Service manual

About application security on the K2 SAN
The K2Cong application and the Storage Utility application both require that you be logged in to
the application with administrator privileges in order to modify any settings. These privileges are
based on the Windows account that you use when you log in to the K2Cong application. When
you open Storage Utility from within the K2Cong application, the account information is passed
to Storage Utility, so you do not need to log in separately to Storage Utility.
In SiteCong you congure global and/or device-type credentials for device access. These credentials
are likewise based on Windows accounts.
You must use a Windows account that has local administrator privileges on the machine to be
congured. For example, when you are on a control point PC and you run the K2Cong application
for the purpose of conguring a K2 Media Server, the account with which you log in to the K2Cong
application must be present on the K2 Media Server and must have administrator privileges on the
K2 Media Server.
For initial setup and conguration, you can use the default Windows Administrator username and
password to log in to applications and machines as you work on your K2 SAN. However, for ongoing
security you should change the username/password and/or create unique accounts with similar
privileges. When you do this, you must ensure that the accounts are present locally on all K2 SAN
machines, including control point PCs, K2 Media Servers, K2 Media Clients, K2 Summit Production
Clients, and other iSCSI clients.
Grass Valley recommends mapping the SNMP manager administrator with product administrator
accounts for your K2 and other Grass Valley products. This allows you to log on to the SNMP
manager as administrator using the product administrator logon.
About credentials in SiteConfig
SiteCong requires administrative privileges on devices in order to perform most of the network
conguration and deployment tasks. For known devices types, SiteCong has a default administrator
account and password. These default credentials depend on the SiteCong version, so check your
SiteCong Release Notes for any changes. When you add a device based on a known device type,
SiteCong references the default administrator account and password. Then, when you use remote
desktop or perform software deployment to the device, SiteCong automatically uses these
credentials. These credentials are called "global" credentials for the device since the same credentials
are used on all devices of that type in the system.
You can choose to override the default credentials for a given device type. For example, if you have
specied a different administrator account or a different password on the devices when commissioning
the system, then you want SiteCong to use these modied credentials.
It is possible to also override the default credentials for a single device.
Modifying K2 SAN settings
Use the topics in this section when changing or viewing settings on an existing K2 SAN. These are
the settings that dene the K2 SAN.
266 K2 Installation and Service Manual 2013 07 20
Administering and maintaining the K2 SAN