Appendix F: Frequently Asked Questions422Question AnswerDoes Dominion KX III supportstrong passwords?Yes. The Dominion KX III has administrator-configurable, strong password checking toensure that user-created passwords meetcorporate and/or government standards andare resistant to brute force hacking.Can I upload my own digitalcertificate to the Dominion KX IIKXIIII?Yes. Customers can upload self-signed orcertificate authority-provided digital certificatesto the Dominion KX III for enhancedauthentication and secure communication.Does the KX III support aconfigurable security banner?Yes. For government, military and othersecurity-conscious customers requiring asecurity message before user login, the KX IIIcan display a user-configurable bannermessage and optionally require acceptance.My security policy does not allowthe use of standard TCP portnumbers. Can I change them?Yes. For customers wishing to avoid thestandard TCP/IP port numbers to increasesecurity, the Dominion KX III allows theadministrator to configure alternate portnumbers.Smart Cards and CAC AuthenticationQuestion AnswerDoes Dominion KX III support smartcard and CAC authentication?Yes. Smart cards and DoD common accesscards (CAC) authentication to target serversis supported.What is CAC? Mandated by Homeland SecurityPresidential Directive 12 (HSPD-12), CAC isa type of smart card created by the U.S.government and used by U.S. military andgovernment staff. The CAC card is amultitechnology, multipurpose card; the goalis to have a single identification card. Formore information, see the FIPS 201standards.Which KX III models support smartcards/CAC?All Dominion KX III models are supported.The Dominion KX III-101 models do notcurrently support smart cards and CAC.Do enterprise and SMB customers usesmart cards, too?Yes. However, the most aggressivedeployment of smart cards is in the U.S.federal government.
