Emerson Cybex SCM120, Cybex SCM120H User Manual

User Manual

2-Port Secure KVM Mini-Matrix

Products covered by this manual:

Cybex SCM120 – Secure Mini-Matrix KVM 2-Port x 2 DVI-I video, PP 3.0
Cybex SCM120H – Secure Mini-Matrix KVM 2-Port x 2 HDMI video, PP 3.0

Document Number HDC10369 Rev. E

EMERSON 2- Port Secure KVM Mini-M atrix

TABLE OF CONTENTS

SECTIONS

Table of Contents

1 2 3 4 65

1

Introduction .......................................................... 2

Package Contents.............................................................2

Overview ............................................................. 3

Safety Precautions ............................................................3

Safety Precautions - Précautions de sécurité (French) .........................4

User Guidance & Precautions..................................................5

Main Features .................................................................7

Tamper Evident Labels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Active Anti-Tampering System ................................................9

Product Enclosure Warning Label .............................................9

Equipment Requirements ....................................................10

Features – Cybex SCM120/Cybex SCM120H Front Panel ......................11

Features – Cybex SCM120 Rear Panel .........................................12

Features – Cybex SCM120H Rear Panel .......................................13

Product Specifications .......................................................14

Installation........................................................... 15

Before Installation ............................................................15

Installation ...................................................................16

Typical system installation diagram Cybex SCM120/Cybex SCM120H .........18

Operation ............................................................19

TROUBLESHOOTING.................................................. 22

INFORMATION .......................................................25

BACK TO TABLE OF CONTENTS >

EMERSON 2- Port Secure KVM Mini-M atrix

INTRODUCTION

SECTIONS

Table of Contents

2 3 4 65

2

1

Thank you for purchasing this Emerson Secure product designed for use in
secure defense and intelligence installations. The product provides the highest
security safeguards and features that meet today’s IA (information assurance)
computing requirements as defined in the latest PSS Protection Profile Rev 3.0.

Secure meeting rooms or manager offices in secure organizations often have

multiple computers to be displayed simultaneously on desktop display and large
screen.

Emerson mini matrixes allow users to connect multiple computers and project
their outputs on 2 connected displays. Users are also able

to switch their mouse and keyboard between the connected computers.

This User Manual provides all the details you’ll need to install and operate your
new product.

Intended Audience

This document is intended for the following professionals:

• System Administrators/IT Managers

• End Users

Package Contents

Inside product packaging you will find the following:

• Emerson Secure Product

• DC Power Supply

• User Guidance Documentation

Important Security Note:

If you are aware of potential security vulnerability while installing or operating
this product, we encourage you to contact us immediately in one of the
following ways:

• Web form: Emerson Support

• Email: [e-mail]

• Tel: [phone]

Important: This product is equipped with always-on active anti-tampering
system. Any attempt to open the product enclosure will activate the anti­tamper triggers and render the unit inoperable and warranty void.

Revision

A – Initial Release, 24 Feb 2015

B – Corrections, 5 April 2015

C – Product image updates, 25 May 2015

D – User Guidance changes, 16 June 2015

E – Correction to Features section, 13 August 2015

BACK TO TABLE OF CONTENTS >

EMERSON 2- Port Secure KVM Mini-M atrix

OVERVIEW

SECTIONS

Table of Contents

1 3 4 65

3

2

Safety Precautions

Please read the following safety precautions carefully before using the product:

• Before cleaning, disconnect the product from any electrical power supply.

• Do not expose the product to excessive humidity or moisture.

• Do not store or use for extensive period of time in extreme thermal
conditions – it may shorten product lifetime.

• Install the product only on a clean secure surface.

• If the product is not used for a long period of time, disconnect it from
ele ctrical power.

• If any of the following situations occurs, have the product checked by a
qualified service technician:

– Liquid penetrates the product’s case.

– The product is exposed to excessive moisture, water or any other liquid.

– The product is not working well even after carefully following the

instructions in this user’s manual.

– The product has been dropped or is physically damaged.

– The product shows obvious signs of breakage or loose internal parts.

– In case of external power supply – If power supply overheats, is broken

or damaged, or has a damaged cable.

• The product should be stored and used only in temperature and humidity
controlled environments as defined in the product’s environmental
specifications.

• Never attempt to open the product enclosure. Any attempt to open the
enclosure will permanently damage the product.

• The product contains a non-replaceable internal battery. Never attempt to
replace the battery or open the enclosure.

• This product is equipped with always-on active anti-tampering system.
Any attempt to open the product enclosure will activate the anti-tamper
triggers and render the unit inoperable and warranty void.

BACK TO TABLE OF CONTENTS >

EMERSON 2- Port Secure KVM Mini-M atrix

SECTIONS

Table of Contents

1 3 4 65

4

OVERVIEW

2

Safety Precautions - Précautions de sécurité (French)

Veuillez lire attentivement les précautions de sécurité suivantes avant d’utiliser
le produit:

• Avant nettoyage, débranchez l’appareil de l’alimentation DC / AC.

• Assurez-vous de ne pas exposer l’appareil à une humidité excessive.

• Assurez-vous d’installer l’appareil sur une surface sécurisée propre.

• Ne placez pas le cordon d’alimentation DC en travers d’un passage.

• Si l’appareil n’est pas utilisé de longtemps, retirez l’alimentation murale de
la prise électrique.

• L’appareil devra être rangé uniquement dans des environnements à
humidité et température contrôlées comme défini dans les caractéristiques
environnementales du produit.

• L’alimentation murale utilisée avec cet appareil devra être du modèle
fourni par le fabricant ou un équivalent certifié fourni par le fabricant ou
fournisseur de service autorisé.

• Si une des situations suivantes survenait, faites vérifier l’appareil par un
technicien de maintenance qualifié:

– En cas d’alimentation externe - L’alimentation de l’appareil surchauffe,

est endommagée, cassée ou dégage de la fumée

– ou provoque des court circuits de la prise du secteur.

– Un liquide a pénétré dans le boîtier de l’appareil.

– L’appareil est exposé à de l’humidité excessive ou à l’eau.

– L’appareil ne fonctionne pas correctement même après avoir suivi

attentivement les instructions contenues dans ce guide de l’utilisateur.

– L’appareil est tombé ou est physiquement endommagé.

• L’appareil présente des signes évidents de pièce interne cassée ou
desserrée

• L’appareil contient une batterie interne. La batterie n’est pas remplaçable.
N’essayez jamais de remplacer la batterie car toute tentative d’ouvrir le
boîtier de l’appareil entraînerait des dommages permanents à l’appareil.

• Ce produit est équipé d’toujours-sur le système anti-sabotage active.
Toute tentative d’ouvrir le boîtier du produit va activer le déclencheur anti­sabotage et de rendre l’unité vide inutilisable et garantie.

BACK TO TABLE OF CONTENTS >

EMERSON 2- Port Secure KVM Mini-M atrix

SECTIONS

Table of Contents

1 3 4 65

5

OVERVIEW

2

User Guidance & Precautions

Please read the following User Guidance & Precautions carefully before using the
product:

1. As product powers-up it performs a self-test procedure. In case of self- test
failure for any reason, including jammed buttons, the product will be Inoperable.
Self-test failure will be indicated by the following abnormal LED behavior:

a. All channel-select LEDs will be turned ON and then OFF;
b. A specific, predefined LED combination will be turned ON;
c. The predefined LED combination will indicate the problem t ype (jammed

buttons, firmware integrity).

Try to power cycle product. If problem persists please contact your system
administrator or technical suppor t.

2. Product power-up and RFD behavior:
a. By default, after product power-up, the active channel will be computer #1,

indicated by the applicable front panel push button LED lit.

b. Product Restore-to-Factor y-Default (RFD) function is available via a

physical control button on rear panel. Use a sharp object or paper clip to

hold RFD button pressed for several seconds to initiate an RFD action.
c. RFD action will be indicated by front panel LEDs blinking all together.
d. When product boots after RFD, keyboard and mouse will be mapped to

the active channel #1 and default settings will be restored, erasing all user-

set definitions.

3. The appropriate usage of peripherals (e.g. keyboard, mouse, display,
authentication device) is described in detail in this User Manual’s appropriate
sections. Do not connect any authentication device with an external power
source to product.

4. For security reasons products do not support wireless keyboards and mice. In
any case do not connect wireless keyboard/mouse to product.

5. For security reasons products do not support microphone/line-in audio
input. In any case do not connect a microphone to product audio output
port, including headsets.

6. Product is equipped with always-on active anti-tampering system. Any
attempt to open product enclosure will activate the anti-tamper system
indicated by all channel-select LEDs flashing continuously. In this case,
product will be inoperable and warranty void. If product enclosure appears
disrupted or if all channel-select LEDs flash continuously, please remove
product from service immediately and contact technical support.

7. In case a connected device is rejected in the console port group the user will
have the following visual indications:

a. When connecting a non-qualified keyboard, the keyboard will be non-

functional with no visible keyboard strokes on screen when using the
keyboard.

b. When connecting a non-qualified mouse, the mouse will be non-

functional with mouse cursor frozen on screen.

c. When connecting a non-qualified display, the video diagnostic LED will

flash green and video will not work.

d. When connecting a non-qualified USB device, DPP LED will flash green and

USB device will be inoperable.

8. Product has a remote control por t in the back panel labeled RCU. Do not use
this port - it is inoperable and for future use.

BACK TO TABLE OF CONTENTS >

EMERSON 2- Port Secure KVM Mini-M atrix

SECTIONS

Table of Contents

1 3 4 65

6

OVERVIEW

2

User Guidance & Precautions (Cont.)

9. Important! Before re-allocating computers to channels, it is mandatory to
power cycle product, keeping it powered OFF for more than 1 minute.

10. Product log access and administrator configuration options are described in
product Administrator Guide.

11. Authentication session will be terminated once product power is down or
user intentionally terminates session.

12. If you are aware of any potential security vulnerability while installing or
operating product, please remove product from service immediately and
contact us in one of the ways listed in this manual.

BACK TO TABLE OF CONTENTS >

EMERSON 2- Port Secure KVM Mini-M atrix

SECTIONS

Table of Contents

1 3 4 65

7

OVERVIEW

2

Main Features

Product is designed, manufactured and delivered in security-controlled
environments. Below is a summary of the main advanced features incorporated
in product:

Advanced isolation between computers and shared peripherals

The emulations of keyboard, mouse and display EDID, prevent direct contact
between computers and shared peripherals. Product design achieves maximal
securit y by keeping the video path separate with keyboard and mouse switched
together, purging keyboard buffer when switching channels. All these features
contribute to strong isolation between computer interfaces, maintained even
when product is powered off.

Unidirectional data flow: USB, audio and video

Unique hardware architecture components prevent unauthorized data flow,
including:

• Optical unidirectional data flow diodes in the USB data path that filtrate
and reject unqualified USB devices;

• Secure analog audio diodes that prevent audio eavesdropping with no
support for microphone or any other audio-input device;

• Video path is kept separate from all other traffic, enforcing unidirectional
native video flow. EDID emulation is done at power up and blocks all
EDID/MCCS writes. For DisplayPort video, filtration of AUX channel exists
to reject unauthorized transactions.

Isolation of power domains

Complete isolation of power domains prevents signaling attacks.

Secure administrator access & log functions

Product incorporates secure administrator access and log functions to provide
auditable trail for all product security events, including battery backup life for
anti-tampering and log functions. Non-reprogrammable firmware prevents the
ability to tamper with product logic.

Always-on, active anti-tamper system

Active anti-tampering system prevents malicious insertion of hardware implant
such as wireless key-logger inside product enclosure.. Any anti-tampering
attempt causes isolation of all computers and peripheral devices rendering
product inoperable and showing clear indications of tampering event to user.

Holographic security tamper-evident labels are placed on the enclosure to
provide a clear visual indication if product has been opened or compromised.

Metal enclosure is designed to resist mechanical tampering with all
microcontrollers protected against firmware-read, modification and rewrite.

Duplicate Output Displays

The Mini Matrix allows the user to duplicate the output displays making it easy to
project various sources in secure meeting rooms

BACK TO TABLE OF CONTENTS >

EMERSON 2- Port Secure KVM Mini-M atrix

SECTIONS

Table of Contents

1 3 4 65

8

OVERVIEW

2

Main Features (Cont.)

DVI-I and HDMI Video Support

The Switches support varied video inputs of DVI-I and HDMI. DVI model supports
HDMI and VGA via compatible cables.

VDT Switching

VDT enables easy switching of keyboard and mouse by moving mouse based on
4 possible presets for monitor positioning.

Resolutions Supported

Cybex SCM120 supports up to HD resolutions (1920 X 1200 pixels).

Cybe x SCM120H supports up to 4K-2K Ultra HD resolutions (3840 X 2160 pixels).

Audio Switching

Allows you to share speakers and headphones between computers.

Toggle Audio feature

Front panel Toggle Audio button enables to leave audio in a specific channel.

BACK TO TABLE OF CONTENTS >