Appendix E: Frequently Asked Questions
172
Question
Answer
Does Dominion KX III support
strong passwords?
Yes. The Dominion KX III has
administrator-configurable, strong password
checking to ensure that user-created
passwords meet corporate and/or government
standards and are resistant to brute force
hacking.
Can I upload my own digital
certificate to the Dominion KX IIKX
IIII?
Yes. Customers can upload self-signed or
certificate authority-provided digital certificates
to the Dominion KX III for enhanced
authentication and secure communication.
Does the KX III support a
configurable security banner?
Yes. For government, military and other
security-conscious customers requiring a
security message before user login, the KX III
can display a user-configurable banner
message and optionally require acceptance.
My security policy does not allow
the use of standard TCP port
numbers. Can I change them?
Yes. For customers wishing to avoid the
standard TCP/IP port numbers to increase
security, the Dominion KX III allows the
administrator to configure alternate port
numbers.
Smart Cards and CAC Authentication
Question
Answer
Does Dominion KX III support smart
card and CAC authentication?
Yes. Smart cards and DoD common access
cards (CAC) authentication to target servers
is supported.
What is CAC?
Mandated by Homeland Security
Presidential Directive 12 (HSPD-12), CAC is
a type of smart card created by the U.S.
government and used by U.S. military and
government staff. The CAC card is a
multitechnology, multipurpose card; the goal
is to have a single identification card. For
more information, see the FIPS 201
standards.
Which KX III models support smart
cards/CAC?
All Dominion KX III models are supported.
The Dominion KX III-101 models do not
currently support smart cards and CAC.
