad eee a ee 191 Rack MOUNINO 5 2 ssi einen id ee 193 Getting the Full Computer Name 0 000 cece eee 194 For Windows 2000 Server 0 000 cee eee eee 194 For Windows Server 2003 0 0 0 ccc eee eee 194 USB Authentication Key Bracket Installation 195 External Cable Installati0N o ooooooooooo 195 Internal Cable Installation 0 0 0 0 ee 196 Internal Cable Pin Assignments 000 00 cece eee eee 196 USB Authentication Key Specifications o ooooo 197 CC1000 Capable ALTUSEN ATEN IP Products 197 Running CC1000 on 64 bit Windows 220222000 198 Trusted CeminCales epi Bo hwo od hele x tans ws 199 ET OV erase ana esge eat a te ape ete E a T A eee 199 Installing the Certificate o oooooooooooorrooooo 200 Certificate Trusted r vis uae A eee 201 TOWDIESHOOHAG Sita ki deve take eee Rite eka ei E 202 HAS tAMIAUOMNS rees 2 4 a E a eb Gans Bee ae een ahaa ae 202 CC 1000 SENE rr S Saree 202 CC1000 Browser Operation ooocoooooonoooo ooo 203 CC1000 Authentication Server 0 ce eee 204 CC1000 Control Center Over the NET 005 205 CETOOOJ remeg eE EEE esi E oe Bl cae etd ee ee ee 206 CC1000 User Manual
121. ify ihe role you want this server to have Do pou art this server to bacana a domain combmoller for a naws domain or ari additonal domain controller for an esting domain Domain controller fora ness damain Select this option to create a new child domain new demain bee or new forest This arwar will becomes thee first domain controller in thee nan domain 7 Additional domain controlle for an existing domain Caution Preceecing wih this option wil delete al local secounte on the serwer lt Back Cancel Chapter 7 Authentication Server Setup Continues on next page 2 Select Domain Controller For A New Domain then click Next The following dialog box comes up Active Directory Installation izard Create Tree or Child Domain Tou can oeae a ner domain tree or a new child domam Da mi Wani to cesis s new domain fee ora new child damarin an essing domain ires Deale a res domain ree If pou dont mant the mew domain to be a child ol an exiting domain select this Option Thit al create a neh domain tree atis separate from any exiting fees TOU can then GaSe 16 pace the new domain tes in an eriting forest OF Create a Hew hares C Create a ren ohid doman in an osisting doman troo f uou wart fhe new domain to be a child of an ewietng domain select this option For example you could create a new deman named headquarters mecompany oom asa child domain of he domain PTS Sr hel canm 3 Select Create
122. ight click on the username 2 When the pop up menu appears click Delete Managing Users User accounts are managed through the User Properties dialog box 1 Navigate to the Users folder CC1000 Users Groups Users and right click on the name of the user whose properties you want to access 2 In the menu that pops up click Properties The User Properties dialog box appears alo Veer slatus C Super adininietr ates C Adprinatr ses 5 Um Secci n tenecd C Notimeot Timeout after entes Unexpected diconrect n reas aha 12 rerdels With the exception of Reset password discussed below the upper dialog box fields are similar to the ones discussed under the Adding Users section page 157 The Member of panel lets you add the user to a group See Group Management page 164 for details The Devices panel lets you assign devices to the user See Device Assignment page 170 for details 3 To modify a user s properties make the desired changes in each of the panels When all changes have been made Click OK 163 CC1000 User Manual Resetting Passwords To 1 reset a user s password do the following In the User Properties dialog box check Reset password This enables the Password fields Enter the new password then enter 1t again to confirm it Refer back to Adding Users page 157 for password information if necessary Click OK to finish Group Management Group
123. ils and you go back to the CC1000J Manager screen it now looks similar to this Li aldix Events 00001 20070418 1535 10 Same settings are imali Please configure the settings correctly before commtinuing 00002 20070418 16 48 18 OC1000J server settings have been changed 00003 2007 04 10 16 40 19 System settings Tomcat HTTP port 0000 conflict 00004 20070418 164923 OC1000 server settings have been changed 00005 20070418 1649 24 Starting the CC Asthenticalion Server and Tomcat DONOS 700704118 164943 Starting CC1000 J services 00007 20070418 164945 Connected to the CC Authentication Server 0P 10 0 100 193 00008 20070418 1649 55 OC1000J Authentication Key is ready FW Version 1 1 10 000 20070418 1649 57 Failed to get the SMTP server s IP address Server 10 0 100 794 0001 20070418 164957 OC1000J services have been started 100011 20070010 16 49 59 Device type KN2116 IP 10 0 100 40 ts onine Settings Reset Clear About Exa Messages concerning events that take place on the CC1000J appear in the Events panel The Settings button brings up a dialog box that lets you set configuration values for the CC1000J system Details are provided in the sections that follow The Reset button stops the program and then restarts it saving you the trouble of having to close the window and go through the execution procedure again The Clear button erases the contents of the Events
124. important events such as SNMP traps occur in the Notify email field Note 1 This step is optional 2 You can use the Browse button to select the address from a list of users rather than inputting the address manually See Email page 158 for details Specify the maximum number of simultaneous connections to the device that you want CC1000 to allow Note 1 A number of 0 zero means unlimited connections up to the maximum number of connections set in the device itself 2 If the number specified here 1s greater than number of connections allowed by the device itself the number allowed by the device takes precedence over this number More connections than the ones allowed by the device will not be accepted Select whether the device name or IP address appears when users log in via their browsers As a security precaution selecting the device s name keeps its IP address from being visible under the Operation Notes in the browser screen s main panel x select model Pustos Name JPNSIOBTT Description First PNSTOBin Tororo MAC address MEE Notify email Jadmin Techdoc com Browse Masimamn connections po Display IP address y Cancel Chapter 11 The Administrator Utility 8 Click OK The new device node is created and submitted to Active Directory 3 CC1000 Administrator Utility Auth Server IP 10 0 13 180 loj x O Devices La aly ad Sy CC1000 UsersiGroups Adding Devic
125. in the Devices panel Only the first entry of the device is enabled however Users are only able to access the device from the group that the first instance of the device is pointing to To ascertain which group a device is pointing to hover the mouse pointer over the device s name in the Devices list The balloon that appears displays which group if any the device points to as shown in the screen below m User settings m User status User name fr osty Super administrator Administrator C User Description Tech doc editor 5 rm Session timeout Email it aten com tw Timeout after minute s No timeout Password MA Unexpected disconnection timeout after 2 minute s F Use password as default password Password Confirm password m Member of Devices Up Techdoc Marcom Enabled Group EL SN0116 Enabled Group EL cneooo Disabled Group EL KN2116 Disabled Group Remove Convert Properties In order for a user to access the device the group that it points to must have first priority The group at the top of the list has the highest priority the second in the list has second priority etc To change a group s priority do the following 1 In the Member of list select the group that you want to change 2 Click Down to move it lower in the list and thereby decrease its priority click Up to move it high
126. ion FA version Ver 11 101 SAN TLYVq0w Z12VTDc m License Information Concurrent users 3 License Upgrade Save Upgrade FW Upgrade Exit Key Status Information Three sections of the screen provide information about the key s status Section Purpose Key Status Informs you whether or not the key has been found and whether or not it has been activated If the key has not been found or if it has not been activated contact your dealer Key Information Displays the key s current firmware version and serial number License Information Displays the number of concurrent users currently allowed to access the CC1000 Key Utilities The remaining two sections offer utilities that allow you to upgrade the number of user licenses License Upgrade and to upgrade the key s firmware F W Upgrade 209 CC1000 User Manual Key License Upgrade The CC1000 has a feature that allows user licenses to be added to an authentication key Although key license upgrades are usually handled by a distributor dealer there may be times when users have to perform the upgrade themselves In case of that eventuality the necessary procedures are described in this section To add licenses to a key an order is placed with an ALTUSEN sales representative specifying the number of licenses to be added Upgrades can be requested for as many keys as desired in the same order After a Key License upg
127. ivately Highlight a device in the list and click Disable to disable user access to the device This function only works for devices that are accessed privately Allows the administrator to add devices to the list of devices that a user can access Highlight a device and click Remove to remove a device from the list This function cannot be used to remove a device that the user accesses through a group This function converts a device that is accessed through a group to device that is personal to the user To convert a group device in the list to a personal one select it and click Convert The status of the new personal device is Enabled the status of the old group device is now Disabled If the private device is removed however the status of the original group device automatically reverts to being Enabled Note A personal device cannot be converted to a group device To view and change device properties select the device and click Properties or double click the device Note Properties of devices belonging to groups can only be viewed not changed 91 CC1000 User Manual Group Properties Configuration Groups are managed through their Group Properties screen To bring up the screen navigate to the Groups folder CC1000J Users Groups Groups and click on the name of the group A screen similar to the one below appears Adding Users to Groups To add a user to a group do the following 1 Navigate to the
128. izard 97 CC1000 User Manual Windows Server 2003 When you install Windows Server 2003 you have the option of installing IIS at the same time If you did not install IIS when you installed Windows Server 2003 do the following to install it now 1 Open Control Panel Add Remove Programs 2 In the left panel of the screen that appears click Add Remove Windows Components 3 In the Windows Components page select Application Server and click Details A screen similar to the one below appears Application Server xj To add or remove a component click the check box 4 shaded box means that only part of the component will be installed To see what s included in a componert click Details Subcomponents of Application Server iv fii Application Server Console come M ASP NET 0 0 MB M 8 Enable network COM access 0 0 MB O EH Enable network DTC access 0 0 MB v YY Intemet Information Services IIS 26 9 MB M E Message Queuing 6 5 MB Description Microsoft Management Console Snap in for the Application Server administrative interface Total disk space required 6 5 MB Details Space available on disk 621 7 MB bete Cancel 4 Make sure that Application Server Console and Internet Information Services IIS are enabled click to put a check in the checkbox 5 Select Internet Information Services IIS and click Details Make sure that Common Files Internet Information Services Manager and World
129. jar link 3 When the confirmation screen comes up click Save 4 In the dialog box that comes up pick a location on your computer to save the file to 5 To run the program navigate to the directory where it resides and double click the program icon See Chapter 4 The CC1000J Administrator Utility for details on using the program Note Only users who have been authorized in LDAP see LDAP page 21 will be able to log in 66 Chapter 5 CC1000J Browser Operation System Info When the Super Administrator clicks the System Info link a screen similar to the following appears Control Center over ihe NET AAA E A 3 vsbam information eta Chee iii per Be ET kiyish OD pe Loe J van unit corra Tarer ira jerar ie a ran Coe rs eee System Info shows system information such as the number of Licenses and Connections available to the system 67 CC1000 User Manual Device Info When the Super Administrator or Administrator clicks the Device Info link a screen similar to the following appears Control Center over the NET ALTUSEN B rama The screen provides information regarding all online devices The Object ID entry represents the SNMP related OID Object Identifier If the device doesn t support SNMP N A will appear in this field UP Time refers to the amount of time the device has been powered on up 68 Chapter 5 CC1000J Browser Operation Session Info
130. k Use caution when pressing the device rail release latches and sliding a device into or out of a rack the slide rails can pinch your fingers After a device is inserted into the rack carefully extend the rail into a locking position and then slide the device into the rack Do not overload the AC supply branch circuit that provides power to the rack The total rack load should not exceed 80 percent of the branch circuit rating Ensure that proper airflow is provided to devices in the rack Do not step on or stand on any device when servicing other devices in a rack 193 CC1000 User Manual Technical Support International Email Support Online Support Technical Support Troubleshooting Documentation Software Updates Telephone Support North America Email Support Online Support Technical Support Troubleshooting Documentation Software Updates Telephone Support Email your questions and concerns to support aten com 1 Online technical support is available to ALTUSEN cus tomers through our e Support Center http support aten com Online troubleshooting that describes the most com monly encountered problems and offers possible solu tions to them online documentation including electronically available manuals and the latest drivers and firmware for your product are available at our web site http www aten com 886 2 8692 6959 Email your questions and concerns to
131. launch the Log Server It will launch automatically when you launch the CC1000 Manager Launch the CC1000 Manager Configuration of the CC1000 Manager must be performed the first time that the program is launched This is described in Chapter 10 The CC1000 Manager Launch the CC1000 Administrator Utility to add and configure devices and users These procedures must be performed the first time the program is launched and whenever device or user information changes This is described in Chapter 11 The Administrator Utility Note Make sure that ANMS Authentication Network Management Service support has been properly set up in your ALTUSEN ATEN IP devices See the User Manuals for those devices for details Operation To operate the CC1000 1 Ze 3 Open your browser and key the CC1000 s IP address into the URL field Accept the certificates that appear Log in with your Username and Password This is described in Chapter 12 Browser Operation 75 CC1000 User Manual Upgrading the CC1000 If CC1000J has already been installed it is not necessary to perform a full install You can upgrade to the latest CC1000 version by running the CC1000 upgrade program CC1000SWUpegrade exe The file can be found in the CC1000 Windows Version folder on the software CD that came with your CC1000J package CC1000 Software gt CC1000 Windows Version When you run the upgrade program simply follow the Wizard to complete the proce
132. link is designated as Optional it is only available if it has been selected as an option in the user s configuration For further details regarding configuration of User Types see User Management page 157 Each link is explained in detail in the sections that follow 184 Chapter 12 Browser Operation Download Download provides a way for the Super Administrator to download the Administrator Utility executable file from the CC1000 Web Server thereby allowing the Super Administrator to manage the CC1000 from anywhere on the Internet Note The operating system that the Administrator Utility runs on must be Windows 2000 or higher To download and run the Administrator Utility do the following 1 Click the Download link The following screen appears Control Center over the NET ALTUSCN Dihin Syehemi indo ewe into Session Info Log About Logit E foot DM Canada File Download OM Taiwan Copyright 2004 2006 ATEH international Co Lod Ml rights reserved 2 Click the CC KAdmin exe link 3 When the confirmation screen comes up click Save 4 Inthe dialog box that comes up pick a location on your computer to save the file to 5 To run the program navigate to the directory where it resides and double click the program icon See Chapter 11 The Administrator Utility for details on using the program 185 CC1000 User Manual System Info When the Super Administrator clicks t
133. log files Selecting this option allows the Super Administrator to view system information such as the number of Licenses and Connections available to the system Selecting this option allows the Super Administrator to view information for all online devices on the installation Administrators can view information for the online devices that they have access rights to Selecting this option allows the Super Administrator to end Administrator and User CC1000J sessions Administrators can end User CC1000J sessions Continues on next page 39 CC1000 User Manual Continued from previous page Option Description View system log Selecting this option allows the Super Administrator or Administrator to view and query the system log files View session Selecting this option allows the Super Administrator information Administrator or User to see information regarding the sessions currently taking place online View device log Selecting this option allows the Super Administrator Administrator or User to view and query the device logs for the devices they have access rights to Note 1 View system log View session information and View device log are the defaults for the Super Administrator View device log is the default for Administrators 2 See Main Page Links page 65 for screenshots and more details regarding these selections 5 Place a check in the boxes to enable the options that you want to allow then click O
134. m Errors ASEA erver Extensions Web Site Operators Performance ISAPI Filters Home Directory D Documents When connecting to this resource the content should come fron A directory located on this computer CA share located on another computer A redirection to a URL Local Path pct KSoftwareX CC1K Web Browse Script source access Y Log visits V Read IV Index this resource FT write I Directory browsing Application Settings Application name o efault Application Remove Starting point lt Default Web Site gt Configuration Execute Permissions Scripts only m Application Protection Medium Pooled z 4 To use a folder on the local computer select A directory on this computer then click Browse to locate the folder that you want to use This must be the CC Kweb directory under the CC1000 destination folder that you specified when you installed the CC1000 program refer to page 110 if necessary Note The default directory is c CC1KSoftware CC1kWeb 5 Check Read to grant read access to the folder required 6 For Execution Permissions select Scripts Only To ensure that the program has been created check the button to the right of the Application name field If it displays Remove then the Website has been set as a program If it displays Create click Create to create the program If Inheritance overrides appears select all except the root _vti_bin folder
135. m an online upgrade follow these steps 1 Plug the authentication key into a USB port on your computer 2 Open a browser and log into the URL indicated in the email refer to page 210 with the Username and Password provided Note Accept the certificates when asked ATEN CC Authentication Key License Upgrade peeps ees Seo Submit ALLN com de ph hed by ATON inden bona Con LIA Tawan Aay arai 3 In the screen that comes up key in the order number that applies to the upgrade refer to page 210 then click Continue ATEN CC Authentication Key License Upgrade Ur himaan 216 Appendix B 4 When License Upgrade Order Information screen comes up key in the number of licenses information in the From and To fields Note 1 If necessary you can use the Windows based Key status utility CCAuthKeyStatus exe to see the current number of licenses The To field is automatically filled in when you click in it 2 Select that this is to be an Online upgrade then click Continue ATEN CC Authentication Key License Upgrade ang ete ai gt License Upgrade Order Information Coda incerta Oecer DO Lao Tha order malos dor ME ore kena Lsprada rimba of Loernaas Fes Uiprade Captor tata i i sini 5 When the CC Authentication Key License Upgrade screen comes up click Download ATEN CC Authentication Key License Upgrade gt CC Authentication Key License Upgrade by Disiributor ME
136. make sure that the CC1000J Manager is running and that its settings are correct 3 The CC1000J supports multiple logins for Administrators and Users Super Administrators are restricted to a single login Chapter 5 CC1000J Browser Operation Main Page Layout After you have successfully logged in the CC1000J Main Web Page appears l Control Center over the NET ALTUSEN Cee lindo e don BS 0 teal Leona 2510001 Drica Treo A sl O TAIAN Step 1 Step 2 Cc the dios pou waht to Bipi k Copyright i 2004 2000 ATTN interraboral Co Ltd All nights naana The CC1000J Main Page is divided into three major sections a left panel a right panel and a row of links at the top right The left panel displays a tree view of all the device folders on the installation that the user is authorized to access The Tree View is discussed in the next section The main panel provides information about the item in the Device Tree that is currently selected Clicking a link on the row at the top right brings up additional screens The number and type of links displayed are determined by the user s type Super Administrator Administrator User and the options selected when the user was created The links are discussed under Main Page Links page 65 63 CC1000 User Manual Tree View Only devices the user is authorized to access are listed in the Tree View See Adding Users Groups to Devices page
137. n the password is CC1KPassword The password is case sensitive For security purposes we strongly recommend changing the password to something unique Adding Users To add a user do the following 1 Expand the CC1000 Users Groups folder click the plus sign 2 Right click on the Users folder In the pop up menu that appears click New CC1000 Administrator Utility Auth Server 1P 10 0 13 180 a Oj x c i CC1000 Devices Dy Cananda Oy Taiwan E i CC1000 UsersiGroups Ly Groups 157 CC1000 User Manual 3 The Create User dialog box appears ioli User name Browse Description E mail Password Use password as default password Confirm pazzword Password Session timeout No timeout User status Super administrator Administrator e User Timeout after E minutefs Unexpected disconnection timeout after 2 minute s Cancel Enter the required information in the appropriate fields A description of each of the fields is given in the table below Field User name Description Browse Email Use password as default password Password Confirm password Description Enter a username here Additional user information you may wish to include The information for the User name and Description fields can be filled in automatically by clicking Browse and selecting the user from a list of users registered in AD The us
138. ngs dialog box 96 Chapter 7 Authentication Server Setup IIS Installation and Setup Windows 2000 Server By default IIS 5 0 is installed on Windows 2000 Server If your server did not install IIS do the following to install HS now 1 Open Control Panel Add Remove Programs 2 In the left panel of the screen that appears click Add Remove Windows Components 3 In the Windows Component Wizard enable Internet Information Services IIS by putting a check in its checkbox Eas Add Remove Programs y Oj x ix Currently installed programs Sort by Name M Change or BP Cc1000 Size ogaxe Al A Windows Components an You can add or remove components of Windows 2000 Add New Programs To add of remove a component click the checkbox 4 shaded box means that only part of the component will be installed To see what s included in a component click Details Components Add Remove Windows Components SP Indexing Service E Internet Information Services IIS a Management and Monitoring Tools 5 2 MB Y Message Queuing Services 2 6 MB a 25 Networkinn Services ARMA hd Description IIS services Web and FTP support along with support for FrontPage transactions ASPs database connections and receiving of posts Total disk space required 12 9 MB Detal Space available on disk 1853 6 MB psi lt Back Cancel 1 i a O OS A a E 4 Click Next then click Finish to close the w
139. nvalid field Change the entry to a valid one then click OK again A dialog box appears informing you that the CC1000J Manager must be restarted and asks 1f you want to proceed Click Yes to confirm click No to discard the changes To exit without saving any changes that you made click Cancel A dialog box appears asking you to confirm that you want to discard your changes Click Yes to confirm and exit click No to return to the Configuration dialog box After you have saved your settings you return to the CC1000J Manager main screen This time events that have taken place are listed in the main panel 22 Chapter 4 The CC1000J Administrator Utility Introduction The CC1000J Administrator Utility is a client utility that allows administrators to manage users and devices in LDAP The utility provides four management functions device management user management group management and the import export of configuration data All devices folders users and groups are managed in a tree view Specific context menus can be accessed by right clicking on each item Getting Started To start the program Under Windows open Start gt Programs gt CC1000Java AdminUtility Under Linux as root run AdminUtility from a terminal session Note If your version of Linux supports it you can run the program by clicking or double clicking the AdminUtility icon 23 CC1000 User Manual Logging In After launching CC1000J
140. olicies 3 IP Security Policies on Active Dire H A Gl 3 The default setting for the minimum password length is seven If you want to change the default length double click Minimum password length The Minimum password length Properties screen appears Minimum password length Properties d 2 x Security Policy Setting Minimum password length Password must be at least p characters Change the setting then click OK to return to the Default Domain Security Settings dialog box Note If you do change the setting we recommend that you set it to a length of four or greater This is because the minimum password length for CC1000 authentication is four and the CC1000 login password must match the password set in AD 95 CC1000 User Manual 4 In he Default Domain Security Settings dialog box double click Password must meet complexity requirements The Password must meet complexity requirements Properties screen appears 2 x Password must meet complexity requirements Propert Security Policy Setting Password must meet complexity requirements A A A C Enabled Disabled Cancel Apply 5 Click to put a check in the Define this policy setting checkbox click to select Disabled then click OK to return to the Default Domain Security Settings dialog box 6 Close the Default Domain Controller Security Setti
141. omain Controllers C ForeignSecurityPrincipals EE Users 26 objects f oor Administrator ASPNET CC1KManager f cert Publishers Pouce Users sd DnsAdmins Domain Admins f Domain Guests Domain Users Go krbtot LR DHCP Administrators feii DnsUpdateProxy Domain Computers f Domain Controllers enterprise Admins ER netshow Administrators E NetShowServices 2 Bras and I45 Servers User User User User Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group Security Group User User User User Security Group User Security Group Name me Description A Built in account For admini Account used For running Enterprise certification an Members who have admini Members who have view DNS Administrators Group DNS clients who are permi Designated administrators All workstations and serve All domain controllers in th All domain quests All domain users Designated administrators Members in this group can Built in account For quest Built in account for anony Built in account For Intern Key Distribution Center Se Members can fully adminis Windows Media services r Servers in this qroup can El 2 In the user
142. omain Name dialog box appears Active Directory Installation Wizard ees x New Domain Hame i Specify a name for the new domain Sef SE Tepes tha full ONS nama for the new domain for exemple hesdquerters sssmple microsoft com Full DES name for new domain CC1000 T2 COM lt Back Nest Cancel 7 Key in a name for the new domain in our example we used CC1000 T2 COM but you should give it a name that is meaningful for your installation then click Next The NetBIOS Domain Name dialog box comes up Active Directory Installation Wizard NetBIOS Domain Name Specity a NetBIOS name for the new domain This is the name that users of earlier versions of windows will use to identify the new domain Click Next to accept the name shown 01 type a new nams Domain N amp BIOS nams E 4 Back Cancel continues on next page 88 Chapter 7 Authentication Server Setup 8 Key ina NetBIOS domain name in our example we used CC1000 T2 but you should give it a name that is meaningful for your installation then click Next The Database and Log Folders dialog box appears Active Directory Installation Wizard Database and Log Folders Specify the folders to contam the Active Director dstsbsze snd log filez For best performance snd recoversbilty store the databaza snd the log on reparata hard F Where do you want to store the Active Directory d
143. one below appears PMO Devica Propartios Model nara P2109 Mame PH0100 01 MAC address 001074340100 Descripllone Firat PROT Matiy email airninamechder com Marimum connections 11m Display WPaddress Access fights for wears groups Cilet santings hist te MIN Disace defined sems The screen is divided into three major areas The top contains information about the device that was specified when the device was created see Adding Devices page 27 The middle panel lets you add the users and groups that will have access rights to the device The bottom panel lets you specify the access rights for each user and group 44 Chapter 4 The CC1000J Administrator Utility Adding Users Groups to Devices To add a user or group to the device s access list do the following l Za Click the Add button at the right of the middle panel In the dialog box that appears a Click one of the radio buttons to select whether you are adding a User or a Group b Select the User or Group to be added c Click OK e User 2 fernando 2 frosty 2 jacob gt jessica 2 kelly s 2 1 xl Group User name kelly Cancel 3 The permissions dialog box comes up Set the permissions according to the information contained in the device s User Manual then click OK iher Groups 19108 Access Configuration E Liber ind anna ser nanan k y Type Lise ACCESS his U
144. or create dertvative works based on the Product or remove any proprietary notices or labels an the Product including copyright trademaik or patent pending notices ou may not sublicense the Product of otherwise allow others to use the Product censed to you Ej la a 4gree C Dont gree Cancel Heb About 6 Read and agree to the License Agreement enable the J Agree radio button 7 Click Next to continue The Firmware Upgrade Utility screen appears with the CC1000 displayed in the Device List Firmware Upgrade Utility E xl If Check Firmware Version is checked the utility compares the device s firmware level with the upgrade files If the device s version is newer the utility lets you decide whether to continue or not If it is not checked the utility performs the upgrade directly Click Next to begin kasat Slatus Messages gt Loading amp testing Hes gt Loading amp testing Hes OK gt Seaiching for devices Device Description IV Check Firmware Yeision Progress Heb View Log lt Back 139 CC1000 User Manual 8 Click Next to start the upgrade As the Upgrade proceeds status messages appear in the Status Messages panel and the progress toward completion is Shown on the Progress bar After the upgrade has completed a screen appears to inform you that the procedure was successful Firmware Upgrade Utility The Firmware upgrade w
145. or the person that the device will send messages to when events such as SNMP traps occur in the Notify email field Note 1 This step is optional 2 You can use the Browse button to select the address from a list of users rather than inputting the address manually Specify the maximum number of simultaneous connections to the device that you want CC1000J to allow Note 1 A number of 0 zero means unlimited connections up to the maximum number of connections set in the device itself 2 If the number specified here 1s greater than number of connections allowed by the device itself the number allowed by the device takes precedence over this number More connections than the ones allowed by the device will not be accepted Choose whether to display the device s name or IP address when users log into the CC1000J via their browsers For security selecting the device s name keeps its IP address from being visible under the Operation Notes in the main panel when the device s information displays in a browser Chapter 4 The CC1000J Administrator Utility When your settings have been made the dialog box should resemble the example below x Select model PN9108 x Name Taipei PON 01 Description First PN9108 in Taipei MAC address 001074340388 Notify email adrnin techdoc com Maximum connections 1 o Display IP address 8 Click OK to finish The new device is cr
146. owever a greater bit length may decrease performance Bit lenath 1024 y Server Gated Cryptography SGC certificate for export versions only lt Back Cancel 8 Make sure the Bit length is 1024 keep the other default settings click Next The following screen appears IIS Certificate Wizard Organization Information Your certificate must include information about your organization that distinguishes it from other organizations Select or type your organization s name and your organizational unit This is typically the legal name of your organization and the name of your division or department For further information consult certification authority s Web site Organization Organizational unit Techdoc v lt Back Cancel continues on next page 118 Chapter 8 CC 1000 Server Setup 9 Key in the Organization and Organizational unit for the certificate then click Next The following screen appears IIS Certificate Wizard x Your Site s Common Name Your Web site s common name is its fully qualified domain name lt gt X Type the common name for your site If the server is on the Internet use a valid DNS name If the server is on the intranet you may prefer to use the computer s NetBIOS name If the common name changes you will need to obtain a new certificate Common name lt Back Cancel 10 Key in the Common name for the certificate it can
147. panel and starts over with a clean screen The About button provides information about the CC1000J Manager program 17 CC1000 User Manual Configuration When you click the Settings button the CC1000J Manager Settings dialog box appears CC 10003 Manager Settings p xj CC1000J Manager System View Licenses CC1000J Manager Settings Primary network adapter Secondary network adapter Proxy settings v Use secondary NIC IP IP Port range From Ports Range 1024 65535 Ports Range 1024 65535 i To Device port 0 Device port Admin utility port 0 Admin utility port Log Server Settings Maintain log for 0 Days 1 255 Backup Weekly Monthly SMTP Server Settings Server Send from The settings dialog box has three tabs CC1000J Manager System and View Licenses Each of the tabs is described in the sections that follow The Manager Tab The CC1000J Manager tab is divided into five panels as follows The Primary and Secondary Network Adapters The CC1000 makes use of one or two network adapters two are recommended If you use only one it is the Primary adapter its checkbox is enabled and can t be disabled If you use two adapters one for an Intranet internal and one for the Internet external for example then you must enable the Secondary adapter click to put a check in the Use Secondary NIC
148. r session open When log in the browser generates a CA Root certificate is not trusted or a Certificate Error response After log in to the CC 1000 cannot bring up the page for the device want to access 204 Resolution The CC1000 only allows HTTPS requests HTTP requests from a browser are automatically redirect to HTTPS requests The default port for HTTP is 80 the default port for HTTPS is 443 If either of these ports has been set to something else by the administrator the port number must be entered as part of the URL string For example if the CC1000 s IP address is 10 10 10 10 and the SSL port has been set to 8443 then the URL string that you enter in the browser should be https 10 10 10 10 8443 Make sure your Username and Password are correct If the login dialog box title CC 1000 Login is in a color other than white the total number of User licenses has been reached Only the Super Administrator is allowed to log in at this point You must wait until a license becomes available i e another users logs out before you can log in Netscape and Firefox as well as other Mozilla based browsers share the same session ID for multiple connections to the same server The CC 1000 will deny a login request once there already is a session open with the same session ID Either end the currently open session and log in again log in from a different computer or log in with a non Mozilla ba
149. r a name and a description for the folder Create Folder x Hame Taipei Description Devices in Taipei 25 CC1000 User Manual 5 Click OK The folder appears as a subfolder of the CC1000J Devices root folder C10003 Administrator Utility Auth Server IP 10 0 100 193 File D Canada 3 o B CC1000J Users Groups Nesting Device Folders You can nest device folders For example you could have a Taipei device folder and a Taizhong device folder as sub folders under the Taiwan folder Just right click on the folder you want to put a sub folder in and select New from the pop up menu as above Folder Properties When you create a folder its Properties screen appears with the name and description you assigned it Folder Properties Hame Canada Description Devices in Canada This box disappears when you make another selection in the Tree List You can change a device folder s name and or description at any time by selecting it in the tree list When its Properties screen comes up make your changes and click Save 26 Chapter 4 The CC1000J Administrator Utility Adding Devices Devices are added to the device folders that are appropriate for them For example you would create a device for a PN9108 that was in Taiwan in the Taiwan device folder There are two methods to add a device The first is to manually add it the second is to use the CC1000J to add it by browsing the devi
150. r future una Ratas uribe 04040 1304 2 O00 Filo Download GN key licensa upgrade deta Ale ihoia Mee pue the key upgrade Fila hee baan doesnicaded and payed in a psta plese Tha vGgrids data Al ell ba am ilad ta pou by th mal addr i pou Paglrbaral in your k Ssu t Es TE 5 can le pablidted by TER Ircerrarmiarad Ca Led Tahaan All right reparani When the browser asks what to do with the key upgrade file select Save to disk After the file is saved to disk click Continue to go on 213 CC1000 User Manual 8 In the confirmation popup that appears click Yes A summary page confirming the order appears ATEN CC Authentication Key License Upgrade Mampir Baler Errar har tas Sal Order summary Order DD 1017000133 Los ia changed from Fil te 1 Kay se al nambari 1213438780 Key wertion numbers Wi 000 Corre epu ATEN cen ig published by STON lar rntoral Co Led Tahsan AU ripta Piar 9 Click Logout to exit or Continue to process another order Final Steps To finish the upgrade follow these steps 1 With the authentication key plugged in run the Key Status Utility CCAuthKeyStatus exe again 2 In the License Upgrade panel click Upgrade A CC Auth Key Status Utility loj x Key status Key found Activated CEN Key Information FAW version Ver 11 101 S N 1123456789 License Information License Upgrade s Concurrent users fai Save Upgrade
151. rade order has been placed a confirmation email similar to the example below is sent Your order is ready to be processed Please go to http 192 168 3 100 to upgrade your key s license Login Information x Username test207 aten com tw Password test_032307062634 MA 780a_e00a Order Information Order ID 1017000125 This order requests 30 more license s Order ID 1017000124 This order requests 30 more license s Order ID 1017000127 This order requests 30 more license s From here there are two methods for upgrading the key Off Line A Windows based authentication key utility CCAuthKeyStatus exe is used to generate a key information data file CCI KAUpload dat This file is then used to obtain an upgrade file Keyupgrade dat that gets loaded into the key A step by step procedure for this is given in the next section Note CCAuthKeyStatus exe can be found on the CD that comes with the CC1000 package This file should be copied to a convenient location on your computer On Line The key license gets upgraded live over the internet A step by step procedure for this is given after the Off Line section 210 Appendix B Offline Upgrade Preliminary Steps To perform an offline upgrade the user must generate a Key Information Data File CC1KAUpload dat To do that follow these steps 1 With the authentication key plugged in run the Key Status Utility CCAuthKeyStatus exe
152. rae e RE S 23 Getting Slane ee ot 4323au set Se3na the ctawen dames hee a oe ied 23 LOMO Mastin Bains eta ira a Seah Rea aig oh Gees et sl 24 Device Management oeste ead 25 Creating Device Folders 0 0 eee 25 Nesting Device Folders 0 0 00 cece teens 26 Folder Properties 2 2 2 n nannaa ae cos cara adorada deans 26 Adding DEVICES 26 5 ce eaatien dhe a 27 Adding Devices Manually 0 0000 eee eee eee 27 Adding Devices by browsing 0 00 eee eee eee 30 Deleting DEVICES 6 350 cine tduest thie E ee id 34 Moving Folders Devices 0 0 ee ees 34 Device PIODCMICS wae tin tering darlas le eet oman es 34 User Management 0c cece eee eee eens 35 Adding AA A sete ae are A dees 35 Deleting USE a a ee E AI 41 User Properties icc 5s 2k Son Gee ta BCG es eae ee es a ee ees 41 Group Management cos h000 22 04 682 22S S494 SS ee Be oe 42 Creating Groups iia ERR ee OSE Gk ee ee Se 42 Deleting Grous n 6 2chodeohogatetw ates Acuaie a Sed eeate ns 43 Group Properes ua so un ee os bese da eee doe ete 43 Device Properties Configurati0N o ooooooooooooomooo 44 Adding Users Groups to Devices o o oooooooooooo 45 Removing Users Groups from Devices oooooooo 46 Viewing Editing User Group Device Permissions 46 User Properties Configuration oo ooooooorooonoooooo o 47 Users and GroUDS a wea eer ae ee ant 48 ER Siete eat wow a oe ea
153. rches your installation When it finds your device it lists it in the Device List panel 23 Firmware Upgrade Utility x If Check Firmware Yersion is checked the utility compares the device s firmware level with the upgrade files If the device s version is newer the utility lets you decide whether to continue or not If it is not checked the utility performs the upgrade directly Click Next to begin Device List Status Messages CC1000 Key 000 gt Loading amp testing files gt Loading amp testing files OK gt Searching for devices Device Description JV Check Firmware Version Progress Help View Log Cancel Note If you enable Check Firmware Version the Utility compares the device s firmware level with that of the upgrade files If it finds that the device s version is higher than the upgrade version it brings up a dialog box informing you of the situation and gives you the option to Continue or Cancel If you don t enable Check Firmware Version the Utility installs the upgrade files without checking if they are a higher level Click Next to continue Continues on next page 221 CC1000 User Manual Continued from previous page Upgrade Succeeded After the upgrade has completed a screen appears to inform you that the procedure was successful 25 Firmware Upgrade Utility x i Firmware upgrade was successful Click Finish to close the utility Devi
154. red on up 187 CC1000 User Manual Session Info Session Info provides information regarding online active sessions When you click the Session Info link a screen similar to the following appears Control Center over the NET ALTUSCN Dikeni Seaham info AE info Log About L g ut C100 Device Tres T Welcome frosty Active Sessions User stale bent IF Login Lime Super Adri 10 0 13 229 OO OF 12 03 46 Copyright 2004 2005 ATOM Enternational Co Lid A rights reserved The Super Administrator can end any Administrator or User session by selecting the desired Username and clicking End Session The numbers under the Connections heading represent the number of connections to installed devices and the number of subconnections to them For example 1f the entry under the heading were 2 5 1t would mean that the user was connected to two devices through the CC1000 and that there were a total of five connections under those devices the subconnections 188 Chapter 12 Browser Operation Log When you click the Log link a screen similar to the one below appears Control Center over the NET ALTUSCN Downdosd System Indo Demos Info Session Info Log bos Log oart 001000 Device Tree Welcome frosty A foot om Canada Log Oi Taran Log fe OC Logs meb lat Target List Selected Targets OC PO00 ysb lng PPD SEE 71 0070 Pace Pea SORT 00 1074340154 Add Al
155. ring up the Settings dialog box Authentication server settings eee E UI O E reser ill CC1000 Manager settings IP vo oO O 0 Part 7778 1024 65535 continues on next page 141 CC1000 User Manual 3 Key the Authentication Server s IP address in the Authentication Server settings field key the CC1000 Manager s IP address in the ZP field key the port that the CC1000 Manager listens on in the Port field Note 1 The latter two settings must correspond to the ones specified in the CC1000 Manager s Configuration Settings dialog box see page 133 2 In the future you can bring up this dialog box by clicking the Settings button on the login page see the screenshot below 3 The Settings button doesn t appear in the dialog box if the program was obtained by downloading it from the web Logging In After opening the CC1000 Administrator Utility a login dialog box such as the one pictured below appears me lolx Username Password Cancel Authenticalon server Settngs Mame vin2ks4oct k I6 CC1000 T E CO IP 10 0 0 216 Use secure connection SSL 1 Type your Active Directory domain administrator s username and password in their respective fields 2 To modify the settings for the Authentication Server and CC1000 Server see Getting Started page 141 click Settings 3 If you would like to enable secure information exchange select Use secure connection SSL
156. rity Alert dialog box appears accept the certificate it can be trusted See Trusted Certificates page 200 for details The Login page appears cc1000 Login Username Password best 3 Provide your CC1000 Username and Password then click Login If this is the first time you are logging in or your password was reset a dialog box comes up for you to set up your password again Reenter and confirm your password You can keep your original password if you like Note 1 The CC1000 provides a limited number of login licenses If no licenses are available a window informing you that there are no more licenses available appears instead of the login screen 2 Ifa message saying that the CC 000 Service is not available make sure that the CC1000 Manager is running and that its settings are correct 3 The CC1000 supports multiple logins for Administrators and Users Super Administrators are restricted to a single login 181 CC1000 User Manual Main Page Layout After you have successfully logged in the CC 1000 Main Web Page appears Control Center over the NET ALTUSCN Download System Info Device Info Session Info Log About Logout CC1000 Device Tree Root Node Information MM Canada ENE CC1000 device treeroot directory Operation Notes Step 1 Open a device folder Step 2 Click the device you want to access Copyright 2004 2006 ATEN International Co Ltd All righ
157. rname here Description Additional user information you may wish to include Browse For installations that make use of Windows Active Directory the information for the Username and Description fields can be filled in automatically by clicking Browse and selecting the user from a list of users registered in AD Email The user s email address If the email address is entered here it will show up in a device s Notify email list Use password as default Selecting this sets password as the user s password password Password You must set the password unless you select Use password as default Confirm password To be sure there is no mistake in the password you are asked to enter it again The two entries must exactly match Continues on next page 36 Chapter 4 The CC1000J Administrator Utility Continued from previous page Field User status Session timeout Unexpected disconnection timeout Description There are three categories Super Administrator Administrator and User see User Type Options page 39 There is no limitation on the number of accounts that can be created in each category Note 1 The Super Administrator is not allowed to access devices from a browser login to the CC1000J If the User status you want to choose is already selected click it again to bring up its User Type Options dialog box If there is no online device connected to the CC1000J and there
158. rtificate Import Wizard and complete the CC1000 Server installation CC1000 Setup Setup Complete Setup has finished installing CC1000 on your computer V Open CC1000 readme file Click Finish to complete Setup After the screen closes the CC1000 readme file comes up for your reference 113 CC1000 User Manual Web Server Setup Configure the Default Web Site When you installed IIS it was preconfigured to serve as a default Website You now need to change some of the settings as follows 1 For Windows 2000 Server open Control Panel Administrative Tools gt Internet Services Manager For Windows Server 2003 open Control Panel Administrative Tools Internet Information Services IIS Manager A screen similar to the one below appears 10 x action view gt Blm E3 2 Q mn Status E tusi m Yes TCP IP Tree CE Internet Information Services El E tusi m T lt A Defa D Sike Tey rT Web Site Default SMTP Virtual Server 61 25 Default NNTP Virtual Server 2 In the left panel right click Default Web site In the menu that pops up click Properties continues on next page 114 Chapter 8 CC 1000 Server Setup 3 In the Default Web Site Properties dialog box that comes up select the Home Directory tab A screen similar to the one below appears Default Web Site Properties ax Directory Security HTTP Headers Custo
159. rver CD 7 Click Finish to close the wizard Windows Server 2003 1 Open Control Panel Add Remove Programs 2 In the left side panel click Add Remove Windows Components The Windows Component Wizard appears Windows Components Wizard Windows Components You can add or remove components of Windows To add or remove a component click the checkbox 4 shaded bos means that only part of the component will be installed To see what s included in a component click Details Components Rj Accessories and Utilities Bl Application Server 33 4 MB E 14MB m E mail Services 1 1 MB Ml ef Fae Servines 7 OMB xl Description Installs a certification authority CA to sue certificates for use with public key security programa Total disk space required 6 2 MB Mere Space available on disk 31 2 MB Back Cancel Help continues on next page 102 Chapter 7 Authentication Server Setup 3 Select Certificate Services then Click Next The CA Type dialog box appears Windows Components Wizard i x CA Type et Select the type of C4 you want to set up ie nterprise subordinate CA Stand alone root C4 Stand alone subordinate CA M Description of CA type The most trusted CA in an enterprise Should be installed before any other CA Use custom settings to generate the key pair and CA certificate lt Back Cancel Help 4 Select Enterprise Root CA for t
160. ry__ The wezard i configunna Sobres Director This process can tska several minutes or consider abiy longer depending on the options you have selected Shark When configuration has completed the following screen appears Active Directory Installation Wizard Moo xj Completing the Active Directory Installation Wizard Aci Director e now eictalled an iz compa h i the domain CCI00 TO COM Thre domain controller iz arrigmad la the zika Qetault First Sitte Mame Sites ars managed wih the ive Director Site and Sevice adiminiatratnea tnl l To close thie wizerd olok Finish 13 Click Finish to complete the procedure A screen pops up informing you that the system must be restarted before the changes can take effect Windows must be restarted before the changes made by the Active Directory Installabon wizard take effect H Dorit Restart Now 14 Click Restart Now to restart your system 84 Chapter 7 Authentication Server Setup Windows Server 2003 After installation of Windows Server 2003 make sure that the network adapter is working correctly Open Control Panel Network and Dial up Connections If Local Area Connection appears in the window and the status is enabled the network is working correctly If not check the network adapter under the Device Manager If you can t find the network adapter it means you have to install a driver for it When you have made sure that ev
161. s Password F E i Tira Unexpected disconnection timeout after 2 minute s J Use password as default pas ora Password Confirm password Member of m Devices Techdoc Marcom Enabled BL KN2116 Enabled Group BL KN9116 Enabled Group EL SN0116 Enabled Group EL cneooo Disabled Group EL KN2116 Disabled Group Add Remove Add emove Convert Properties Device Panel Headings The headings at the top of the Device panel are described in the table below Heading Description Name Lists the name of the device Status Indicates whether the device is set as enabled or disabled If it is set as enabled it shows up in the user s tree view If it is set as disabled it doesn t show up in the user s tree view even though it is on line The administrator can use this function to temporarily deny a user access to a device without having to delete it and then reinstall it Type Indicates whether the device is accessed privately or as part of a group 170 Chapter 11 The Administrator Utility Device Button Functions The functions of the buttons associated with the panel are described in the table below Heading Enable Disable Add Remove Convert Properties Description Highlight a device in the list box and click Enable to allow the user to access the device This function only works for devices that are accessed privately Highlig
162. s 3 minutes 2 If an operator is connected to a device and that device has its own timeout interval the CC 1000 time out interval won t begin until the operator is first timed out of the device session Unexpected If the user unexpectedly disconnects i e closes the disconnection timeout browser the CC1000 times out the user s session after the amount of time specified here The timeout interval is from 2 10 minutes default is 2 minutes Continues on next page 159 CC1000 User Manual Continued from previous page Note If you click the Browse button see Browse page 158 to add the Username and Description a Browse Domain Users dialog box appears x Domain users z John Lee In Folder WindowsS etup CC1000 T1 com Users General information CC1000 T1 com Users Fisrt name ohn miit Jack CC1000 T1 com Users eat nee lee Display name fohn Lee Description CC1000 User Email Account information User login name Port ECCT com User login name pre Windows 2000 ECTODO TT hn Account expires Never End of Never coca 1 Select the user in the Domain Users column The user s information displays in the fields to the right of the column 2 Click OK 160 Chapter 11 The Administrator Utility 4 Click one of the User Status options that is appropriate for the User Depending on the User status that you selected in the
163. s allow administrators to easily and efficiently manage users and devices Since device access rights apply to anyone who is a member of the gro to s up administrators need only set them once for the group instead of having et them for each user individually Multiple groups can be defined to allow some users access to specific devices while restricting other users from acc essing those devices Creating Groups To 1 164 create a group do the following From the CC1000 Administrator Utility main screen navigate to the Groups folder CC1000 Users Groups Groups Right click the Groups folder In the pop up menu that appears choose New In the Create Group dialog box that appears enter a group name and description then click OK a jol x Group name Techdoe Description Techdoc Group Cancel Chapter 11 The Administrator Utility 5 The new group is added to the Groups folder node CC1000 Administrator Utility Auth Server IP 10 0 13 180 O x c i CC1000 Devices Y Cananda Oy Taiwan E i CC1000 UsersiGroups E i Groups Marcom amp fernando ES frosty E superadmin Deleting Groups To delete a group do the following 1 From the CC1000 Administrator Utility main screen navigate to the Groups folder CC1000 Users Groups gt Groups 2 Right click on the Group s name 3 In the pop up menu that appears choose Delete The group is a
164. s fields If there is an error it brings the cursor to the invalid field and asks you to re enter the information for that field 19 CC1000 User Manual Log Server Settings There are two settings for this panel as shown in the table below Field Setting Maintain Log For Allows you to specify the number of days that the log entries can be kept in the current working database Backup Allows you to specify the timeframe for database backups SMTP Server Settings The CC1000 sends email notification of event traps as defined by each device on installed devices to users of those devices Note Recipients are designated in each device s configuration settings See the device s User Manual for details Specify the IP address or the domain name of the computer running your SMTP server in the Server field Specify the CC1000 administrator s email address in the Send From field Note This field cannot be blank The System Tab The System Tab lets you configure your LDAP Apache Tomcat and JDK settings 0010000 Manager Settings i OC 000 Hanapi Syvsfem View Licenses lz CO Authentication Sensor Settings Ports EC dathentication Serre User Management Lin 10385 Users LIARS 1066 Apache Tomcal Settings Porta HTTP 2000 HTTPS 0443 huido 1005 JOR L250 Developmen Kh Settings Pathe EiPrograsa Files Usada 5 0_0 Dro 20 Chapter 3 The CC1000J Manager LDAP
165. s name will appear more than once in the Devices panel of the user s Properties screen Only the first entry of the device is enabled however Users are only able to access the device from the group that the first instance of the device is pointing to To ascertain which group a device is pointing to hover the mouse pointer over the device s name in the Devices list The balloon that appears displays which group if any the device points to as shown in the screen below Member of A Techdoc 01 Name Status Type r 5N0116 Enabled Personal A Techdoc 02 PN9108 01 Enabled Group PN9108 01 Li Aroun Device belongs to group Techdoc 01 PathiTaiwaniTaipei In order for a user to access the device the group that 1t points to must have first priority The group at the top of the Member of list has the highest priority To change a group s priority see Group Priority page 49 56 Chapter 4 The CC1000J Administrator Utility Export Import Configurations The Administrator Utility can export CC1000J user and device configurations to a file It can also import CC1000J user and device configurations from previously generated configuration files Exporting Configurations To export configurations to a file do the following 1 From the File menu choose Export CC1000 Administrator Utility Auth Import 0J UsersiGroups Refresh FS About es harcom 02
166. sed browser Note This condition occurs in some versions of IE running on Windows98 as well The certificate s name is not found on Microsoft s list of Trusted Authorities The certificate can be trusted however See Trusted Certificates page 200 for details Check with your CC 1000 administrator to find out whether you are authorized to access that device Continues on next page Appendix A Continued from previous page Problem When try to access my Generic device from the Tree View nothing happens could not change passwords after a first time browser login Resolution Generic devices are accessed directly by clicking the device s IP address If the IP address has changed because of a DHCP change for example then clicking the old IP address will not connect to the device at the new address Ascertain the device s new IP address and change its settings accordingly 1 Make sure you have installed the a root certificate in the CC1000 Server the server that CC1000 Man ager is running on If the CC1000 Server uses a firewall make sure port 445 Microsoft DS or port 139 NETBIOS or port 636 LDAPS is allowed Make sure that your new password matches the Authentications Server s AD Server s password pol icy Domain Security Policy gt Account Policies gt Password Policy CC1000 Authentication Server Problem Even though give the CC1000 a proper us
167. ser status Adminai User Dice session timeme 1 mintes fimon settings sain ni E F ACESS allo 25 AT ON T7 Acorssibie outhelis for lt Station 1 Gwihal A e Outlet E Duile E A NA Qile E ie aiie F Quie G w aiet H Denice defined seba 7 ne ES 45 CC1000 User Manual 4 When you return to the Device Properties screen the Users and Groups that you added appear in the middle panel PSIG Device Properties Moda name PHATOS Mame PHASE gt 01 MAC address 00104340100 Descipllor PielPR3GTOB in Teepe Display IP addrase Cia aminga lii Denice defined settings Removing Users Groups from Devices To remove a User Group from a device s access list select the User or Group from the list then click Remove Viewing Editing User Group Device Permissions To view or edit the permissions for a User or Group click on the name in the middle panel The information appears in the bottom panel Make any necessary changes then click OK PHS108 Device Prepartios Modri nan F MA DA Ham PAA 1 MAC cineca Tal Descritor FirstFR108 in Talpal Hotty amale adreintaci o cor Browsen Mau Conn cies Access rights for users props Mari Ciutat settings Diane defined settings 46 Chapter 4 The CC1000J Administrator Utility User Properties Configuration User accounts are configured through the User Properties screen To bring up the screen open the Users folder CC1000J Users
168. sers 5 Click OK to finish up The device is added to the folder 0010007 Administrator Utility Auth Serve File 9 Sy CC1000J Devices i Canada Y Taiwan SY Taipei E KN2116 03 NN PON 01 i Taizhong amp EY cc1000 UsersiGroups Note When you create the device its Properties screen appears The screen displays the device s information and is used to configure User and Group permissions for the device You can ignore it for the time being Configuration of Users Groups and Devices is discussed in the sections that follow 33 CC1000 User Manual Deleting Devices With the exception of the CC1000J Devices root folder all folders and devices can be deleted by doing the following 1 Right click on the item you want to delete 2 In the pop up menu that appears select Delete CC1000 Administrator Utility Auth Ser File 9 S CC1000 Devices A Canada yy Taiwan g a Taipei Ta KN2116 a LP6324 Al PON 01 Note When you delete a folder all subfolders and devices contained in it are also deleted Moving Folders Devices Folders and devices can be moved to other folders by dragging and dropping Device Properties A device s Properties screen displays the device s information and is used to configure User and Group permissions for the device see Device Properties Configuration page 44 You can view it and make changes to its information and permission con
169. starts up when the CC1000 system starts To bring up the Log Server dialog box Open Start gt Programs gt CC1000 and click CC1KLogServer The Log Server dialog box comes up CC1000 Log Server x Events 00002 CC1000 Manager connected IP address 10 0 13 250 m Settings IT Edit settings Maintain log for D Days 1 255 Backup Weekly Monthly Clear About Close Close Note 1 If the Log Server is installed on the same PC that the CC1000 Manager 1s running on the program cannot be executed independently To bring up the Log Server dialog box you must click the Log Server button in the CC1000 Manager dialog box see page 131 2 If the Log Server is not installed on the same PC as the CC1000 Manager the Close button doesn t appear An Exit button appears instead see Close Exit page 129 127 CC1000 User Manual Events This panel displays information regarding the Log Server s operation if the CC1000 Manager connected for example Clicking Clear clears the panel Fields Initially the fields are read only To change the settings enable Edit Settings click to put a check in the checkbox The meanings of the field headings are explained in the table below Port Heading Maintain log for Backup Weekly Monthly Meaning This field contains the Log Server s IP Address This address must match the IP address of the computer
170. support they cannot be added by browsing and they cannot be authenticated through the CC1000 Although they can be accessed through the CC1000 you must log in to them with their own Username Password authentication procedure To add a generic device node do the following 1 Right click on the folder node that you want to add the new device node to 2 In the popup menu that appears select New Generic Device CC1000 Administrator Utility Auth Server IP 10 0 13 193 loj x Folder Device Properties Generic Device Browse 3 In the dialog box that appears key in a name and description optional for the device Select whether the device name or IP address appears when users log in via their browsers As a security precaution selecting the device s name keeps its IP address from being visible under the Operation Notes in the browser screen s main panel 210 x Name LPE324 Description IF address 10 0 100 200 Display IP address i i Cancel 154 Chapter 11 The Administrator Utility 4 Click OK to finish up The device is added to the folder CC1000 Administrator Utility Auth Server IP 10 0 100 193 loj x 3 CC1000 Devices 1Y Canada BL PN9108 T1 3 19 Taiwan aL Kn2116 Ks1 CC1000 Users Groups 3 Groups Y Users amp fernando frosty E jessica superadmin
171. t button instead Clicking Exit closes the dialog box and also terminates the program When the dialog box is minimized a Log Server icon appears in the Windows system tray as follows To restore the dialog box double click the icon To bring up a context menu that allows you to either restore the dialog box or exit the program right click the icon Backup We strongly recommend backing up the log file on a regular basis 129 CC1000 User Manual This Page Intentionally Left Blank 130 Chapter 10 The CC1000 Manager Overview The CC1000 Manager is the central component of the CC1000 system It communicates with all the other components and presents status information about overall CC1000 operation The CC1000 Manager automatically starts up when the CC1000 system starts Note If the CC1000 Manager has been shut down you can bring it up by opening Start gt Programs gt CC1000 gt CC1000 Manager When the CC1000 Manager comes up a screen like the one below appears CC1000 Manager E 0 x Events 00016 2006 07 14 10 26 08 Device type KN9116 IP 10 0 13 198 is offline 00017 2006 07 14 10 26 10 Device type KN9116 IP 10 0 13 198 is online 00018 2006 07 14 10 26 39 Device type KN2116 IP 10 0 13 40 is offline 00019 2006 07 14 10 26 40 Device type KN2116 IP 10 0 13 40 is online 00020 2006 07 14 10 26 44 Device type KN9116 IP 10 0 13 198 is offline 00021 2006 0
172. talled on the same computer the computer has two network adapters The Primary Network Adapter s IP setting and the IP setting for the Authentication Server must be the same Note If you wish to download the Administrator Utility and access the Authentication Server via the Secondary Network Adapter its IP cannot be 0 0 0 0 continues on next page 134 Chapter 10 The CC1000 Manager Continued from previous page 2 The CC1000 Manager and the Authentication Server are on separate computers each computer has two network adapters one for the Intranet one for the Internet The IP of the Primary Network Adapter for both the CC1000 Manager computer and the Authentication Manager computer must both be on the same network segment The IP of the Secondary Network Adapter for both the CC1000 Manager computer and the Authentication Manager computer must both be on the same network segment Proxy Settings To allow users to access CC1000 managed devices over a WAN you have to enable the proxy function put a check in the Enable Proxy checkbox Since this function makes use of the Secondary Network Adapter it only becomes available if the Use Secondary NIC function is enabled refer to the discussion in the previous section After enabling Proxy Setting specify a range of ports for the CC 1000 Manager to use for this function The valid range is from 1024 to 65535 with a minimum difference of 500 Note 1 If t
173. tens ts 129 BAC KUO a2 ete aoe be te tee eos ae eee Se eee eis ecu Seas 129 Chapter 10 The CC1000 Manager CT A A A A IS 131 Button FUNCIONS ern tan dd dla de ra 132 Configuration Settings eissis aare eee 133 CC1000 Manager Settings o ooooooooo 133 LOG Server SCUINGS cave rora adi 136 SMTP Server SettingS 0 0 0 0 cc eee ee eee 137 FIMSOIMO D gt tite Saf id Seta ween Gla teh ias do 137 Minimizing the Window 000 e eee eee eee 137 Upgrading the USB Authentication Key Firmware 138 Chapter 11 The Administrator Utility NRO Nros cdo era dro att Ed 141 Ei A A A 141 o A A A wee a 142 Installing the Root Certificate o oo ooooooooooooo 143 The Mal Screen acres Dira aba 146 Device Management 0 000 cece eee eee eens 147 Creating Device FoOlders oi sii ar an 147 Adding DEVICES usina Chg atacand A em bares Ae ed 148 Adding Device Nodes Manually 149 Adding Device Nodes by DrowsSiNQ 0 151 Adding Generic Device Nodes 00000 ee eee 154 Deleting Device Nodes 0 cece eee 155 Moving Folder Device Nodes 000 e eee eee 156 Folder Device Node PropertieS o o oooooooooooo 156 User Management o oooooo ee eee eee 157 Adding WSCISin oie pidiera dera 157 peleng WSC wouter ara cad waters Settee eee ast teas 163 Managing USSIS sito gale sre ames ind oe a an
174. ter where in the world with just a few clicks of the mouse Logging In To log into the CC1000J do the following 1 Open the browser and specify the IP address of the CC1000J in the browser s URL location bar Note 1 You must include http or https before the IP address and you must specify the http or https port that the CC1000J listens on when you enter its URL in your browser For example Hele 7192 168 0 007 0060 https 192 168 0 30 8443 2 The http and https ports are set in the Apache Tomcat panel of the CC1000J Manager s System tab see The System Tab page 20 2 When the Security Alert dialog box appears accept the certificate The Login page appears CC10003 Login Username Password II Login Reset 3 Provide your CC1000J Username and Password then click Login 61 CC1000 User Manual 4 If this is the first time you are logging in or your password was reset a dialog box comes up for you to set up your password again Reenter and confirm your password You can keep your original password if you like CC1000 Change Password New Password Confirm Password 4 OK Reset Note 1 The CC1000J provides a limited number of login licenses If no 62 licenses are available a window informing you that there are no more licenses available appears instead of the login screen 2 If a message saying that the CC1000J Service is not available
175. th LDAP Java version and Active Directory Windows AP version external authentication tools Robust security policies for individual user authorization to the port level 128 bit SSL encryption of all data on the network Flexible session time outs Strong user name and password authentication Devices can identify themselves by Name or IP in the browser device s IP can remain hidden from people passing by CC1000 User Manual E Network Interfaces TCP IP HTTP HTTPS SSL DNS LDAP LDAPS E Software Features All features including access configuration and administration accessible over the Net Powerful portal like interface provides customized permission based groupings and device views ATEN IT appliance auto discovery with device availability status and alarms Access and Control from Anywhere at Anytime An array of flexible logging and reporting options with audit trails for diagnostics and troubleshooting View and manage active user sessions and active ports in real time Maximum number of simultaneous connections can be set for each device CC1000 User Manual This Page Intentionally Left Blank Chapter 2 CC1000J Server Installation Overview Recognizing the increasing importance of Linux in the server environment CC1000J the Java version of the CC1000 Control Center Over the NET system makes the CC1000 s management capabilities available to both Win
176. that the Log Server is running on This is the port number of the port that the Log Server listens on The valid port range is from 1024 to 65535 This setting determines the number of days that the working database file keeps a record before discarding it it is still available in the backup file however The Log Server checks the records every hour and automatically deletes the ones that exceed the time limit The valid time range is from 1 255 days If Weekly is selected when the Log Server writes a record it also writes a copy to a backup file that is kept ona weekly basis and named for the week For example a backup file named CC 1KLogs_W050717_050723 mdb refers to a backup file that contains all the records for the week of July 17th to July 23rd Likewise if Monthly is selected the backup file is kept on a monthly basis and is named for the month so that a backup file named CC 7KLogs_M2005_07 mdb refers to a backup file that contains all the records for the month of July 2005 3 After you have configured the fields click Save to save your changes 128 Chapter 9 The Log Server Close Exit When the Log Server is installed on the same PC that the CC1000 Manager is running on clicking Close closes the dialog box but the program does not terminate If the Log Server is installed on a PC that is separate from the one that the CC1000 Manager is installed on There is no Close button There is an Exi
177. the Windows based configuration is discussed in Chapters 7 12 Note For Windows systems you can install both the Java based and Windows based configurations You can run either one but you can t run them both at the same time CC1000 User Manual Features NH Secure Centralized Management Complete control of your enterprise consolidates the management of all ATEN IT devices Single IP address to securely access every device on the installation All devices are integrated into a single tree view for centralized access administration and management of a worldwide network from anywhere at anytime Web browser access over Internet Intranet provides secure remote connections to all installed devices m Highlights Java version runs on Windows and Linux for multiplatform support Ideal for enterprises with one or more data centers or a number of remote offices Easy to use intuitive browser based GUI for simplified access to IT equipment in global data centers and remote offices Scalability Multi user access to hundreds of ATEN IT appliances and more than ten thousand servers and serially controlled devices A single login provides secure centralized management of multiple data centers branch offices and remote locations Provides centralized management Role Based Access and Control RBAC and Reporting Capabilities Powerful Security 4 Powerful security features that enable integration wi
178. the name thal user of eater versione of Windows will ume bo identify the nev domain Chck Next lo accept the name shown of enter a new name Domain NetBIOS name CCIK lt Back Next Cancel continues on next page 80 Chapter 7 Authentication Server Setup Key in a NetBIOS domain name in our example we used CC1K but you should give it a name that is meaningful for your installation then click Next The Database and Log Locations dialog box appears Acetre Directory Installation Wizard Hi batabase and Log Lecationa Specify lha cajon of des Aciya Director datsbase smid bor For bets perfoemance and recoverabiity store the databasa and the log on separa hard diske Vi lee do cu werd bo stows the otie Director datasase Dabas locabor Dw TA RT DS Bicrasa hee do Uco aar bo toe Ihe Actie Director leq Log loostion Owns Pani Tos Brovee Cuca We suggest that you keep the default values as shown in the diagram and click Next to move on The Shared System Volume dialog box appears Active Directory Installation Wizard Se ER Shared System Volume Speci thes folder bo be sheared 5 thee system volun The Syeval folder Horat the iva Copy of iha domain s public files The coments of the Susmol folder are replicated to all domain controllers im the domain The Sacteol lod mil be located an a HTES 5 0 vel Ent i a location far th Sysva folder Bolder locabion
179. the window and go through the selection procedure again The Clear button erases the contents of the Events panel and starts over with a clean screen The Security Key F W Upgrade button brings up a dialog box that lets you upgrade the USB Security Key s firmware See Upgrading the USB Authentication Key Firmware page 138 Chapter 10 The CC 1000 Manager Configuration Settings When you click the Settings button at the bottom of the CC1000 Manager s Main Screen the following dialog box appears x COVED Manage Selirmos Prenaty rebrecah adapter Secondary network adapte Promy settings F F Use secondary NIC Post range IF IP Puts Rerga 11124 45535 Peste Range 112465535 From Divet pot tiL Dewer por To Adi ely pot 1778 Adn bility po Authericaton Server IP Autherbcaton Server IP Y 0 13 9 Web Site Settings Log Server Settings W Use local rtegeated log server e Check and rotty log server status Pert 1024 65535 SMTP Server Setting Sarver 10013 21 Send hom The dialog box is organized into the following main areas e CC1000 Manager Settings Log Server Settings SMTP Server Settings The settings for each of these are discussed in the sections that follow CC1000 Manager Settings Primary and Secondary Network Adapters The CC1000 makes use of one or two network adapters two are recommended If you use only one it is the Primary adapter its checkbox is enabled and c
180. tin ses 49 Users and Devices strain ls Aloe eS AA 49 Device Panel HeadingS 00 cece eee ee eee 51 Device Button Functions 0 00 cee eee 51 Group Properties Configuration 0 ccc eee eee 52 Adding Users 10 Groups e 3054442454 ias 52 Removing Users from Groups 0 000 eee 53 Adding Devices to GroupS 0 00 cee ee ees 54 Device Conlara 56 Export Import Configurations o o oooooooooorooonoooooo 57 Exporting Configurations 0 0 0 0 0 eee ees 57 Importing GonniGguratlons 42 2 2 siss a5 betas ass 58 vi CC1000 User Manual Chapter 5 CC1000J Browser Operation LOOGINOUM s oe E Seat tac deead iad hd acne eased ase eae Sx 61 Mal Rage LAY OUTS hice ahh bint ord Mcrae a 63 O Perse s a A aay ing A do ante 64 Male age LINKS ant Oooo eee eae eee ete 65 A ryder cee 8 here rey eases eee a aa cee eae 65 DOWMIOAG Bim Git ss aaa ias oes 66 SVENNI e see na deseo aa Geen St td BPS od 67 DSVICC INNO esa sra tons te ee ete a eee Bee tics des 68 SESSION rr ea tasa aio rs soon 69 E A RO Sic agit 70 ADO UL anie al ii ada ida oa 71 E A O eeu enee oe 71 Chapter 6 CC1000 Installation Overview System RequireMentS o oooooooo eee eens 18 Installation and Operation Overview 0 0 0 eee 74 HAS TOM UO oon ts Se oars eee aa a a ls eee Gee 74 OMe ANON senators ooh Atco tee LO A Aes 75 Upgrading ihe CC1L000 42sec as Poche e a A te ENA 76 Chapter 7 Authentication
181. tion Note The examples that follow show how to install Microsoft s CA You may choose a different CA RSA VeriSign e g to install if you wish Windows 2000 Server 1 Open Control Panel gt Add Remove Programs 2 In the left side panel click Add Remove Windows Components The Windows Component Wizard appears Windows Components Yizard Windows Components Tow can add of remove componente of Windows 2000 To add of remove a component click the checkbox A shaded bos mesns thet only Fae a the component wall be installed To see what s included in a component click etails Components 154 GR Accessories and Utilities E E Centilicabe Sar as O Guster Servier 2 5 MBE 5 Sal Indexing Service 0 0 MB Description Instale a certifiostion authority CA to issue certificates for use with public key security applications Total disk space required 3 1 ME Details Space available on disk 40734 MB lt Back Cancel 3 Select Certificate Services then Click Next The Certification Authority Type dialog box appears Windows Components Wizard Certification Authority Type There are four pes of certification authorities Cerificabian Ankri lupe D egeria lene a EA TEME Gir en enterprise roct EA enterarse Should be installed C Enterprises subordinata CA before any other CA Requires Active Director Stend slone root Ge gt Stand alone subordinate CA TM dv
182. to or through cabinet slots They may touch dangerous voltage points or short out parts resulting in a risk of fire or electrical shock Do not attempt to service the device yourself Refer all servicing to qualified service personnel If the following conditions occur unplug the device from the wall outlet and bring it to qualified service personnel for repair The power cord or plug has become damaged or frayed Liquid has been spilled into the device The device has been exposed to rain or water The device has been dropped or the cabinet has been damaged The device exhibits a distinct change in performance indicating a need for service The device does not operate normally when the operating instructions are followed Only adjust those controls that are covered in the operating instructions Improper adjustment of other controls may result in damage that will require extensive work by a qualified technician to repair Appendix A Rack Mounting Before working on the rack make sure that the stabilizers are secured to the rack extended to the floor and that the full weight of the rack rests on the floor Install front and side stabilizers on a single rack or front stabilizers for joined multiple racks before working on the rack Always load the rack from the bottom up and load the heaviest item in the rack first Make sure that the rack is level and stable before extending a device from the rac
183. ts reserved The CC1000 Main Page is divided into three major sections a left panel a right panel and a row of links at the top 182 The left panel displays a tree view of all the device folders on the installation that the user is authorized to access The Tree View is discussed in the next section The main panel provides information about the node in the Device Tree that is currently selected Clicking a link on the row at the top brings up additional screens The number and type of links displayed are determined by the user s type Super Administrator Administrator User and the options selected when the user was created The links are discussed in the Main Page Links section page 184 Chapter 12 Browser Operation Tree View Only devices the user is authorized to access are listed in the Tree View See Device Access Rights page 172 for details Aplus sign in front of a folder means that there are items nested inside of it Click the plus sign to expand the view and show the nested items To access a device navigate through the folders to select it A screen similar to the one below appears Control Center over the NET ALTUSCN Devier Into Session Inis Log Aboat Legoat ode intonation SE Cananda Description 01000 devica tree roat directory BH Taw CAGA ST esis Step 1 Open a device folder ze 11 Shep 2 Cick the device you wart to access Copyright i
184. uct Information cesena di Bd eee a A aie A eee eal ee xii Chapter 1 Introduction OVER A E A 1 FOO searre ei a ado a EEr 2 Chapter 2 CC1000J Server Installation VC CW a ora tet rar A tas dott ak tes e eee a ava oA Ses u Se ae 5 Requirements dia ea 5 CC1000J Components 2 lt acie5 ec ee sed ole ec a 5 Windows Version Installation 0 0 eee 6 Linux Version Installation ii is 11 Before VOU Begi aspas eka 11 IStANING hoe Aad ea oe daras 12 Uninstalling CC1000J nananana ec eens 13 Uninstalling from a Windows System 000 0c eee eee 13 Uninstalling from a Linux System 0 0 0 0 cee 13 Upgrading the CC1000JU 1 ns 14 Chapter 3 The CC1000J Manager OEI Wir a Os arate St ii nee 15 Me RSE TM Os 42 20 ote de e eee ed cee ees de 16 GONMGUPAUOM a2 ct sateen Snowe eee bette eh kee ba bee oe Se eee 18 Tne ManhadertaDrs estas eee oe piace Cleese eae eee 18 Proxy SCUINGS 224 2h adiew cc cia Pew aad a oH eSBs 19 Log Server SettingS sade i eka ank eee eee 20 SMTP Server SettingS 0 0 0c ccc ee eee 20 The System Tabanera tote pea Se tea Gee ees 20 APS Me ick ts ae aa RC Ste ea eee a ene eran 21 Apache VOMCAL subs cto eine lane o atid al og 21 O A Se loys EE 21 The View Licenses Tab 2 000 cece eee ee eee eens 22 PINISMING Oise ie St ee seme tee oot coke Boe aaeeemnake es 22 CC1000 User Manual Chapter 4 The CC1000J Administrator Utility Io 2 46 05 4 rene ae O Gae
185. ular port that Apache Tomcat listens on Note If the default port settings conflict with other programs you can change them to whatever you wish You must restart CC1000J in order for the new settings to take effect JDK This field indicates the Java Development Kit s location 21 CC1000 User Manual The View Licenses Tab The View Licenses Tab lets you view the licenses that are related to the CC1000J package To view a license click its radio button CC1000J Manager System View Licenses Select License la Sun Microsystems Inc Sun ENTITLEMENT for a z SOFTWARE e JAF m JavaMail API icen see Company Entity receiving Software Apache Effective Date Date of delivery of the Software to You Software JavaBeans Activation Framework 1 1 License Term Perpetual subject to termination under the SLA Licensed Unit Software Copy Li censed unit Count Unlimited Permitted Uses 1 You may reproduce and use the Software for Individual Cornmercial lor Research and Instructional Use for the purposes of designing developing testing and running Your applets and lapplication Programs 2 Subject to the terms and conditions ofthis vil concer amo Finishing Up When you have finished making all your configuration entries click OK to save your settings If there is an error in any of the entries the pointer will move to the i
186. un Java web site http java sun com After the JDK has been installed on your system you are ready to install the CC1000J program To install CC1000J on a Windows system do the following 1 Plug the CC1000 USB Authentication Key into a USB port on the computer you are installing the CC1000J Server on For security purposes the key can be installed inside the case See page 196 for details 2 Copy CC1000J Setup ForWindows exe from the software CD that came with your package to a convenient location on your server 3 Go to the folder where CC1000J Setup ForWindows exe is located and execute it A screen similar to the one below appears AE Introduction Introduction InstallAnywhere will guide you through the installation of License Agreement eee Choo EIS itis strongly recommended that you exit all programs before Choose Shortcut Folder continuing with this installation Pre Inistallation Surrey 8 Click the Next button to proceed to the next screen If you want to Installing change something on a previous screen click the Previous button Install Cornplete You may cancel this installation at any time by clicking the Cancel button InstallAnywhere by Macrovision Cancel Previous i E Click Next to move on Chapter 2 CC1000J Server Installation 4 In the License Agreement screen that comes up scroll down to the very bottom to activate the J accept radio button 43 CC1000Java Installation
187. us User A x ccount amp nonymous Use A __ _ 2222 Select the Windows User Account used to access this computer when an anonymous user connects to this site Username lUSR_TUSI M Browse Password T Allow IIS to control password Cancel Help DK Cancel Help OK Cancel Apply Help The default anonymous user username appears in the username field Key in a new password for this account The username and password must match what was specified for anonymous username and password information under Password Setup refer to page 93 If the username is not correct click the Browse button to get the right anonymous username such as JUSR_XXX 6 Make sure that the Allow IIS to control password check box is not checked 7 Click OK to accept the Website properties 123 CC1000 User Manual Enable Web Service Extensions for Windows Server 2003 1 In the Control Panel select Administrative Tools Internet Services Manager 2 In the left panel drop down the list for the local computer select Web Service Extensions ioi Fa File Action View Window Help 18 x e amp m 212 m d Internet Information Services E TUSI M local computer 5a Web Service Extensions a id FTP ates _ Web Service Extension Status i e Application Pools Y All Unknown CGI Extensions Prohibited Web Sites E Fo A ae Sere A
188. use the CC1000 Manager to browse the device list Browsing the device list see page 151 1s the simplest way to add a device to a folder because the device provides information about itself such as its name type and MAC address In this way you ensure the accuracy of the device information and save the time normally required to gather and type in the information 148 Chapter 11 The Administrator Utility Adding Device Nodes Manually To manually add a device node do the following 1 Right click on the folder node that you want to add the new device node to 2 In the pop up menu that appears select New Device CC1000 Administrator Utility Auth Server IP 10 0 13 180 CC1000 Devices 6 13 Taiwas ew Folder Ty CC1000 U Delete Properties Generic Device Browse 3 In the dialog box that appears drop down the Select Model list and select the device type that you want to add Create Device x Select mode Mame Description po MAC address Po Notify email Po Browse Masimam connections pa Display IP address y Cancel Note In this example we are adding a PN9108 The procedure for adding other devices is the same 4 Enter a name description and MAC address for the device in the appropriate fields 149 CC1000 User Manual gt 150 Enter an email address for the person that the device will send messages to when
189. uthentication Key s firmware is upgradable As new revisions of the firmware become released upgrade file are posted on our web site Check the web site regularly to find the latest files and information relating to them Starting the Upgrade To upgrade your firmware do the following 1 Go to our website and download the new firmware file to a convenient location on your computer 2 With the authentication key plugged in run the Key Status Utility CCAuthKeyStatus exe Note 1 CCAuthKeyStatus exe only runs under Windows 2 CCAuthKeyStatus exe can be found on the CD that comes with the CC1000 package This file should be copied to a convenient location on your computer 3 In the screen that appears click F W Upgrade A CC Auth Key Status Utility Ioj xj Key status Key found Activated Y Key Information F W version Ver 11 101 SAN TOO AZI T De License Information Concurrent users 3 License Upgrade Save Upgrade Continues on next page 219 CC1000 User Manual Continued from previous page 4 Inthe File Open dialog box that appears select the firmware upgrade file then click Open Open 2 x e My Recent Documents Desktop o gt ul My Documents e SE My Computer mm File name cc Auth Key FW V1 1 101 030207 exe aot Ries of type Fw Upgrade File exe y Places I Open as read only lt 5 Read and Agree
190. utomatically removed Adding Users to Groups Note Before you can add users you must first create them See User Management page 157 for details To add a user to a group do the following 1 Navigate to the Groups folder CC1000 Users Groups Groups and right click on the name of the group that you want to add a user to 2 Inthe pop up menu that appears choose Properties 165 CC1000 User Manual 3 In the User Group Properties dialog box that appears go to the bottom of the Members panel and click Add Group Properties O x Group Settings Group name lechdoc Group description Techdoc Group Members i Devices femando Remove les Remove Properties 4 In the Select User dialog box that appears select the user you want to add to the group from the list of users select User ES administrator E superadmin E jessica E kelly E jacob Username frosty cno Continues on next page 166 Chapter 11 The Administrator Utility 5 Click OK The user is added to the group s Members list Group Settings Group name Group description Techdoc Group Techdoc Members ES fernando Devices 6 Click Exit to close the dialog box Removing Users from Groups To remove a user from a group select the group in the Member of panel then click Remove 167 CC1000 User Manual Adding De
191. va Disk Space Information for Installation Target Required 30 619 595 bytes Available 350 168 219 648 bytes InstallAnywhere by Macrovision If you wish to change anything click Previous to go back If the information is correct click Install Note If a dialog box comes up during the install informing you that a newer version of the ax jar file already exists you can overwrite it or not overwrite it it doesn t matter which CC1000 User Manual 12 When the installation utility brings up a screen informing you that the installation has completed successfully click Done to exit the installer Y CC1000Java ES Install Complete Introduction Congratulations CC1000Java has been successfully installed to License Agreement Choose Installation Folder E1CC1000Java Choose Shortcut Folder Press Done to exit the installation program Pre Installation Summary Installing Install Complete InstallAnywhere by Macrovision Cancel Previous i i 13 At the completion of the installation a CC1000J entry is created in the Windows Start menu 10 ES Windows Catalog re J e Windows Update R Administrative Tools gt Programs Documents fon de 4 Be AdminUtility a CC1000JManager ettings setting Uninstall CC1000Java Search Help and Support Run Log Off Administrator Shut Down Chapter 2 CC1000J Server Installation Linux Version Installation Before you Begin
192. vices to Groups To add a device to a group do the following 1 Open the User Group Properties dialog box See Adding Users to Groups page 165 2 At the bottom of the Devices panel click Add Group Settings Group name Techdoc Group description Techdoc Group Apply 7 DEVICES Properties 3 Select the device that you want to add to the group Select Device a O xj o CC1000 Devices H Cananda Device name knang Cancel 4 Click OK 168 Chapter 11 The Administrator Utility 5 In the Access Configuration dialog box that appears set the access rights for the device See Device Access Rights page 172 for information about Access Configuration dialog boxes 6 The device is added to the group s Devices list Group Properties lt Eie O x r Group Settings Group name Techos Group description fTechdoc Group m Members Devices fZ kane 7 Click Exit to close the dialog box 169 CC1000 User Manual Device Assignment All devices that a user accesses privately or through a group are listed in the Devices panel of the User Properties dialog box User Properties De S jej x User settings m User status User name frosty C Super administrator Administrator C User Description Tech doc editor p 5 m Session timeout Email rit aten com tw No timeout Timeout after minute

Control Center Over the NET™ CC1000 User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents

Control Center Over the NET&trade; CC1000 User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents

Control Center Over the NET™ CC1000 User Manual