Kanguru KRMC Cloud User manual

KRMC Cloud Pro User Manual

Version 4

2

NOTICES AND INFORMATION

Please be aware of the following points before using the Kanguru Remote Management Console

Windows Vista, Windows 7, Windows 8.1, Windows 10 and .NET Framework are registered

trademarks of Microsoft Inc. All other brands or product names are trademarks of their respective

companies or organizations.

Kanguru Solutions will not be held responsible for any illegal use of this product nor any losses

incurred while using this product. The user himself is responsible for the copyright laws, and is fully

responsible for any illegal actions taken.

Customer Service

To obtain service or technical support for your system, please contact Kanguru Solutions Technical

Support Department at 508-376-4245, or visit www.Kanguru.com for web support.

Legal notice

In no event shall Kanguru Solutions’ liability exceed the price paid for the product from direct,

indirect, special, incidental, or consequential software, or its documentation. Kanguru Solutions

offers no refunds for its products. Kanguru Solutions makes no warranty or representation, expressed,

implied, or statutory, with respect to its products or the contents or use of this documentation and

all accompanying software, and specifically disclaims its quality, performance, merchantability, or

fitness for any particular purpose. Kanguru Solutions reserves the right to revise or update its products,

software, or documentation without obligation to notify any individual or entity.

Export Law Compliance

Regardless of any disclosure made to Kanguru Solutions pertaining to the ultimate destination of the

specific Kanguru product, you warrant that you will not export, directly or indirectly, any Kanguru

product without first obtaining the approval of Kanguru Solutions and the appropriate export license

from the Department of Commerce or other agency of the United States Government. Kanguru

Solutions has a wide range of products and each product family has different license requirements

relative to exports.

Notices and Information

3

End User License Agreement

This legal document is an agreement between you, the end user (“Licensee”), and Kanguru Solutions,

a division of Interactive Media Corporation (“Licensor”).

By and using this software, you are consenting to be bound by the terms of this agreement, which

includes the disclaimer of warranty.

This agreement constitutes the complete agreement between you and licensor. If you do not agree to

the terms of this agreement, cease to use the product immediately.

DISCLAIMER OF WARRANTIES

The software as a service is provided on an “AS IS” basis, without warranty of any kind, including

without limitation the warranties of merchantability, fitness for a particular purpose, and non-

infringement. The entire risk as to the results and performance of the software is assumed by you, the

Licensee. If the software is defective, you, and not Licensor or any distributor, agent or employee of

Licensor assumes the entire cost of all necessary servicing, repair, or correction.

LIMITATION OF DAMAGES

In no event shall Licensor, or anyone else who has been involved in the creation, distribution, or

delivery of this product be liable for any direct, indirect, special, punitive, exemplary, consequential

or incidental damages (including but not limited to damages for loss of business profits, business

interruption, loss of business information, and the like) arising out of the use or inability to use such

product even if Licensor has been advised of the possibility of such damages.

Because some states do not allow the exclusion or limitation of liability for consequential or incidental

damages, the above limitation may not apply to you.

COPYRIGHT RESTRICTIONS

This software and any accompanying materials are copyrighted. Unauthorized copying of this software

or of any of the textual materials accompanying it is expressly forbidden.

You may not modify, adapt, translate, reverse engineer, decompile, disassemble (except to the

extent applicable laws specifically prohibit such restriction), or create derivative works based on the

software.

EXPORT RESTRICTIONS

You agree that you will not export the software to any country, person or entity subject to U.S. export

restrictions.

End User License Agreement

4

ENTIRE AGREEMENT

This written End User License Agreement is the exclusive agreement between you and Licensor

concerning the software as a service and supersedes any and all prior oral or written agreements,

negotiations or other dealings between us concerning the software. This License Agreement may be

modified only by a writing signed by you and Licensor.

This agreement is subject to the laws and jurisdiction of the courts of the Commonwealth of

Massachusetts, USA. If a court of competent jurisdiction invalidates one or more of the terms of this

contract, the surviving terms continue in force.

This License Agreement is effective upon the use of the software as a service.

End User License Agreement

5

Table of Contents

TABLE OF CONTENTS

Notices and Information ......................................................................................................................2

End User License Agreement ............................................................................................................. 3

1. Introduction ....................................................................................................................................7

2. Main Features of KRMC Cloud Pro ............................................................................................8

3. KRMC Cloud Version 4 Improvements .......................................................................................9

4. System Requirements .....................................................................................................................10

5. Associating Devices with User Contacts ....................................................................................... 11

6. Getting to Know KRMC Cloud Pro .............................................................................................12

6.1 Logging into KRMC Cloud Pro .......................................................................................13

6.1.1 Logging in with a registered e-mail address ......................................................13

6.1.2 SAML Login ......................................................................................................14

6.1.3 Logging in with 2 Factor Authentication ...........................................................15

6.1.4 Logging In for the First Time (Super Admin only) ............................................ 16

6.2 Components of KRMC Cloud Pro...................................................................................18

6.3 Filtering and Sorting Lists ................................................................................................18

6.4 Navigation Menu ..............................................................................................................19

6.4.1 Main Pages .........................................................................................................19

6.4.2 Navigation Sub-Menus .......................................................................................20

6.4.3 Log Out ..............................................................................................................20

6.5 Change Password ..............................................................................................................21

6.6 Events Bar.........................................................................................................................22

7. Home Page ..........................................................................................................................23

7.1 Notifications Area .............................................................................................................24

7.2 Customizable Charts .........................................................................................................24

7.3 Account Information .........................................................................................................25

8. Devices Page .........................................................................................................................26

8.1 Users List .......................................................................................................................... 27

8.1.1 Creating New Users and Groups ........................................................................ 28

8.1.1.1 Create a New User ...........................................................................................28

8.1.1.2 Create a New Group ........................................................................................ 29

8.2 Device List ........................................................................................................................30

8.3 Device Activity List ..........................................................................................................32

8.3.1 Edit Device Info .................................................................................................33

8.3.2 Add Action .........................................................................................................34

8.3.3 Reprovision ........................................................................................................35

8.3.4 Codes .................................................................................................................. 37

8.3.5 Delete Device .....................................................................................................38

8.3.6 Deactivate Device ..............................................................................................39

8.3.7 Reactivating a Device .........................................................................................40

9.

Actions Page ......................................................................................................................... 41

9.1 Pending Actions Tab ......................................................................................................... 42

9.2 Successful Actions Tab ..................................................................................................... 43

9.3 Failed Actions Tab ............................................................................................................43

9.4 Create Global Action Tab .................................................................................................43

6

10. Users Page ............................................................................................................................44

10.1 Admins Tab .....................................................................................................................45

10.1.1 Change Super Administrator ............................................................................ 46

10.1.2 Edit or Delete Admins ...................................................................................... 47

10.1.3 Edit Permissions ............................................................................................... 48

10.1.4 View Groups / Users / Devices ........................................................................48

10.2 Users Tab ........................................................................................................................49

10.2.1 Set Provision Profile for User ..........................................................................50

10.2.2 Edit or Delete User ........................................................................................... 52

10.3 Auditors Tab ...................................................................................................................53

10.4 Groups Tab ......................................................................................................................54

10.4.1 Edit Groups ......................................................................................................55

10.4.2 Add Group Action ............................................................................................ 56

10.4.3 Delete Group ....................................................................................................56

11. Licenses Page........................................................................................................................57

11.1 Summary Tab .................................................................................................................. 58

11.2 Licenses Tab ................................................................................................................... 59

11.3 Parking Licenses Tab ...................................................................................................... 60

11.4 Orders Tab ....................................................................................................................... 60

12.

Settings Page ........................................................................................................................61

12.1 Global Provision Profile Tab ..........................................................................................62

12.2 Administrator Settings Tab (Super Admin only) ............................................................ 63

12.3 Event Bar Options Tab ....................................................................................................64

12.4 Notification Options Tab ................................................................................................65

12.5 Administrative Password Tab (Super Admin only) ........................................................ 66

12.6 Server Settings Tab ......................................................................................................... 67

12.6.1 SSPM E-mail Domain Whitelist ......................................................................68

12.6.2 Event Export .....................................................................................................69

12.6.3 SAML Settings ................................................................................................. 69

13.

Charts/Reports Page............................................................................................................70

14. Technical Support ........................................................................................................................... 71

Appendix A : Description of Remote Actions ....................................................................................71

Appendix B: Description of Reports ..................................................................................................73

Appendix C: KRMC License Management .......................................................................................74

Appendix D: Integrating KRMC with Microsoft Active Directory Federation Services ..............76

Table of Contents

7

Introduction

1. Introduction

Thank you for using the Kanguru Remote Management Console: Cloud Pro Edition (referred to

throughout this manual as KRMC Cloud Pro). KRMC Cloud Pro is a revolutionary product that

places a complete USB security policy into your hands, giving you the ability to remotely manage

USB flash drives from anywhere in the world. KRMC Cloud Pro was designed to work specifically

with the following Kanguru security drives:

Current Legacy

• Defender 3000 • Defender V2

• Defender Elite300 • Defender Basic+

• Defender Elite30 • Defender Elite

• Defender Bio-Elite30 • Virtual Defender

• Defender HDD/SSD • Defender DualTrust

• Defender HDD/SSD300 • Defender 2000

• Defender Elite200

The devices mentioned above communicate through a secure, encrypted tunnel to ensure that your

information is protected. For more information regarding the communication protocols used by

KRMC Cloud Pro, please contact: [email protected]

Important! Any Kanguru device that is configured to communicate with a KRMC Cloud Pro account

will be permanently bound to that KRMC Cloud Pro account. Resetting the device will not unbind it.

You can only stop communication by disabling KRMC Cloud Pro on the device or deleting the device

from the KRMC Cloud Pro console (see section 8.3.4 Codes on p.37).

8

2. Main Features of KRMC Cloud Pro

KRMC Cloud Pro has an array of features that give administrators the ability to manage their Kanguru

secure USB flash drives and hard drives. Below is a list of just some of the features available in

KRMC Cloud Pro:

• Remote data deletion

• Self-service password management

• Remote device disable/enable

• Remote password reset

• Remote password change

• Administrator level auditing of actions and events

• Ability to create groups consisting of multiple devices and/or users

• Ability to create multiple admin users

• Configurable offline settings

• Token-based deployment capability

• Configurable offline settings

• Remote re-provisioning of devices for security policy enforcement and compliance

• Reports and charts

• IP address and hostname device usage tracking

• Logging of all system actions and events

• Organized asset management system

• Remote messaging to devices

• License management for KRMC and Anti-virus

• Ability to create schedule-based actions

• Many more…

Main Features of KRMC Cloud

9

3. KRMC Cloud Version 4 Improvements

Several major improvements have been made with the release of version 4. These include changes

to the user interface, the menu navigation, additional management options, grouping features,

performance enhancements, and several other improvements that provide a better user experience.

Below is an extended list of changes to expect in version 4:

• Last Location - You will now be able to view the last geographic location a device was seen

on the Devices page.

• Customizable Home Page - You can now customize the information you see on the home

page.

• Compact Navigation - The navigation has been restructured to be more intuitive and less

obtrusive.

• Dynamic Interface - The web console displays information in real-time without having to

refresh or navigate to another page.

• Improved Monitoring - There is now an events section that tracks important account and

device activity.

• Device Activity - Detailed histories of device activity are now available for viewing.

• Users - Provides additional user creation options and manageability.

• Device Groups - The Groups feature allows devices to be assembled in groups.

• Additional Deployment Options - Deploying Kanguru Defenders can now be simplified by

using unique Cloud IDs generated for each individual user. Cloud IDs can be used to easily

assign a registered device to a specific user.

• Improved Licensing - License management has been simplified, providing greater flexibility

and manageability.

• Centralized Settings - System settings are all centrally located on a single page, making it

easier to find and configure account-level settings.

• Notifications - You can now set up important notifications to be sent to you via email through

the settings page.

The above features will be detailed further in this manual. Kanguru Solutions welcomes all customer

feedback and suggestions. Please forward your comments to [email protected] and we will

respond as soon as possible. We thank you in advance for your feedback regarding KRMC.

KRMC Version 4 Improvements

10

4. System Requirements

Client requirements for Admins using KRMC Cloud Pro

These requirements are for systems that will be used to log in to the KRMC Cloud Pro web console.

• Supported by current versions of Microsoft Edge, Mozilla Firefox and Google Chrome

• Minimum resolution: 1024x768

• Internet / network connection

• 32MB of available local storage

• Minimum 512MB RAM

System Requirements

11

5. Associating Devices with User Contacts

Successfully managing a large fleet of devices remotely requires a high-level of organization within

the KRMC framework. It is important that KRMC Admins enforce policies that ensure all remotely

managed devices are associated with their user’s contact information as soon as they are provisioned.

It is helpful for KRMC administrators to have company email addresses associated with each of their

device users. Having comprehensive and accurate user contact information ensures that Admins can

track their devices back to the associated device owner, which allows them to contact the device users

by email and request that they connect their devices to receive updates and security settings.

For recommendations on how to best register devices to KRMC and make sure that accurate user

contact information gets associated, please check the following guide:

https://kanguru.zendesk.com/hc/en-us/articles/360041975291-KRMC-Device-Registration-Guide-

Associating Devices with User Contacts

12

6. Getting to Know KRMC Cloud Pro

KRMC Cloud Pro is a web based application that provides administrative tools in a single, centrally

managed console. It allows you to manage, monitor, and provision your USB devices. Its intuitive

design simplifies the work flow for administrators making it easy to take advantage of the array of

tools and available options.

KRMC Cloud Pro is a SaaS based application, so it is accessible through any operating system or

device as long as you have a web browser and access to the internet. Once logged in, you will be able

to manage your USB devices remotely from anywhere.

○ 6.1 Logging into KRMC Cloud Pro ................... p.13

○ 6.2 Components of KRMC Cloud Pro ............... p.18

○ 6.3 Filtering and Sorting Lists ............................ p.18

○ 6.4 Navigation Menu ........................................... p.19

○ 6.5 Change Password .......................................... p.21

○ 6.6 Events Bar ...................................................... p.22

Getting to Know KRMC Cloud Pro

13

6.1 Logging into KRMC Cloud Pro

To log into KRMC Cloud Pro:

1. Open your web browser. The site is best viewed by using the latest version of Microsoft Internet

Explorer, Google Chrome, Mozilla Firefox, or Safari.

2. Once you have the web browser open, you can use either of these methods to navigate to the

login page:

○ Visit http://krmc.kanguru.com and you will be directed to the login page directly.

○ Visit http://www.kanguru.com and then click on the KRMC Cloud Login link located in

the navigation bar:

This brings you to the KRMC login screen.

6.1.1 Logging in with a registered e-mail address

1. Enter your registered e-mail and password and then click the Login button. If you do not have

an account setup yet, please contact Kanguru support at [email protected].

2. Once you have logged in with your account information, you will be directed to your KRMC

Cloud Pro dashboard.

You have successfully logged into KRMC Cloud Pro and will be directed to the Home page.

Getting to Know KRMC Cloud Pro

14

6.1.2 SAML Login

Active Directory (AD) based Single Sign On (SSO) using Security Assertion Markup Language

(SAML) provides KRMC administrators an alternative sign-on option for login. If setup for

the account, an administrator wishing to login to KRMC will be redirected to the SSO URL for

authentication using their own SAML supported AD service. Once the administrator authenticates

into their AD service, they will be redirected back to KRMC in a ‘logged-in’ state, where they can

continue to use KRMC features as usual.

Benefits of using AD based login:

• Productivity savings for administrators – no additional passwords to remember for KRMC. The

KRMC login now ties seamlessly with SSO.

• Administrators are authenticated using the company’s trusted internal AD services, enabling

higher customer trust in the KRMC ecosystem overall.

• Near instant privilege revocation in case a KRMC Admin is terminated as an employee. KRMC

will refresh account state with the customer’s AD server every 30 minutes.

To login using AD based SSO, click the SAML Login link on the Login page.

If you are authenticated by Active Directory, then you will be automatically logged into KRMC.

For instructions on integrating KRMC with Microsoft Active Directory Federation Services

please refer to Appendix D: Integrating KRMC with Microsoft Active Directory Federation Services

on p.77

Getting to Know KRMC Cloud Pro

15

6.1.3 Logging in with 2 Factor Authentication

2 factor authentication is a feature that extends an additional layer of security which prevents

unauthorized users from logging into KRMC Cloud Pro.

When 2 factor authentication has been enabled, after the administrator signs in with their password

they are directed to an authentication page.

An authentication code is automatically generated and sent by email to the administrator.

The administrator must copy the authentication code from the email into the ‘Authentication Code’

field and then click on the Verify button.

Note: Authentication codes are only valid for 30 minutes after they have been generated. If your code

has expired, then click the Resend Code button and a fresh authentication code will be sent by email.

Once the authentication code has been validated, the administrator will be logged into the web console.

For more information about how to enable 2 factor authentication, please refer to section 10.1 Admins

Tab on p.45 to enable for individual administrators and section 12.2 Administrator Settings Tab

(Super Admin only) on p.63 to enable for all administrators.

Getting to Know KRMC Cloud Pro

16

6.1.4 Logging In for the First Time (Super Admin only)

If you are the Super Admin and you are logging into KRMC for the first time, you will be required

to complete some initial setup and configuration of your KRMC. This will only have to be done once

by the Super Admin, the first time that they login.

1. The first time that the Super Admin logs into KRMC, they will be greeted with a Welcome screen.

Click on the BEGIN button to proceed with initial setup and configuration.

2. On the next screen you will be prompted to create an Administrative Password. The

Administrative Password must conform to the default security parameters. Enter and then re-

enter an Administrative Password and then click on the Save & Continue button.

3. Define a Global Provisioning Profile and then click on the Save & Continue button. All

managed drives registered with KRMC will be automitically configured with these security

policy settings.

Note: The Admin can modify the Global Provisioning Profile at anytime by navigating to Settings >

Global Provision Profile. For more information about the Global Provisioning Profile, see section

12.1 Global Provision Profile Tab on p.62

Getting to Know KRMC Cloud Pro

17

4. Enter your contact information (name, email, and employee ID if applicable) and then click

on the Save & Continue button. This email address will be what you enter during subsequent

logins.

Once you have completed the initial setup and configuration, you will be directed to the KRMC home

page.

Getting to Know KRMC Cloud Pro

18

6.2 Components of KRMC Cloud Pro

There are several components of KRMC Cloud that administrators can navigate and perform various

actions from. It is important to familiarize yourself with these components and understand how they

interact with each other.

1. The Navigation Menu - Located in the left hand side of the page. Rolling your mouse over the

Navigation Menu will expand the area, allowing you to see what each link points to.

2. Account Profile - Located at the top right of the console, the Account Profile area displays your

account name and can be used to log out or change your login password.

3. The Events Bar - Located at the right side of the page, the Events Bar can be toggled to show

either the Events Bar or the Support Bar. The Events Bar contains a list of any events, actions,

or alerts that you have subscribed to in the Settings Page (see section 12.3 Event Bar Options

Tab on p.64)

4. The Support Bar - Located on the right side of the page below the Events Bar. The Support Bar

is not fully implemented in this version and will be released in a future version.

6.3 Filtering and Sorting Lists

Information can be filtered within the console using the search bar. Doing a search will filter content

among several columns, not just the name column. In addition to searching for information, you can

also sort the columns by clicking on the header name.

Getting to Know KRMC Cloud Pro

19

6.4 Navigation Menu

The Navigation Menu is located on the left-side of every page. Initially, the Navigation Menu only

displays icons. When you hover your mouse over the area, the menu will expand revealing the full

context.

6.4.1 Main Pages

There are a total of seven, main pages in KRMC that are accessible through the Navigation Menu on

the left. These main pages are listed and detailed below:

• Devices Page – A list of devices that are registered to this account. You can manage devices,

create remote actions, update security settings and add users. This is your primary page.

• Actions Page – A list of pending, successful, and failed actions that occurred on devices. You

can also create global actions from this page.

• Users Page – A list of current admins, users, and groups. You can add additional users and

groups on this page, as well as modify existing permissions or settings.

• Licenses Page – A quick snapshot your licenses’ status. Licenses can be manually assigned or

deleted from this page. Your order history is also listed here.

• Settings Page – Set an administrative password and configure a global provisioning template,

notification options, and event bar settings.

• Charts/Reports Page – A series of data charts which visually represent status and usage

information.

Getting to Know KRMC Cloud Pro

20

6.4.2 Navigation Sub-Menus

The Navigation Menu on certain pages will contain sub-menu icons. The sub-menu options are

specific to that page and allow for easier management of devices or users. These will be explained in

later sections.

• Devices Page .........................p.26

○ Create User – Creates either a new User or Admin. You can assign a unique Cloud ID to the

new user and assign it to a group.

○ Create Group – Creates a new group that contains devices and users. A group in KRMC

Cloud Pro can contain multiple devices and administrators.

• Actions Page.........................p.41

○ Delete All Actions – Deletes all actions for every device the logged in Admin has access

to. This cannot delete system critical actions such as the Change Administrative Password

action.

6.4.3 Log Out

You can log out of the console by clicking on Log Out in the Navigation Menu.

Alternatively, you can click on the green arrow located at the top right by your account information.

Getting to Know KRMC Cloud Pro

Page is loading ...

Kanguru KRMC Cloud User manual

Related papers

Other documents