Intel Remote Management Module 2 User Guide

Transcription

1 Intel Remote Management Module 2 User Guide A Guide for Technically Qualified Assemblers of Intel Identified Subassemblies/Products Intel Order Number D

2 Disclaimer Information in this document is provided in connection with Intel products. No license, express or implied, by estoppel or otherwise, to any intellectual property rights is granted by this document. Except as provided in Intel's Terms and Conditions of Sale for such products, Intel assumes no liability whatsoever, and Intel disclaims any express or implied warranty, relating to sale and/or use of Intel products including liability or warranties relating to fitness for a particular purpose, merchantability, or infringement of any patent, copyright or other intellectual property right. Intel products are not designed, intended or authorized for use in any medical, life saving, or life sustaining applications or for any other application in which the failure of the Intel product could create a situation where personal injury or death may occur. Intel may make changes to specifications and product descriptions at any time, without notice. Intel server boards contain a number of high-density VLSI and power delivery components that need adequate airflow for cooling. Intel's own chassis are designed and tested to meet the intended thermal requirements of these components when the fully integrated system is used together. It is the responsibility of the system integrator that chooses not to use Intel developed server building blocks to consult vendor datasheets and operating parameters to determine the amount of airflow required for their specific application and environmental conditions. Intel Corporation can not be held responsible if components fail or the server board does not operate correctly when used outside any of their published operating or non-operating limits. Intel, Intel Pentium, and Intel Xeon are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. * Other names and brands may be claimed as the property of others. Copyright 2007, Intel Corporation. All Rights Reserved ii Intel Remote Management Module 2

3 Safety Information Important Safety Instructions Read all caution and safety statements in this document before performing any of the instructions. See also Intel Server Boards and Server Chassis Safety Information on the Intel Server Deployment Toolkit 2.0 CD and/or at motherboards/server/sb/cs htm. Wichtige Sicherheitshinweise Lesen Sie zunächst sämtliche Warnund Sicherheitshinweise in diesem Dokument, bevor Sie eine der Anweisungen ausführen. Beachten Sie hierzu auch die Sicherheitshinweise zu Intel-Serverplatinen und Servergehäusen auf der Intel Server Deployment Toolkit 2.0 CD oder unter Consignes de sécurité Lisez attention toutes les consignes de sécurité et les mises en garde indiquées dans ce document avant de suivre toute instruction. Consultez Intel Server Boards and Server Chassis Safety Information sur le Intel Server Deployment Toolkit 2.0 CD ou bien rendez-vous sur le site htm. Instrucciones de seguridad importantes Lea todas las declaraciones de seguridad y precaución de este documento antes de realizar cualquiera de las instrucciones. Vea Intel Server Boards and Server Chassis Safety Information en el Intel Server Deployment Toolkit 2.0 CD y/o en support.intel.com/support/motherboards/server/sb/cs htm. iii

4 重 要 安 全 指 导 在 执 行 任 何 指 令 之 前, 请 阅 读 本 文 档 中 的 所 有 注 意 事 项 及 安 全 声 明 和 / 或 上 的 Intel Server Boards and Server Chassis Safety Information( Intel 服 务 器 主 板 与 服 务 器 机 箱 安 全 信 息 ) iv Intel Remote Management Module 2

5 Warnings Heed safety instructions: Before working with your server product, whether you are using this guide or any other resource as a reference, pay close attention to the safety instructions. You must adhere to the assembly instructions in this guide to ensure and maintain compliance with existing product certifications and approvals. Use only the described, regulated components specified in this guide. Use of other products / components will void the UL listing and other regulatory approvals of the product and will most likely result in noncompliance with product regulations in the region(s) in which the product is sold. System power on/off: The power button DOES NOT turn off the system AC power. To remove power from system, you must unplug the AC power cord from the wall outlet. Make sure the AC power cord is unplugged before you open the chassis, add, or remove any components. Hazardous conditions, devices and cables: Hazardous electrical conditions may be present on power, telephone, and communication cables. Turn off the server and disconnect the power cord, telecommunications systems, networks, and modems attached to the server before opening it. Otherwise, personal injury or equipment damage can result. Electrostatic discharge (ESD) and ESD protection: ESD can damage disk drives, boards, and other parts. We recommend that you perform all procedures in this chapter only at an ESD workstation. If one is not available, provide some ESD protection by wearing an antistatic wrist strap attached to chassis ground any unpainted metal surface on your server when handling parts. ESD and handling boards: Always handle boards carefully. They can be extremely sensitive to ESD. Hold boards only by their edges. After removing a board from its protective wrapper or from the server, place the board component side up on a grounded, static free surface. Use a conductive foam pad if available but not the board wrapper. Do not slide board over any surface. Installing or removing jumpers: A jumper is a small plastic encased conductor that slips over two jumper pins. Some jumpers have a small tab on top that you can grip with your fingertips or with a pair of fine needle nosed pliers. If your jumpers do not have such a tab, take care when using needle nosed pliers to remove or install a jumper; grip the narrow sides of the jumper with the pliers, never the wide sides. Gripping the wide sides can damage the contacts inside the jumper, causing intermittent problems with the function controlled by that jumper. Take care to grip with, but not squeeze, the pliers or other tool you use to remove a jumper, or you may bend or break the pins on the board. Intel Remote Management Module 2 v

6 vi Intel Remote Management Module 2

7 Preface About this Manual Thank you for purchasing and using the Intel Remote Management Module 2. This manual is written for system technicians who are responsible for troubleshooting, upgrading, and repairing this management module. This document provides a brief overview of the product features and instructions on how to install and operate the Intel Remote Management Module 2. Manual Organization Chapter 1 provides a brief overview of the Intel Remote Management Module 2. In this chapter, you will find a list of the module features and product diagrams. Chapter 2 provides instructions on installing the module. Chapter 3 provides instructions for using psetup to to identify the Intel RMM2 IP address and change configuration options. It also tells you how to set the Intel RMM2 back to the factory defaults. Chapter 4 describes the Intel RMM2 Web interface. Chapter 5 outlines the steps to use the remote console (KVM) connection. vii

8 viii Intel Remote Management Module 2

9 Contents Safety Information... iii Important Safety Instructions... iii Wichtige Sicherheitshinweise... iii Consignes de sécurité... iii Instrucciones de seguridad importantes... iii Warnings... v Preface... vii About this Manual... vii Manual Organization... vii Chapter 1: Introduction Major Features...18 Supported Operating Systems...18 Supported Managed Server Operating Systems...19 Supported Client System Operating Systems...19 Chapter 2: Hardware Installation and Initial Configuration Before You Begin...21 Tools and Supplies Needed...21 Installation on Intel Server Board S5000XAL or S5000PAL...21 Installation on Intel Server Board S5000PSL...23 Initial Network Configuration...24 Chapter 3: Server Utilities Psetup...25 Graphical User Interface...25 Linux Command Line Interface...28 Resetting the Intel RMM2 to its Factory Settings...29 Chapter 4: Using the Web Interface Navigation...32 Online Help...34 Logging Out...34 Remote Control...35 Virtual Media...37 System Health...40 User Management...44 KVM Settings...48 Device Settings...53 Maintenance...69 Intel Remote Management Module 2 ix

10 Chapter 5: Remote Console (KVM)...75 Main Window Remote Console Status Line Remote Console Control Bar Ctrl+Alt+Delete Drive Redirection Sync Mouse Single/Double Mouse Mode Remote Console Options Appendix A: Configuring a RADIUS Server...83 Preliminary Steps Add and Configure a RADIUS Client Set up a Custom Remote Access Policy Appendix B: SMASH Command-line Protocol...85 CLP to CIM Mapping Examples of SMASH CLP Commands Appendix C: GNU General Public License (GPL)...89 Appendix D: OpenLDAP Public License...95 Appendix E: Getting Help...97 World Wide Web...97 Telephone x Intel Remote Management Module 2

11 List of Figures Figure 1. Intel Remote Management Module 2 and NIC Figure 2. Installing the Intel RMM Figure 3. Installing the NIC Figure 4. Installing the Intel RMM Figure 5. Installing the NIC Figure 6. Windows* Version of psetup Figure 7. Linux* Version of psetup Intel Remote Management Module 2 xi

12 xii Intel Remote Management Module 2

13 List of Tables Table 1. Psetup Linux Commands...28 Intel Remote Management Module 2 xiii

14 xiv Intel Remote Management Module 2

15 1 Introduction The Intel Remote Management Module 2 kit contains these items: Intel Remote Management Module 2 Network Interface Card (NIC) module Plastic bag containing screws, slot bracket, three plastic standoffs, and cabling The Module is supported on these Intel server boards: All SKUs of Intel Server Board S5000XAL and S5000PAL All SKUs of Intel Server Board S5000XSL and S5000PSL Intel Server Board SC5400RA The installation process varies by server board and chassis. AF Figure 1. Intel Remote Management Module 2 and NIC 17

16 Major Features The Intel RMM2 is an integrated server system solution. Based on an embedded operating system, it provides stability and availability independently of the state of the server operating system. As a system administrator, you can use the Intel RMM2 to gain location-independent remote access to respond to critical incidents and to perform maintenance. The Intel RMM2 offers convenient, remote KVM access and control across the LAN or through the Internet. It captures, digitizes, and compresses video and transmits it with keyboard and mouse signals to and from a remote computer. Remote access and control software runs on Intel RMM2 embedded processors so there is no impact to the server operation or network performance. In addition, the Intel RMM2 offers integrated remote power management using IPMI. Key features of the Intel RMM2 add-on card are: Embedded Web UI - Remote Power on\off, system health, system info, Intel RMM2 Firmware Update, Event log includes Intel RMM2 events KVM redirection via Dedicated NIC- high performance, multiple concurrent sessions USB 2.0 media redirection - boot over remote media Security - SSL, LDAP, SSH, RADIUS support OEM Customization Alerting for Intel RMM2 events SMASH CLI/CLP, WS- MAN, SNMP traps for Intel RMM2 events Soft Keyboard via KVM (Multiple Language support) IPMI V2.0 Compliance Automatically senses video resolution for best possible screen capture High-performance mouse tracking and synchronization Allows remote viewing and configuration in pre-boot POST and BIOS setup Supported Operating Systems The Intel RMM2 runs independently of the operating system on the server where it is installed except during remote console (KVM) connections. During remote console connections the console system keyboard, mouse and video operate as if you were at the server where the Intel RMM2 is connected. During remote console connections the interaction with the host operating system limits the support to operating systems that have been validated. 18 Intel Remote Management Module 2

17 Supported Managed Server Operating Systems Microsoft Windows 2003* Server with Service Pack 1 or later and all recent updates Red Hat* Enterprise Linux Advanced Server 4 Supported Client System Operating Systems These client operating system and Internet browser combinations have been tested: Red Hat Linux 4 Red Hat Linux 4 ES, with Firefox* SuSE* 9 Pro 9.1, with Mozilla Microsoft Windows XP* Pro with Service Pack 2, with Internet Explorer* Microsoft Windows 2003 ES with Service Pack 1, with Internet Explorer Intel Remote Management Module 2 19

18 20 Intel Remote Management Module 2

19 2 Hardware Installation and Initial Configuration Before You Begin Before working with your server product, pay close attention to the Safety Information at the beginning of this manual. Remove AC power from the server before installing the Intel Remote Management Module 2. Tools and Supplies Needed Phillips* (cross head) screwdriver (#1 bit and #2 bit) Needle nosed pliers Antistatic wrist strap and conductive foam pad (recommended) Installation on Intel Server Board S5000XAL or S5000PAL 1. Write down the MAC address that is on the label attached to the the Intel RMM2. 2. Align the pre-installed standoff on the Intel RMM2 with the hole in the server board. See letter A in the following figure. Letter C indicates the rear of the system. 3. Attach the Intel RMM2 to the connector on the server board labeled RMM. Snap the standoff into the corresponding hole in the server board. See letter B in the figure. 21

20 A B C AF Figure 2. Installing the Intel RMM2 4. Push out and remove the metal cover on the chassis where the NIC RJ-45 recepticle will align. 5. Insert three plastic standoffs into the holes of the Intel RMM2 NIC module. See letter A in the following figure. 6. Mount the NIC module to the header on the server board, pushing the three standoffs into the corresponding holes. This aligns the RJ-45 with the opening in the chassis. A B AF Figure 3. Installing the NIC 7. Replace the chassis cover, attach the AC power cord, and connect a network cable to the Intel RMM2 NIC. 22 Intel Remote Management Module 2

21 Installation on Intel Server Board S5000PSL 1. Write down the MAC address that is on the label attached to the the Intel RMM2. 2. Align the pre-installed standoff on the Intel RMM2 with the hole in the server board. See letter A in the following figure. Letter C indicates the rear of the system. 3. Attach the Intel RMM2 to the connector on the server board labeled RMM. Snap the standoff into the corresponding hole in the server board. See letter B in the figure. C B A AF Figure 4. Installing the Intel RMM2 4. Use the screws provided to attach the NIC module to the add-in card slot bracket. See letter A in the following figure. 5. Mount the bracket with the NIC module in a chassis slot near the server board connector for the cable. 6. Attach the cable from the server board to the NIC module as shown. See letter B in the figure. Intel Remote Management Module 2 23

22 B A AF Figure 5. Installing the NIC 7. Replace the chassis cover, attach the AC power cord, and connect a network cable to the Intel RMM2 NIC. Initial Network Configuration When the system is first powered on after installing the Intel RMM2, the module uses a DHCP server to obtain a network IP address. If no DHCP server is available, then the Intel RMM2 needs to be configured with a static IP address. Use the psetup utility to discover the Intel RMM2 and assign a static IP address. The psetup utiltiy also lets you view the DHCP IP address. Psetup is available in Linux* and Windows* versions. See Section 3 for additional details on psetup. 24 Intel Remote Management Module 2

23 3 Server Utilities Psetup Psetup displays the IP address that is assigned to the Intel RMM2 by the DHCP server or changes the device's initial network configuration. It allows to access the Intel RMM2 even no IP address is configured. Psetup can access the Intel RMM2 locally, on the host in which the Module is installed, or remotely. The tool uses an internal USB interface to connect to the module. Remotely, psetup can be started on any host on the same subnet (broadcast domain) as the Intel RMM2. Psetup uses UDP broadcasts to access the module. To make any configuration changes using psetup, you will need to enter the login name and password for the super user. The default login name admin and the default password is password. It is suggested you change the password right after installing the Intel RMM2. Graphical User Interface When first launched, psetup scans and detects all Intel RMM2 modules on the local host and on the subnet. The MAC addresses of all detected modules are available from a dropdown list that allows you to connect to and configure individual Intel RMM2 modules. If necessary, restart the auto-detection by clicking on Refresh (Linux) or Refresh Devices (Windows). Intel Remote Management Module 2 25

24 Windows Version of psetup Figure 6. Windows* Version of psetup The device MAC address is displayed in the upper left corner of the screen. This is the MAC address that is printed on the label attached to the Intel RMM2 hardware. To manually detect the MAC address, click Refresh Devices. Click Query Device to display the data for that MAC address. To change the password: 1. Use the MAC address to make sure you are looking at the properties for the correct device. 2. Enter the user name in Super user login. The default is admin (without the quotes). 3. Enter the current password in Super user password. The default is password (without the quotes). 4. Enter the new password in New super user password. 5. Re-type the password in New password (confirm). 6. Click OK to save the change. To change network values: 1. Use the MAC address to make sure you are looking at the properties for the correct device. 2. Change the network values as necessary. 3. Enter a valid user name in Super user login. 26 Intel Remote Management Module 2

25 Linux Version of psetup 4. Enter the password for the user in Super user password. 5. Click Setup Device to save your changes. Figure 7. Linux* Version of psetup The device MAC address is displayed in the upper left corner of the screen. This is the MAC address that is printed on the label attached to the Intel RMM2 hardware. To manually detect the MAC address, click Refresh. To change the password: 1. Use the MAC address to make sure you are looking at the properties for the correct device. 2. Enter the user name in Super user login. The default is admin (without the quotes). 3. Enter the current password in Super user password. The default is password (without the quotes). 4. Enter the new password in New super user password. 5. Re-type the password in New password (confirm). Intel Remote Management Module 2 27

26 6. Click Query Device to save the change. To change network values: 1. Use the MAC address to make sure you are looking at the properties for the correct device. 2. Change the network values as necessary. 3. Enter a valid user name in Super user login. 4. Enter the password for the user in Super user password. 5. Click Setup Device to save your changes. Linux Command Line Interface You can operate psetup from a Linux command line. The following list shows the command syntax and their usage. Example commands are shown at the end of the section: Table 1. Psetup Linux Commands Command Use Example -mac <device MAC address> Shows the current network configuration. Command: test@teststation:~# /home/test/psetup -mac 00:0D:5D:00:65:78 Results: IP auto configuration: dhcp IP address: Subnet mask: Gateway: ip <new IP address> Set a new IP address. Command: test@teststation:~# /home/test/psetup -mac 00:0D:5D:00:65:78 -ip login super -pw pass Results: Device configured successfully. -ipacp <dhcp bootp none> Set the auto configuration. Command: test@teststation:~# /home/test/psetup -mac 00:0D:5D:00:65:78 -ipacp none -login super -pw pass Results: Device configured successfully. 28 Intel Remote Management Module 2

27 Table 1. Psetup Linux Commands Command Use Example -netmask <net mask> Set a new netmask. Command: test@teststation:~# /home/test/psetup -mac 00:0D:5D:00:65:78 -netmask login super -pw pass Results: Device configured successfully. -gateway <gateway address> Set a new gateway address. Command: test@teststation:~# /home/test/psetup -mac 00:0D:5D:00:65:78 -gateway login super -pw pass Results: Device configured successfully. -login <username> -pw <password> -pw-new <password> A valid user name with administration rights is required to change the network configuration. Password for username used with the -login parameter. Assign a new password for the selected user. Command: test@teststation:~# /home/test/psetup -mac 00:0D:5D:00:65:78 -login super -pw pass Results: Device configured successfully. test@teststation:~# /home/test/psetup -mac 00:0D:5D:00:65:78 -pw-new newpass -login super -pw pass Results: Device configured successfully. Resetting the Intel RMM2 to its Factory Settings Use the KiraTool either locally or from a remote connection to reset the Intel RMM2 to the factory default settings. Locally: kiratool -a -u admin -p <password> defaults Remotely: kiratool -a -l u admin -p <password> defaults Intel Remote Management Module 2 29

28 30 Intel Remote Management Module 2

29 4 Using the Web Interface The Intel RMM2 module features an embedded operating system and applications that offer a variety of standardized interfaces. The interfaces are accessed using TCP/IP protocol. HTTP/HTTPS :Full access is provided by the embedded web server. You can access the Intel RMM2 using the unsecured HTTP protocol or using the encrypted HTTPS protocol. HTTPS is preferred. Telnet: A standard Telnet client can be used to access most of the Intel RMM2 functionality, including text-mode console redirection. When connected using telnet these commands are supported: help, quit, version, terminal, and clp. SSH: A Secure Shell (SSH) client. To access the remote host system through a securely encrypted connection, use a browser that supports the HTTPS protocol. Strong security is only assured by using a 128-bit key length. Older browsers may not have a strong 128-bit encryption algorithm. If you are using Windows Internet Explorer, verify strong encryption by opening the Help / About menu of your browser to see the key length. The following figure shows this information in Internet Explorer* 6.0. To use the remote console (KVM) window of your managed server, Java Runtime Environment* (JRE) version 1.4 or higher must be installed. If the browser has no Java support (such as on a small handheld device), you can maintain your remote host system using the administration forms displayed by the browser itself. Intel Remote Management Module 2 31

30 Log into the Intel RMM2 by entering the configured IP address of the Intel RMM2 add-on card into your web browser, such as or The first time you log in, use the default user name and password. The password is case sensitive. User name = admin Password = password After the initial log in, System Administrators and IT professionals can change passwords, create new users and have full control over access to the Intel RMM2. Note: The Intel RMM2 has a host-independent processor and memory that each have a limits in terms of the processing instructions and memory space. To guarantee an acceptable response time we recommend you do not exceed 25 users connected to the Intel RMM2 at the same time. Navigation After logging in to the Intel RMM2 module, the main page of the Intel RMM2 displays. This web page consists of three parts: The buttons at the top allow you to navigate within the Home web page, KVM and Logout screens. The lower left frame contains a navigation bar and allows you to switch between the different sections of the Intel RMM2 module. In the right frame, task-specific information is displayed. The information shown depends on choices you make. 32 Intel Remote Management Module 2

31 Navigation buttons Navigation bar Taskspecific information Intel Remote Management Module 2 33

32 Online Help The Web front end includes online help. To get information about a topic or group of options, click the question mark near the group title in the right page. A new browser opens. Logging Out This link logs out the current user and presents a new login screen. You will be automatically logged out if there is no activity on the web page for a half hour. There is no timeout associated with the Remote Console (KVM) connection. It must be manually closed by the user. 34 Intel Remote Management Module 2

33 Remote Control Remote Control has two options: KVM Console and Remote Power. Intel Remote Management Module 2 35

34 KVM Console To open the KVM console either click on the menu entry on the left or on the console picture in the right pane. To refresh the display click Refresh Remote Power See Chapter 4, Remote Console (KVM) on page 75 for information about the KVM Console. The buttons on the remote power via IPMI screen are allow you to power cycle or reset the remote server. This does not affect the operation of the Intel RMM2. 36 Intel Remote Management Module 2

35 Virtual Media This menu has two options: Floppy Disk Image and Drive Redirection. Intel Remote Management Module 2 37

36 Floppy Disk Image Drive Redirection Two virtual floppies are possible. Use this screen to configure the path to the floppy images. To open the file selection dialog click Browse and select the desired image file. The maximum image size is limited to 1.44 MB. To use a larger image mount this image via Windows Share (or SAMBA). Click Upload to initiate the transfer of the image file into the Intel RMM2 memory. This image file is kept in the Intel RMM2 memory until the end of the current session, until you log out, or until you initiate a reboot of the Intel RMM2. Drive redirection allows you to use a virtual drive on the remote computer. Instead of using an image file, you work with a drive from your local computer on the remote system. The drive is shared over a TCP network connection. Devices like as floppy drives, hard drives, CD-ROM drives, and other removable devices, like USB drives, can be redirected. You can enable write support for the remote machine to be able to write data to the local drive. The screen shown above displays the status. It cannot be used to establish virtual media or drive redirection. To use virtual media or drive redirection you must be in the remote console window. Use the drive redirection with care, especially write support. Drive redirection works on a level below the operating system. Neither the local nor the remote operating system is aware that the drive is redirected. This may lead to inconsistent data as soon as either the local or remote operating systems writes data to the device. If write support is enabled, then the remote computer might damage the data and the file system on the redirected 38 Intel Remote Management Module 2

37 device. If the local operating system writes data to the redirected device, then the drive cache of the operating system of the remote host might contain older data. This may confuse the remote host's operating system. Disable Drive Redirection: If checked, then drive redirection is unavailable. Force read-only connections: If checked, then write support for the drive redirection is unavailable. It is not possible to write on a redirected device. Intel Remote Management Module 2 39

38 System Health This menu has five options: System Information Chassis Control Monitor Sensors System Event Log The Intelligent Platform Management Interface (IPMI) support on the Intel RMM2 allows you to power cycle the remote host system or to perform a remote hard reset. You can see the remote hardware event log and interrogate the state of some system sensors, such as the temperature sensor. 40 Intel Remote Management Module 2

39 System Information This page displays information from the field replaceable unit (FRU) repository on the host system. Chassis Control Chassis control lets you obtain information about the chassis, power cycle the remote system, and turn on the blue system ID LED. Intel Remote Management Module 2 41

40 Monitor Sensors The monitor sensors screen provides a visual report on individual sensor statuses. Threshold-based sensors within a normal range of operation are shown in green and sensors in a critical state are shown in red. 42 Intel Remote Management Module 2

41 System Event Log The System Event Log screen shows the hardware event logs. This information is maintained by the baseboard management controller on the remote server. At the bottom of the screen is a button to clear the log. This log should not be confused with the log maintained within the Intel RMM2. Intel Remote Management Module 2 43

42 User Management This menu has three options: Change Password Users & Groups Permissions The Intel RMM2 comes with a pre-configured user account for the administrator / superuser. The superuser has the login name admin with all rights needed to configure the device and to access all of the functions of the IIntel RMM2. The Intel RMM2 has pre-defined user groups: Admin: User group for the administrator / superuser. Unknown: A restricted group for users without a specific group. None: Indicates a user has no group and instead owns a private set of permissions. A superuser cannot delete the pre-defined groups. The superuser can create and delete other groups. 44 Intel Remote Management Module 2

43 Change Password Users & Groups To change your password: 1. Type your current password in Old Password. 2. Type the new password in New Password. Passwords must be at least four characters long. 3. Retype the new password in Confirm New Password. 4. Click Apply to submit your changes. Intel Remote Management Module 2 45

44 User Management Existing users: Select an exist user to modify. After selecting a user, click Lookup to see the user s information. New User name: The user login name for the account currently selected or being created. Password: The password for the user name. Confirm password: Confirm the password. address: Optional. Mobile number: Optional telephone number. User Group: Each user can be a member of a group. This can be one of the built-in groups or a new group. This group defines a set of privilege levels. If a user has no group, the a individual privilege level set can be set. To create a user click Create. Click Modify to process changes for an existing user. Click Delete to delete the displayed user. Group Management Existing groups: Select an existing group to modify. After selecting a group, click Lookup to see the group s information. New User name: The user login name for the account currently selected or being created. To create a group click Create. Click Modify to process changes for an existing group. Click Delete to delete the displayed group. 46 Intel Remote Management Module 2

45 Permissions This page allows you to set these permissions for each group or group-less user. One permission set per user is allowed. Either the user inherits permissions from his/her group, or, for user does not belong to a group, the permissions can be set individually. To work with permissions: 1. Select the item (group or group-less user) from the appropriate drop-down list. All changes you make affect the permission set for the selected entity. 2. Click on the individual items to allow or deny functionality. The fields preceded by RC settings pertain Remote Console settings. Intel Remote Management Module 2 47

46 KVM Settings This menu has two options: User Console and Keyboard/Mouse. 48 Intel Remote Management Module 2

47 User Console Intel Remote Management Module 2 49

48 Remote Console Settings for User The selection box displays the user ID for which the values are shown and for which the changes will take effect. Select the user from the selection box and press Update. The user settings are displayed below. You can change the settings of other users only if you are a member of the superuser group. Transmission Encoding The Transmission Encoding setting allows changing the image-encoding algorithm that is used to transmit the video data to the Remote Console window. You can optimize the speed of the remote transmission depending on the number of users working at the same time and the bandwidth of the connection line (Modem, ISDN, DSL, LAN, etc.). Automatic detection: The encoding and the compression level is determined from the available bandwidth and the content of the video image. Pre-configured: The pre-configured settings deliver the best result because of optimized adjustment of compression and color depth for the network speed. Manually: Allows adjustments of the compression rate and the color depth. Depending on the selected compression rate, the data stream between the Intel RMM2 and the Remote Console are compressed to save bandwidth. Since high compression rates are very time consuming, they should not be used while several users are accessing the Intel RMM2 simultaneously. The standard color depth is 16-bit (65536 colors). The other color depths are intended for slower network connections to provide faster data transmissions. Compression level 0 (no compression) uses a 16-bit color depth. At lower bandwidths only 4-bit (16 colors) and 2 Bit (4 gray scales) are recommended for typical desktop interfaces. Photo-like pictures have best results with 4 Bit (16 gray scales). 1 Bit color depth (black/white) should only be used for extremely slow network connections. Remote Console Type Specifies which Remote Console viewer to use. Default Java Virtual Machine* (JVM): Uses the default JVM of your web browser. This may be the Microsoft JVM for the Internet Explorer or the Sun JVM if it is configured this way. Use of the Sun JVM may also be forced (see below). Java Virtual Machine and Java Runtime Engine (JRE) are sometimes used interchangeably in this User Guide. Sun Microsystems* Java Browser Plugin: Instructs the web browser of your system to use the JVM of Sun Microsystems. The JVM in the browser is used to run the code for the Remote Console window which is actually a Java Applet. If you check this box for the first time on your administration system and the appropriate Java plug-in is not yet installed on your system, it may be downloaded and installed automatically. However, in order to make the installation possible, you still have to answer the according dialogs with "yes". The download volume is around 11 Mbytes. The advantage of downloading Sun's JVM is the usage of a stable and identical JVM across different platforms. The Remote Console software is 50 Intel Remote Management Module 2

49 optimized for this JVM version and offers a wider range of functionality when run in SUN's JVM. Miscellaneous Remote Console Settings Start in Monitor Mode: Sets the initial value for the monitor mode. By default the monitor mode is disabled. In case you switch it on, the Remote Console window will be started in a read only mode, i.e. only remote video is visible - remote keyboard and mouse are not working. Start in Exclusive Access Mode: Enables the exclusive access mode immediately at Remote Console startup. This forces the Remote Consoles of all other users to close. Nobody else can open the Remote Console at the same time again until you disable this feature or log off. Mouse Hotkey Allows to specify a hotkey combination which starts either the mouse synchronization process if pressed in the Remote Console or is used to leave the single mouse mode. This is only available if you have selected the Mouse Mode Other Operating System. Remote Console Button Keys Button Keys allow the simulation of keystrokes on the remote system that cannot be generated locally. The reason for this might be a missing key or just the fact that the local operating system of the Remote Console is unconditionally catching this keystroke already. Typical examples are "Ctrl+Alt+Delete" on Windows and DOS, that is always caught, or the key sequence "Ctrl+Backspace" on Linux that can be used for terminating the X-Server. To define a new Button Key or to adjust an existing key see the rules that describe the setting for a key. In general, the syntax for a key is as follows: [confirm] <keycode>[+ - >[*]<keycode>] A term in brackets is optional. The asterisk at the end means that you add additional keys. It inserts a 100-millisecond pause. The term confirm adds an confirmation dialog that is displayed before the key strokes are sent to the remote host. The keycode is the key to be sent. Multiple key codes can be concatenated with a plus, a minus, or an > sign. The plus sign builds key combinations. All the keys are pressed until a minus sign or the end of the combination is encountered. The pressed keys are released in reversed sequence. For example, the key combination of Ctrl, Alt, and F2 is represented by Ctrl+Alt+F2. The minus sign builds single, separate key presses and key releases. > releases only the last key. For additional button keys click More entries to open a list of additional entry fields. For a full list of key codes and aliases see the Intel Remote Management Module 2Technical Product Specification. Intel Remote Management Module 2 51

50 Keyboard/Mouse These settings are recommended mouse control when using Remote Console connections. Microsoft Windows 2000*, 2003*, XP (all versions): Choose the Auto mouse speed For Windows XP, disable the option in the Windows Control Panel, enhance pointer precision. Linux: Choose Other Operating Systems for the USB Mouse Type and choose the Auto Mouse speed option. for both USB and PS/2 mice. Key Release Timeout: Check the enabled box if you are accessing the Intel RMM2 over a slow or congested network. In such a situation you transmit a network packet containing the key press to the Intel RMM2. When you release the key, then the Intel RMM2 receive a corresponding release packet. When the network is slow then it takes too long for the release packet to arrive, misleading the Intel RMM2 to replicate the key press, as if you are holding down the desired key. The Key Release Timeout tells the Intel RMM2 to consider the key as released, even if no release packet arrived, avoiding keys being unintentionally repeated. USB Mouse Type: Enables the USB mouse type. Choose an appropriate option from the selection box. Choose between MS Windows 2000 or newer for MS Windows 2000, 2003 Server, XP, or Other Operating Systems for MS Windows NT*, Linux, or OS X. In MS Windows 2000 or newer mode, the remote mouse is always synchronized with the local mouse. Mouse Speed Auto: Use this option if the mouse settings on the host use an additional acceleration setting. The Intel RMM2 tries to detect the acceleration and speed of the mouse during the mouse sync process. Mouse Speed Fixed Scaling:: Use a direct translation of mouse movements between the local and the remote pointer. You may also set a fixed scaling that determines the amount the remote mouse pointer is moved when the local mouse pointer is moved by one pixel. This option only works when the mouse settings on the host are linear. 52 Intel Remote Management Module 2

51 Device Settings This menu has nine options: Network Dynamic DNS Security Certificate Date/Time Authentication SMTP Settings Event Log SNMP Settings Intel Remote Management Module 2 53

52 Network The Network Settings screen lets you change network-related parameters. Once applied the new network settings immediately take effect. Warning: Changing the network settings of the Intel RMM2 might result in losing connection to it. In case you change the settings remotely make sure that all the values are correct and you still have an option to access the Intel RMM2. Network Basic Settings IP auto configuration: Select DHCP or BOOTP or None. If you choose None then IP auto configuration is disabled and the IP address and netmask need to be configured. If required, gateway and DNS server IP address must also be set. Preferred host name (DHCP only): Preferred host name to request from DHCP server. Whether the DHCP server takes the INTEL Intel RMM2 module's suggestion into account or not depends on the server configuration. IP address: IP address in the usual dot notation. Subnet Mask: The net mask of the local network. Gateway IP address: In case the INTEL Intel RMM2 module should be accessible from networks other than the local one, this IP address must be set to the local network router's IP address. 54 Intel Remote Management Module 2

53 Primary DNS Server IP Address: IP address of the primary Domain Name Server in dot notation. This option may be left empty, however the INTEL Intel RMM2 module will not be able to perform name resolution. Secondary DNS Server IP Address: IP address of the secondary Domain Name Server in dot notation. It will be used in case the Primary DNS Server cannot be contacted. Network Miscellaneous Settings Remote Console and HTTPS port: Port number at which the INTEL Intel RMM2 module's Remote Console server and HTTPS server are listening. If left empty the default value (port 443) will be used. HTTP port: Port number at which the INTEL Intel RMM2 module's HTTP server is listening. If left empty the default value (port 80) will be used. Telnet port: Port number at which the Intel RMM2 module's Telnet server is listening. If left empty the default value (port 23) will be used. SSH port: Port number at which the Intel RMM2 module's SSH (Secure Shell) server is listening. If left empty the default value (port 22) will be used. Bandwidth Limit: The maximum network traffic generated through the Intel RMM2 module Ethernet device. Value in Kbit/s. Enable Telnet: This enables the Telnet client mode. Enable SSH: This enables the SSH (Secure Shell) client mode. Disable Setup Protocol: Enable this option to exclude the Intel RMM2 module from the setup protocol. LAN Interface Settings This area displays the current settings for the Ethernet/LAN interface of the Intel RMM2 module. You may choose between auto negotiation and a fixed setting for the Ethernet transceiver settings "interface speed" and "duplex mode" in case auto negotiation does not work correctly. LAN interface speed: Depending on your network connection you may select a speed value for this interface. To adjust the interface automatically choose "autodetect" (default value). If this selection results in misbehavior of the interface, choose one of other speed options to work with. The interface will transmit and receive data with that fixed speed. LAN interface duplex mode: If necessary, select a specific duplex mode. The default value is autodetect, which leads to an automatic setting of the duplex mode depending on your network (recommended). As an alternative, you can set the interface to either half duplex or full duplex mode. Intel Remote Management Module 2 55

54 Dynamic DNS The Intel RMM2 can be accessed with the IP address of the DSL router that is dynamically assigned by the provider. Since the administrator does not know the IP address assigned by the provider, the Intel RMM2 connects to a special dynamic DNS server at regular intervals and registers its IP address there. The administrator can contact this server to obtain the IP address. The administrator has to register the Intel RMM2 that is supposed to take part in the service with the dynamic DNS server and assign a hostname to it. A nickname and a password are obtained in the registration process. This account information, together with the hostname, is needed to determine the IP address of the registered Intel RMM2. Perform these steps to enable dynamic DNS: 1. Make sure that the LAN interface of the Intel RMM2 is properly configured. 2. Enter the Dynamic DNS Settings configuration dialog. 3. Enable Dynamic DNS and change the settings as necessary. Enable Dynamic DNS: This enables the Dynamic DNS service. This requires a configured DNS server IP address. Dynamic DNS server: This is the server name where Intel RMM2 module registers itself in regular intervals. Currently this is a fixed setting since only dyndns.org is supported for now. Hostname: This is the hostname of the Intel RMM2 module that is provided by the Dynamic DNS Server. (use the whole name including the domain, e.g. testserver.dyndns.org, not just the actual hostname) Username: You have registered this username during your manual regist ration with the Dynamic DNS Server. Spaces are not allowed in the Nickname. 56 Intel Remote Management Module 2

55 Password: You have used this password during your manual registration with the Dynamic DNS Server. Check time: The Intel RMM2 module card registers itself in the Dynamic DNS server at this time. Check interval: This is the interval for reporting again to the Dynamic DNS server by the Intel RMM2 module. Delete saved external IP is useful if you want to update the externally saved IP address. To delete the saved address click Delete. Note: The Intel RMM2 has its own independent real-time clock. Make sure the Intel RMM2 time setting is correct. A freely-available dynamic DNS service (dyndns.org) can be used in the following scenario: Intel Remote Management Module 2 57

56 Security HTTP Encryption Force HTTPS for Web access: If checked, access to the web front-end is only possible using a HTTPS connection. To create your own SSL certificate that is used to identify the Intel RMM2, see Certificate on page Intel Remote Management Module 2

57 KVM Encryption This option controls the encryption of the KVM protocol. This protocol is used by the Remote Console to transmit both the screen data to the administrator machine and keyboard and mouse data back to the host. Off: No encryption is used. Try: The applet tries to make an encrypted connection. If the connection cannot be established, an unencrypted connection is used. Force: The applet tries to make an encrypted connection. An error is reported if the connection fails. IP Access Control Enable IP Access Control: If checked, the firewall allows an explicit block or allows a connection from certain client IP addresses. If default policy is set to drop. A list of IP addresses or address ranges can be configured to be exceptionally accepted. If default policy is set to accept, a list of IP addresses or address ranges can be configured to be exceptionally dropped. The network or address range has to be configured in CIDR (Classless Inter-Domain Routing) notation, e.g /24. It have to consist of a IP address followed by a slash and the number relevant bits belonging to the network or address range (counting from left). Group Based System Access Control Enable IP Access Control: User Blocking Max number of failed logins: The number times a user should be allowed to attempt to login to the Intel RMM2. Each failed log in attempt is counted. There is no default value, Block time (minutes): How long the Intel RMM2 should block a user from attempting to log in again after the max number of failed logins is reached. There is no default value. Login limitations Enable Single Login Limitation: Specify that only one user can be logged into the Intel RMM2 at a time. Password aging limitation: The time interval at which users are required to change their passwords. Intel Remote Management Module 2 59

58 Certificate The Intel RMM2 uses the Secure Socket Layer (SSL) protocol for any encrypted network traffic between itself and a connected client. During the connection establishment the Intel RMM2 module has to expose its identity to a client using a cryptographic certificate. Upon delivery this certificate and the underlying secret key is the same for all Intel RMM2 module ever produced and certainly will not match the network configuration that will be applied to the Intel RMM2 module cards by its user. The certificate's underlying secret key is also used for securing the SSL handshake. Hence, this is a security risk (but far better than no encryption at all). However, it is possible to generate and install a new base 64 x.509 certificate that is unique for each Intel RMM2. In order to do that, the Intel RMM2 is able to generate a new cryptographic key and the associated Certificate Signing Request (CSR) that needs to be certified by a certification authority (CA). A certification authority verifies that you are the person who you claim you are and signs and issues a SSL certificate to you. Use these steps to create a SSL certificate: 1. Fill in the fields on the Certificate Signing Request screen. 2. Click Create to initiate the Certificate Signing Request generation. 3. Click CSR Download to download the CSR to your administration system. 4. Send the saved CSR to a CA for certification. You will get the new certificate from the CA after an authentication process that depends on the CA. 5. Click Upload to upload the certificate to the Intel RMM2. After completing these steps, the Intel RMM2 has its own certificate to identify the Module to its clients. Caution: If you destroy the CSR on the Intel RMM2 there is no way to retrieve it. You must repeat the steps above. 60 Intel Remote Management Module 2

59 Common name: This is the network name of the Intel RMM2 module once it is installed in the user's network (usually the fully qualified domain name). It is identical to the name that is used to access the Intel RMM2 module with a web browser but without the prefix " In case the name given here and the actual network name differ, the browser will pop up a security warni ng when the Intel RMM2 module is accessed using HTTPS. Organizational unit: This field is used for specifying to which department within an organization the Intel RMM2 module belongs. Organization: The name of the organization to which the Intel RMM2 module belongs. Locality/City: The city where the organization is located. State/Province: The state or province where the organization is located. Country (ISO code): The country where the organization is located. This is the twoletter ISO code, e.g. DE for Germany, or US for the U.S. Challenge Password: Some certification authorities require a challenge password to authorize later changes on the certificate (e.g. revocation of the certificate). The minimal length of this password is four characters. Confirm Challenge Password: Confirmation of the Challenge Password. The address of a contact person that is responsible for the Intel RMM2 module and its security. Key length (bits): Available as 1024 or 2048 bytes. Intel Remote Management Module 2 61

60 Use these steps to install a SSL certificate: 1. Click Download to download the CSR to your administration system. 2. Send the saved CSR to a CA for certification. You will get the new certificate from the CA after an authentication process that depends on the CA. 3. Click Upload to upload the certificate to the Intel RMM2. After completing these steps, the Intel RMM2 has its own certificate to identify the Module to its clients. Caution: If you destroy the CSR on the Intel RMM2 there is no way to retrieve it. You must repeat the steps above. 62 Intel Remote Management Module 2

61 Date And Time You can change the date and time on the Intel RMM2 or use a NTP time server. The NTP time server sets up the internal clock to the current UTC time. Because NTP server time is always UTC, a setting allows you to set a static offset to obtain your local time. Without a time server your time setting will not be persistent; you need to reset it if the Intel RMM2 loses power for more than a few minutes. The time is not automatically updated for daylight saving time. Authentication Settings On this screen you can specify where the Intel RMM2 looks to authenticate users. Local Authentication requires that you create the user account on the Intel RMM2 and the user/group information on the Intel RMM2 is used for authentication. LDAP and RADIUS allow you to specify an LDAP or a RADIUS server for login authentication. The Intel RMM2 uses LDAP or RADIUS only for password verification. User privileges and private settings are stored on the Intel RMM2. A user account has to be created on the Intel RMM2 before this user can login via LDAP or RADIUS. All privilege configurations must be done within the Intel RMM2 user management. RADIUS challenge/response is not supported. An access challenge response is viewed as access reject. To access a remote device using the RADIUS protocol you must first login. You are asked to specify your user name and password. The RADIUS server reads your input data (authentication) and the Intel RMM2 looks for your profile (authorization). The profile defines your actions. If there is no profile your access via RADIUS is refused. In terms of the remote activity mechanism, A RADIUS login RADIUS works similarly to the Remote Console. Intel Remote Management Module 2 63

62 With a RADIUS login, if there is no activity for one-half hour your connection to the Intel RMM2 is closed. For detailed information on how to setup the RADIUS server, see Appendix C. Whatever you configure, you can always login over the network as admin. The superuser is always authenticated and authorized locally. LDAP User LDAP Server: Enter the name or IP address of the LDAP server that contains the user entries. If you choose a name instead of an IP address you need to configure a DNS server in the network settings. Base DN of User LDAP Server: Specify the distinguished name (DN) where the directory tree starts in the user LDAP server. For example, dc=test, dc=domain, dc=com Type of external LDAP Server: Set the type of the external LDAP server. Choose between a Generic LDAP Server, a Novell* Directory Service and a Microsoft* Active Directory. If you have neither a Novell Directory Service nor a Microsoft Active Directory, then choose a Generic LDAP Server and edit the LDAP scheme used. Name of login-name attribute: The name of the attribute containing the user login name. To use the default leave this field empty. The default depends on the selected LDAP server type. 64 Intel Remote Management Module 2

63 SMTP Settings Name of user-entry object class: The object class that identifies a user in the LDAP directory. To use the default leave this field empty. The default depends on the selected LDAP server type. Active Directory Domain: The active directory domain that is configured in the Microsoft Active Directory server. This option is only valid if you have chosen a Microsoft Active Directory as the LDAP server type. RADIUS Server: Enter either the IP address or the hostname of the RADIUS server to connect to. For the hostname DNS must be configured and enabled. Shared Secret: A text string that serves as a password between the RADIUS client and RADIUS server. In this case the Intel RMM2 is a RADIUS client. A shared secret is used to verify that RADIUS messages are sent by a RADIUS-enabled device that is configured with the same shared secret and to verify that the RADIUS message has not been modified in transit (message integrity). Use any standard alphanumeric and special characters. The maximum field length is 128 characters of alphanumeric characters, numbers, and symbols, except for! or *. Authentication Port: The port the RADIUS server listens to for authentication requests. The default value is #1812. Accounting Port: The port the RADIUS server listens to for accounting requests. The default value is #1813. Timeout: The request time-to-live in seconds. This is the time to wait for the completion of the request. If the request job is not completed within this time, then it is cancelled. The default value is 1 second. Retries: The number of retries if a request is not be completed. The default value is 3 times. Global Authentication Type: The authentication protocol. This can be the unencrypted PAP (Password Authentication Protocol) or the encrypted CHAP (Challenge Handshake Authentication Protocol). This screen configures the mail server and source address for event logging. To enable notification for Intel RMM2 internal events, you must also enable SMTP on the Event Log screen. Intel Remote Management Module 2 65

64 Event Log Intel RMM2 internal events, like login failures or firmware updates, are logged to a selection of logging destinations. Each event belongs to an event group that can be activated separately. For a information about the event groups and the log events that belong to the groups, click help?. In the Event Log Targets screen, choose how many log entries are displayed on each page. You can clear the log file on this screen, too. 66 Intel Remote Management Module 2

65 Event Log Targets List Logging Enabled: Check this box to log events in the Intel RMM2 internal log list. Up to 1000 events can be logged. This limit is due to memory constraints in the Intel RMM2, where the information is saved. Every entry that exceeds this limit overrides the oldest one. NFS Logging Enabled: Check this box to define a NFS server where a directory or a static link is exported. Logged data is written to the file you define on this server. To write loggd data from more than one Intel RMM2 to one NFS share, you must define a different file name for each device. The NFS share and the NFS server must be configured before enabling them on this screen. The size of the NFS log file is not limited. Each log event is appended to the end of the file. You must manually delete or move the file when necessary to control the file size. When you click Apply, the NFS share is immediately mounted. SMTP Logging Enabled: When checked, the Intel RMM2 sends messages to the address specified by Receiver Address. These messages contain the same string descriptions that are in the internal log file and the mail subject is includes the event group for the log event. To use this log destination you must specify a SMTP server that can be reached from the Intel RMM2 and that needs no authentication (<serverip>:<port>). SNMP Logging Enabled: When checked, the Intel RMM2 sends a SNMP trap to a specified destination IP address each time a log event occurs. If required, a community string can be entered into the appropriate text field. Most of the event traps only contain one descriptive string with all information about the log event. Only authentication and host power events have an own trap class that consists of several fields with detailed information about the event. Any SNMP trap listener can be used. Event Log Assignments You can choose which Intel RMM2 actionsare saved in the log file. Check the appropriate boxes and click Apply. SNMP This information is available via SNMP: Serial number Firmware version MAC address / IP address / Netmask / Gateway of LAN interface Server power state Server POST code These actions can be initiated via SNMP: Reset server Power on/off server Reset the Intel RMM2 module Intel Remote Management Module 2 67

66 These events are reported by the Intel RMM2 via SNMP: Login trial at the Intel RMM2 failed. Login trial at the Intel RMM2 succeeded. Denying access to a particular action. Server was reset. Server was powered on/off. Enable SNMP Agent: If this box is checked, the Intel RMM2 replies to SNMP requests. Note: If a community is left blank, you cannot perform the corresponding request. For example, if you want to disable the ability to reset the Intel RMM2 via SNMP then do not set a write community. Read Community: Allows you to retrieve information via SNMP. Write Community: Allows you to set options and to reset the Intel RMM2 or the host via SNMP. System Location: A description of the physical location of the host. The description is used in reply to the SNMP request, syslocation.0. System Contact: A contact person. The value is used in reply to the SNMP request, syscontact.0. Click here to view the SNMP MIB: View or save the SNMP MIB file from your web browser. This file may be necessary for an SNMP client to communicate with the Intel RMM2. 68 Intel Remote Management Module 2

67 Maintenance Intel Remote Management Module 2 69

68 Device Information This screen shows a summary of information about the Intel RMM2 and allows you to reset the Module. Connected user(s) User activity Host IP address Remote console opened. If opened in exclusifve mode, Exclusive is added. 70 Intel Remote Management Module 2

69 Event Log The Event Log lists the issues that the Intel RMM2 recognized. This is a from the hardware system event log listed under the System Health menu. This log includes the events that are kept by the Intel RMM2 and includes the event date, a short event description and an IP address the request was sent from. Click Prev and Next to browse within the data. Click Clear to remove all data from the log. Intel Remote Management Module 2 71

70 Update Firmware The firmware for the Intel RMM2 can be updated remotely to install new functionality or special features. New firmware releases are available from Search for Intel Remote Management Module 2 or Intel RMM2. Caution: A firmware update is not reversible and might take several minutes. Do not perform a remote system power operation during the update process. To upload the firmware:: 1. Download the new firmware file from 2. On the Firmware Upload screen, click Browse to locate the firmware file. 3. Click Upload to transfer the file to the Intel RMM2. As part of the upload process, the file is checked for validity and transmission errors. The upload process is aborted if an error is identified. 4. Upon successful completion of the upload, you will see the version of the currently running firmware and the version number of the new firmware, with an Update button. Click Update to replace the firmware version. 5. Wait while the Intel RMM2 resets. You will be directed to the Login page and requested to login again. 72 Intel Remote Management Module 2

71 Unit Reset This screen allows you to reset specific parts of the device. Resetting the keyboard/mouse, USB, or video engine takes only a few seconds and does not result in closing connections. The device is typically reset only to activate a new version of the firmware. This option closes all connections and takes about 30 seconds. Note: Only the admin user can reset the Intel RMM2. Intel Remote Management Module 2 73

72 74 Intel Remote Management Module 2

73 5 Remote Console (KVM) The Remote Console is the redirected keyboard, video and mouse of the remote host system where the Intel RMM2 is installed. The Remote Console window is a Java Applet that establish a TCP connection to the Intel RMM2. The protocol that is run over this connection is a unique KVM protocol and not HTTP or HTTPS. This protocol uses port #443. Your local network environment must permit this connection to be made, i.e. your firewall and, in case you have a private internal network, your NAT (Network Address Translation) settings have to be configured accordingly. Intel Remote Management Module 2 75

74 Main Window The Remote Console opens an new window to display the screen content of the remote server. The Remote Console acts as if you were located at the remote server, although there may be slight delays with the keyboard / mouse response depending on the bandwidth and latency of the network between the Intel RMM2 and system on which the Remote Console is running. The Remote Console window tries to show the remote screen with its optimal size. It will adapts the display size to the size of the remote screen initially and after the screen resolution of the remote screen has been changed. You can resize the Remote Console window in your local window system. Remote Console Status Line The status line at the bottom of the Remote Console screen shows the console connection state. The value in parenthesis describes the connection to the Remote Console. Norm means a standard connection without encryption, SSL indicates a secure connection using Secure Socket Layer (SSL). The status line displays the number of frame buffer updates ( Fps ) and the incoming ( In: ) and the outgoing ( Out: ) network traffic in KB per second. A low value is recommended and can be achieved as described in Optimizing the Video Picture. If compressed encoding is enabled, a value in brackets displays the compressed transfer rate. The icons in the lower right display access settings: One user is connected to the Remote Console. More than one user is connected to the Remote Console. You have exclusive access. No other user can access the remote host via Remote Console unless you disable this option. See Remote Console Options on page 79. Another remote user has exclusive access. You cannot access the remote host via the Remote Console unless the other user disables this option. See Remote Console Options on page Intel Remote Management Module 2

75 Monitor Only is disabled and keyboard / mouse actions are possible. See Remote Console Options on page 79. Monitor Only is enabled. See Remote Console Options on page 79. Remote Console Control Bar The upper part of the Remote Console window contains a control bar. With this, you can see the status of the Remote Console and change the local Remote Console settings. Send Ctrl+Alt+Delete to host Drive Redirection Sync Mouse Single / Double Mouse Mode Remote Console Options Ctrl+Alt+Delete Some control options are visible only when Other Operating Systems is selected under operating system type on the KVM Settings:Keyboard\Mouse screen. See Keyboard/ Mouse on page 52. The Ctrl+Alt+Delete button sends a ctrl+alt+delete key sequence to the remote system.this options is available only when Other Operating Systems is selected as the operating system type under KVM Settings:Keyboard\Mouse. See Keyboard/Mouse on page 52. Intel Remote Management Module 2 77

76 Drive Redirection Clicking the drive redirection icon opens the virtual media Drive Redirection menu. With this menu, you can redirect a local drive (only available under Windows*) or an ISO CD/ DVD-ROM drive image. Sync Mouse Sync Mouse lets you synchronize the local mouse with the remote mouse cursor. This is necessary when using accelerated mouse settings on the host system. In general, there is no need to change mouse settings there. This options is available only when Other Operating Systems is selected as the operating system type under KVM Settings:Keyboard\Mouse. See Keyboard/Mouse on page 52. Single/Double Mouse Mode The Single / Double Mouse Mode option toggles between single mouse mode in which only the remote mouse pointer is visible and double mouse mode, in which both the remote and local mouse pointers are visible. In Double Mouse Mode, the mouse pointers need to be synchronized. When SUN* JVM is used, Single Mouse Mode is only available with SUN* JVM 1.4 or higher. When in Single Mouse Mode, Use Alt+F12 to access the local mouse pointer. 78 Intel Remote Management Module 2

77 Remote Console Options The Remote Control Options button opens several options. Monitor Only: Toggles the Monitor Only filter on or off. When on, no remote console interaction is possible. The remote screen can be viewed only. Exclusive Access: If a user has the appropriate permission, all other Remote Consoles connections are forced to close. No other user can open a Remote Console connection until this user disables the exclusive access or logs off. Screenshot to clipboard: Capture a screen shot of the Remote Console. The Intel RMM2 places the screen shot onto the clipboard so you can import it as necessary. Readability Filter: Toggles the readability filter on or off. When on in scaling mode, the filter preserves most of the screen details, even if the image is scaled down. This option is only available with JVM 1.4 or higher. Scaling: Scale the Remote Console screen size. You can still use both the mouse and keyboard, but the scaling algorithm does not preserve all display details. Mouse Handling: Synchronize the local and the remote mouse pointer when using Soft Mouse Mode. This option is available only when Other Operating Systems is selected as the operating system type under KVM Settings:Keyboard\Mouse. See Keyboard/Mouse on page 52. Fast Sync: Correct a temporary but fixed skew. Intelligent Sync: Use this if fast sync does not work or if the mouse settings have been changed on the host system. Single/Double Mouse Mode: Show only the remote mouse pointer. The local mouse pointer is hidden and the remote one can be controlled directly. To leave this mode it is necessary to define a mouse hotkey in the Remote Console Settings Panel. Press this key to free the captured local mouse pointer. This Intel Remote Management Module 2 79