Appendix F:384Question AnswerDoes Dominion KX II supportParagon Dual CIMs?Yes. The Dominion KX II now supportsParagon II Dual CIMs (P2CIM-APS2DUAL andP2CIM-AUSBDUAL), which can connectservers in the data center to two differentDominion KX II switches.If one KX II switch is not available, the servercan be accessed through the second KX IIswitch, providing redundant access anddoubling the level of remote KVM access.Please note these are Paragon CIMs, so theydo not support the KX II advanced featuressuch as virtual media, absolute mouse, etc.SecurityQuestion AnswerIs the Dominion KX II FIPS 140-2Certified?The Dominion KX II uses an embedded FIPS140-2 validated cryptographic module runningon a Linux platform per FIPS 140-2implementation guidelines. This cryptographicmodule is used for encryption of KVM sessiontraffic consisting of video, keyboard, mouse,virtual media and smart card data.What kind of encryption doesDominion KX II use?Dominion KX II uses industry-standard (andextremely secure) 256-bit AES, 128-bit AES or128-bit encryption, both in its SSLcommunications as well as its own datastream. Literally no data is transmitted betweenremote clients and Dominion KX II that is notcompletely secured by encryption.Does Dominion KX II support AESencryption as recommended bythe U.S. government’s NIST andFIPS standards?Yes. The Dominion KX II utilizes the AdvancedEncryption Standard (AES) for added security.256-bit and 128-bit AES is available.AES is a U.S. government-approvedcryptographic algorithm that is recommendedby the National Institute of Standards andTechnology (NIST) in the FIPS Standard 197.
