Page 1
USER GUIDE
ADVANCED
4/8-PORT
SECURE KM SWITCH
USM-2S0-1M0 REV: 1.1A DATE: 07/03/2018
1 2 3 4
SS4P-KM-U
MODELS:
• SS4P-KM-U 4-Port Secure KM Switch with Audio
• SS4P-KM-UCAC 4-Port Secure KM Switch with Audio and CAC Support
• SS8P-KM-U 8-Port Secure KM Switch with Audio
• SS8P-KM-UCAC 8-Port Secure KM Switch with Audio and CAC Support
SECURE KM SWITCH
4 PORT W/ AUDIO
1
Page 2
USER GUIDE
TABLE OF CONTENTS
TECHNICAL SPECIFICATIONS
WHAT’S IN THE BOX?
SECURITY FEATURES
SECURE KM SWITCH FRONT AND REAR
INSTALLATION
INITIAL SETUP
SINGLE-HEAD MODE SECURE KM SWITCHING
MULTI-HEAD MODE SECURE KM SWITCHING
HOTKEY COMMANDS
DISPLAY TOPOLOGY CONFIGURATION
LIMIT INPUT PORTS CONFIGURATION
CAC INSTALLATION: COMMON ACCESS CARD, SMART CARD READER
CAC PORT CONFIGURATION
3
4
4
4
5
7
7
8
8
9
9
10
10
AUDITING: Dumping the Event Log via User Menu Options
RESET: Restore Factory Default
LED’s BEHAVIOR
SYSTEM OPERATION
TROUBLESHOOTING
TECHNICAL SUPPORT
LIMITED WARRANTY STATEMENT
11
11
12
13
13
13
14
2
Page 3
USER GUIDE
TECHNICAL SPECIFICATIONS
USB
Signal Type
Type B
User Console Interface
AUDIO
Input (4)/(8) Connector Stereo 3.5mm Female
Output (1) Connector Stereo 3.5mm Female
POWER
Power Requirements 12V DC, 3A (minimum) power adapter with center-pin positive polarity.
ENVIRONMENT
Operating Temp 32° to 104° F (0° to 40° C)
Storage Temp -4° to 140° F (-20° to 60° C)
Humidity 0-80% RH, non-condensing
USB 1.1 and 1.0 Keyboard and Mouse only. USB 2.0 for CAC connection
(Only in models with CAC)
SS4P-KM-U: (4) USB Type B
SS4P-KM-UCAC/SS8P-KM-U: (8) USB Type B
SS8P-KM-UCAC: (16) USB Type B
(2) USB Type-A for keyboard and mouse connection only
(1) USB Type-A for CAC connection (only in models with CAC)
CERTIFICATIONS
Security Accreditation Common Criteria Validated To NIAP, Protection Prole PSS Ver. 3.0
OTHER
Emulation Keyboard, Mouse and Video
Control Front Panel Buttons
3
Page 4
USER GUIDE
1 2 3 4
4 PORT KM W/ AUDIO AND CAC
SECURE KM SWITCHSS4P-KM-UCAC
WHAT’S IN THE BOX?
Secure KM Switch Unit 4/8-port Secure KM Switch
BX-1203000 Desktop power supply 100-240V, 12VDC 3A
User Manual
SECURITY FEATURES
ANTI-TAMPER SWITCHES
Each model is equipped with internal Anti-Tamper switches, which sense attempts to open the device enclosure. Once the
system identies such an attempt, all the front panel LED’s will flash rapidly and the unit will become useless by shutting off
connection with all attached PCs and peripherals disabling any functionality.
TAMPER-EVIDENT SEAL
The enclosure of the unit is protected with a tamper-evident seal to provide a visual evidence if the unit has been opened.
PROTECTED FIRMWARE
The controller of the unit has a special protection feature that prevents reprogramming or reading the rmware.
HIGH ISOLATION ON USB CHANNELS
Opto-isolators are used in the unit to keep USB data paths electrically isolated from each other, providing high isolation and
preventing data leakage between ports.
SECURE EDID EMULATION
The unit prevents unwanted and unsecured data to be transmitted through the DDC lines by means of secure
EDID learning and emulation.
Port Selection LEDs
1 2 3 4
SS4P-KM-UCAC
CONSOLE
12VDC2.0A
Port Selection Push Buttons
K/M
CAC
Audio
CAC Backlight LEDs
Figure 4-1: SS4P-KM-UCAC Front panel
IN-4
CAC
K/M
Audio
Audio
IN-3
CAC
K/M
IN-2 IN-1
K/M
Audio
CAC
Audio
SECURE KM SWITCH
4 PORT KM W/ AUDIO AND CAC
CAC
K/M
Figure 4-2: SS4P-KM-UCAC Rear panel
4
Page 5
USER GUIDE
INSTALLATION
SYSTEM REQUIREMENTS
1. Black Box Secure PS is compatible with standard personal/portable computers, servers or thin-clients, running
operating systems such as Windows or Linux.
2. The peripheral devices that are supported by the Secure KM Switch are listed in the following table:
Console Port Authorized Devices
Wired keyboard and keypad without internal USB hub or composite device functions,
Keyboard
Audio out Analog amplied speakers, Analog headphones, Digital audio appliance.
unless the connected device has at least one endpoint which is a keyboard or mouse HID
class, KVM/KM extender.
Mouse / Pointing Device
Any wired mouse or trackball without internal USB hub or composite device functions,
Touch-screen, Multi-touch or digitizer, KVM/KM extender.
User Authentication Device Smart-card reader, PIV/CAC reader, Token or Biometric reader*
*TOE - Models with CAC only
Table 5-1
CONNECTING THE SECURE KM SWITCH
1. Ensure that power is turned off or disconnected from the unit and the computers.
2. Use a USB cable (Type-A to Type-B) to connect a USB port on each computer to the respective USB ports of the unit.
3. Optionally connect a stereo audio cable (3.5mm to 3.5mm) to connect the audio output of the computers to the
AUDIO IN ports of the unit.
4. Connect a USB keyboard and mouse in the two USB console ports.
5. Optionally connect stereo speakers to the AUDIO OUT port of the unit.
6. Optionally connect CAC (COMMON ACCESS CARD, SMART CARD READER) to the CAC port in the user console
interface. For models with CAC.
7. Power on the Secure KM Switch by connecting a 12VDC power supply to the power connector, and then turn on all the
computers.
Note: The computer connected to port 1 will always be selected by default after power up.
Note: You can connect up to 4 computers to the 4 port Secure KM Switch and up to 8 computers to the 8 port Secure KM Switch.
SS4P-KM-UCAC
SS4P-KM-UCAC
1 2 3 4
Figure 5-1: SS4P-KM-UCAC
SECURE KM SWITCH
4 PORT KM W/ AUDIO AND CAC
VIDEO
USB IN
USB OUT
CAC IN
CAC OUT
AUDIO IN
AUDIO OUT
5
Page 6
USER GUIDE
INSTALLATION (Continued)
IMPORTANT WARNINGS - FOR SECURITY REASONS:
• This product does not support wireless devices. Do not attempt to use a wireless keyboard or a wireless mouse with
this product.
• This product does not support keyboards with integrated USB hubs or USB ports. Only use standard (HID) USB
keyboards with this device.
• This product does not support microphone audio input or line input. Do not connect any microphones or headsets
with microphones to this device.
• Connection of authentication devices (CAC) with external power sources is prohibited.
6
Page 7
USER GUIDE
INITIAL SETUP
After connecting all devices to the Secure KM Switch, a display topology congurations and display mode must be
chosen. By default, Secure KM Switch is congured to Single-Head mode and a topology with 4 screens arranged
horizontally starting with port 1 on the most left-hand side.
The installation setup must match one of KM’s predened display topology congurations. This can be selected through
keyboard hotkey commands. Please refer to the “Display Topology Conguration” for the available display topologies. If
one or more of the input computers have multiple displays, Multi-Head Display Mode must be selected. Otherwise, select
Single-Head mode. Please refer to the table below for the commands.
COMMANDS HOTKEYS
Single-Head Display Mode CTRL + CTRL + K + S
Multi-Head Display Mode CTRL + CTRL + K + M
Table 7-1
To activate the hotkey sequence, press
the CTRL key twice and then enter the
desired hotkey commands.
SINGLE-HEAD MODE SECURE KM SWITCHING
In addition to traditional channel switching by buttons located on the front panel, Secure KM Switch also supports cursor
control of selected channels. This technology allows seamless switching between computers by moving the mouse
cursor from one display to another. Users can effortlessly switch computers for faster productivity.
Auto-switch
from 2 to 3
Monitor 3Monitor 2
Auto-switch
from 1 to 2
Monitor 1
Cursor
Monitor 4
Auto-switch
from 3 to 4
Auto-switch
from 4 to 1
Figure 7-1
7
Page 8
USER GUIDE
MULTI-HEAD MODE SECURE KM SWITCHING
When using computers with multiple displays, cursor control of selected channels allows switching between computers through
the use of simple mouse clicks and gestures. No device driver is required. Simply press the scroll wheel twice and then move the
mouse in the direction of the channel you desire to switch to.
+
Move the mouse to the
Click the Mouse Wheel Twice
Figure 8-1
Note: This feature only works in Multi-Head display mode.
direction of the target
computer screen
HOTKEY COMMANDS
The Hotkey command is a keyboard sequence used to trigger an action on the Secure KM Switch through the use of the keyboard
connected on the USB port of the Secure KM Switch. To activate the hotkey sequence, press the CTRL key twice and then enter
the desired hotkey commands.
Note: All commands can use upper and/or lower case characters
COMMANDS HOTKEYS
Single-Head Display Mode CTRL + CTRL + K + S
Multi-Head Display Mode CTRL + CTRL + K + M
Display Topology (multiple rows) CTRL + CTRL + H(1—4), (1-8) for KM-8P
Limit Input Ports (one row only) CTRL + CTRL + W(1—4), (1-8) for KM-8P
Cursor Rolling (roll past display borders up,
down, left, and right)
Note: Display Topology species the number of horizontal columns. The number of vertical rows is calculated in
the software by 4/n columns.
CTRL + CTRL + O(0—OFF) or (1—ON)
Table 8-1
8
Page 9
USER GUIDE
DISPLAY TOPOLOGY CONFIGURATION
The Secure KM Switch has a congurable display topology conguration that can be easily activated through keyboard hotkeys.
No software or drivers are required to congure the display topology.
Note: Hotkey CTRL + CTRL command allows for multiple rows.
(1) Hotkey Command: “CTRL + CTRL + H + 4 + ENTER”
1 2 3 4
(2) Hotkey Command: “CTRL + CTRL + H + 2 + ENTER”
1 2
3 4
(3) Hotkey Command: “CTRL + CTRL + H + 3 + ENTER”
1 2 3
(4) Hotkey Command: “CTRL + CTRL + H + 1 + ENTER”
1
2
3
4
Each of the cells shown represents a display or multiple displays from a
computer.
Notes: Cursor control of selected channels can only be used in
Single-Head display mode.
- Multi-Head display mode switching must be used if any of the four
computers have multiple displays.
LIMIT INPUT PORTS CONFIGURATION
Hotkey Commands: CTRL, CTRL W(X) commands (allows one row only):
W4<CR>
1 2 3 4
W3<CR>
1 2 3
W2<CR>
1 2
W1<CR>
1
Note: Limit Input Ports commands reset Display Topology conguration
Note: Port 2-4 N/A
Note: Ports 3, 4 N/A
Note: Port 4 N/A
9
Page 10
USER GUIDE
CAC (COMMON ACCESS CARD, SMART CARD READER) INSTALLATION
INSTALLATION
The following steps are intended for the system administrator or IT manager only.
If you have the optional CAC ports there will be 2 ports on a 2 host ports Secure KM Switch and 4 ports on a 4 host ports
Secure KM Switch. CAC connection to the computer requires a USB cable connection separate from the keyboard and
mouse. This allows the CAC to be connected independently from the keyboard and mouse. It also allows the user to select
whether CAC for a certain computer is supported or not.
1. Ensure that power is turned off or disconnected from the unit and the computer.
2. Use a USB cable (Type-A to Type-B) to connect a USB port on a computer to its respective CAC USB ports on the
Secure KM Switch. Do not connect the USB cable if CAC functionality is not needed for that computer.
3. Connect a CAC (smart card reader) to the CAC port in the user console interface.
4. Power on the Secure KM Switch by connecting a 12VDC power supply to the power connector, and then turn on all the
computers.
5. To disable CAC for any channel (all CAC ports are enabled as default), use the front panel buttons to switch the Secure
KM Switch to the channel whose CAC mode you wish to change. Once the channel is selected, the button LED for this
specic channel should be on (CAC port enabled). Press and hold the button for 3 seconds until the button LED turns
off. The CAC port is now disabled for this channel.
6. To enable CAC for any channel, use the front panel buttons to switch the Secure KM Switch to the channel whose CAC
mode you wish to change. Once the channel is selected, the button LED for this specic channel should be off (CAC
port disabled). Press and hold the button for 3 seconds until the button LED turns on. The CAC port is now enabled for
this channel.
CAC PORT CONFIGURATION
The following steps are intended for the system administrator and operators (users).
Note: Only one computer connected to port 1 is required for this operation
CAC port Conguration is an optional feature, allowing registration of any USB peripheral to operate with the Secure KM
Switch. Only one peripheral can be registered and only the registered peripheral will operate with the Secure KM Switch. By
default, when no peripheral is registered, the Secure KM Switch will operate with any Smart Card Reader.
Congure the CAC Port via User Menu Options
1. Open the Administration and Security Management Program.
2. Using the keyboard, press the Alt key twice and type “cnfg”.
3. At this stage the mouse connected to
the Secure KVM/KM Switch will stop functioning.
4. Enter the default username “user” and press Enter.
5. Enter the default password “12345” and press Enter.
6. Select option 2 from the menu on your screen and
press Enter.
7. Connect the peripheral device to be registered to
the CAC USB port in the console side of
the Secure KVM/KM Switch and wait until
the Secure KVM/KM Switch is reading
the new peripheral information.
8. The Secure KVM/KM Switch will list the information of
the connected peripheral on the screen and buzz 3 times
when registration is completed.
Figure 10-1
10
Page 11
USER GUIDE
AUDITING: Dumping the Event Log via User Menu Options
The following steps are intended for the system administrator.
Note: Only one computer connected to port 1 is required for this operation
The Event Log is a detailed report of critical activities stored in the Secure KM Switch or Secure KM Switch memory.
A comprehensive feature list and guidance for Administration and Security Management Tools can be found in the
Administrator’s Guide available for download from: https://www.blackbox.com/NIAP3/documentation
1. Open the Administration and
Security Management Program
2. Using the keyboard, press the Alt key twice and type “cnfg”.
3. Enter the default admin name “admin” and press Enter.
4. Enter the default password “12345” and press Enter.
5. Request a Log Dump by selecting option 5 in the menu.
(Shown in Figure 11-1)
* See Administration and Security Management Tool Guidance
for detailed information.
Figure 11-1
RESET: Restore Factory Defaults
The following steps are intended for the system administrator.
Note: Only one computer connected to port 1 is required for this operation
Restore Factory Defaults will reset all settings on the Secure KM Switch to their original state
Secure KM Switch mode
CAC port registration will be removed
Secure KM Switch settings will be reset to factory defaults
To Restore Factory Defaults via User Menu Options:
1. Open the Administration and Security Management Program
2. Using the keyboard, press the Alt key twice and type “cnfg”.
3. Enter the default admin name “admin” and press Enter.
4. Enter the default password “12345” and press Enter.
5. Select option 7 from the menu on your screen and press enter.
(Menu shown in Figure 11-1)
* See Administration and Security Management Tool Guidance for detailed information.
11
Page 12
USER GUIDE
LED’s BEHAVIOR
User Console Interface – CAC LED:
# Status Description
1 Off CAC is not connected
2 On Authorized and functional CAC is connected
3 Flashing Non-CAC peripheral is connected
Front Panel – Port Selection LED’s:
# Status Description
1 Off Non-selected port
2 On Selected port
Front Panel – CAC Selection LED’s:
# Status Description
1 Off CAC port is disabled or non-selected port
2 On CAC port is enabled
Front Panel - Port and CAC Selection LED’s:
# Status Description
1 All Flashing
Connected peripheral to keyboard or
mouse console ports is rejected
IMPORTANT!
If all the Front Panel LED’s are flashing and the
buzzer is beeping, the Secure KM Switch has been
TAMPERED with and all functions are permanently
disabled. Please contact Black Box technical support
at [email protected]
If all Front Panel LED’s are on and not flashing, the
POWER UP SELF TEST has failed and all functions
are disabled. Check if any of the front panel port
selection buttons are jammed. In this case, release
the jammed button and recycle the power. If power
up self test is still failing, please contact Black Box
technical support at [email protected]
12
Page 13
USER GUIDE
SYSTEM OPERATION
Front Panel Control
To switch to an input port, simply push the desired input button on the front-panel of the Secure KM Switch. If an input port
is selected, the LED of that port will turn on.
TROUBLESHOOTING
No Power
• Make sure that the power adapter is securely connected to the power connector of the unit.
• Check the output voltage of the power supply and make sure that the voltage value is around 12VDC.
• Replace the power supply.
Flashing LEDs in the Front Panel with clicking sound
• Reboot the unit. If the error persists then there is a malfunction or wrong input connections at the K/M ports.
• Verify both Keyboard and Mouse connections are USB 1.0 or 1.1.
• Only USB Keyboard or Mouse can be connected in the designated K/M ports.
Flashing USB LED
• Make sure that the correct peripheral device is connected to the correct port of the Secure KM.
• Check to see that the K/M USB cable is connected to the K/M port on the back of the unit.
• Check to see that the CAC USB cable is connected to the CAC port on the back of the unit.
No Video
• Check if all the video cables are connected properly.
• Connect the computer directly to the monitor to verify that your monitor and computer are functioning properly.
• Restart the computers
Keyboard is not working
• Check if the keyboard is properly connected to the unit.
• Check if the USB cables connecting the unit and the computers are properly connected.
• Try connecting the USB on the computer to a different port.
• Make sure that the keyboard works when directly connected to the computer.
• Replace the keyboard.
Note: The NUM, CAPS, and SCROLL Lock LED indicators on the keyboard are not supposed to light up if connected to the
Secure KM Switch.
Mouse is not working
• Check if the mouse is properly connected to the unit.
• Try connecting the USB on the computer to a different port.
• Make sure that the mouse works when directly connected to the computer.
• Replace the mouse.
No Audio
• Check if all the audio cables are connected properly.
• Connect the speakers directly to the computer to verify that the speakers and the computer audio are
functioning properly.
• Check the audio settings of the computer and verify that the audio output is through the speakers.
No CAC (COMMON ACCESS CARD, SMART CARD READER)
• Check if the USB cables connecting the unit and the computers are properly connected.
• Make sure the CAC port is enabled by holding down the desired channels button until it lights up.
TECHNICAL SUPPORT
For product inquiries, warranty questions, or technical questions, please contact [email protected].
FREE technical support 24 hours a day, 7 days a week: Call 877-877-2269 or fax 724-746-0746.
13
Page 14
USER GUIDE
LIMITED WARRANTY STATEMENT
A. Extent of limited warranty
Black Box warrants to the end-user customers that the product specied above will be free from defects in materials and
workmanship for the duration of 18 months, which duration begins on the date of purchase by the customer. Customer is
responsible for maintaining proof of date of purchase.
Black Box limited warranty covers only those defects which arise as a result of normal use of the product, and do not apply
to any:
a. Improper or inadequate maintenance or modications
b. Operations outside product specications
c. Mechanical abuse and exposure to severe conditions
If Black Box receives, during applicable warranty period, a notice of defect, Black Box will at its discretion replace or repair
defective product. If Black Box is unable to replace or repair defective product covered by the Black Box warranty within
reasonable period of time, Black Box shall refund the cost of the product.
Black Box shall have no obligation to repair, replace or refund unit until customer returns defective product to Black Box.
Any replacement product could be new or like new, provided that it has functionality at least equal to that of the product
being replaced.
Black Box limited warranty is valid in any country where the covered product is distributed by Black Box.
B. Limitations of warranty
To the extent allowed by local law, neither Black Box nor its third party suppliers make any other warranty or condition of
any kind whether expressed or implied with respect to the Black Box product, and specically disclaim implied warranties or
conditions of merchantability, satisfactory quality, and tness for a particular purpose.
C. Limitations of liability
To the extent allowed by local law the remedies provided in this warranty statement are the customers sole and exclusive
remedies.
To the extent allowed by local law, except for the obligations specically set forth in this warranty statement, in no event
will Black Box or its third party suppliers be liable for direct, indirect, special, incidental, or consequential damages whether
based on contract, tort or any other legal theory and whether advised of the possibility of such damages.
D. Local law
To the extent that this warranty statement is inconsistent with local law, this warranty statement shall be considered
modied to be consistent with such law.
14
Page 15
USER GUIDE
NOTICE
The information contained in this document is subject to change without notice. Black Box makes no warranty of any kind
with regard to this material, including but not limited to, implied warranties of merchantability and tness for particular
purpose. Black Box will not be liable for errors contained herein or for incidental or consequential damages in connection
with the furnishing, performance or use of this material. No part of this document may be photocopied, reproduced, or
translated into another language without prior written consent from Black Box, Inc.
20180411
Black Box Corporation
1000 Park Drive
Lawrence, PA 15055-1018
Phone: 877-877-2269
www.blackbox.com
15
Loading...