HighSecLabs K404F, K424F, K502, K524E, K504 User Manual
...
Secure Combiner KVM Switch User Manual
User Manual: Combiner KVM Switches (K404F, K424F)
User Manual
Models covered in this user manual:
K404F: Secure 4-port DVI Combiner KVM Switch w/audio & DPP
K424F: Secure 4-port Dual-Head DVI Combiner KVM Switch w/audio & DPP
Rev: 2.4
1
Secure Combiner KVM Switch User Manual
Rev
Date
Description of changes
1.0
Nov 11, 2010
Initial release
1.1
Nov 20, 2011
Internal review for CC evaluation
2.1
Dec 30, 2011
Released for customers
2.2
Feb 4, 2012
Added security procedures text
2.3
April 19, 2012
Added support for composite
device
2.4
April 3 2015
Updates
Table of Content
Introduction ....................................................................................... 3
Package Contents ............................................................................... 3
Security Features ............................................................................... 4
Main Features .................................................................................... 6
Equipment Requirements .................................................................. 7
Safety Precautions ............................................................................. 8
Front Panel Features .......................................................................... 9
Rear Panel Features ......................................................................... 10
Tamper Evident Labels ..................................................................... 11
Active Anti-Tampering System ......................................................... 11
Product Specifications...................................................................... 12
Before Installation ............................................................................ 14
Installation ....................................................................................... 16
Administrator Setup ......................................................................... 19
Record of Revisions
Operation ......................................................................................... 21
DPP Operation.................................................................................. 23
Single Display Viewing Options ........................................................ 27
Dual Display Viewing Options .......................................................... 29
Summary of Actions ......................................................................... 30
Troubleshooting Guide .................................................................... 32
Copyright and Legal Notice .............................................................. 35
2
Secure Combiner KVM Switch User Manual
Important Security Note:
If you are aware of potential security vulnerability while
installing or operating this product, we encourage you to
contact us immediately in one of the following ways:
Web form: http://www.highseclabs.com/support/case/
Email: security@highseclabs.com
Tel: +972-4-9591191 or +972-4-9591192
Important: This product is equipped with always-on active anti-
tampering system. Any attempt to open the product enclosure
will activate the anti-tamper triggers and render the unit
inoperable and warranty void.
Important Security Note:
If you are aware of potential security vulnerability while
installing or operating this product, we encourage you to
contact us immediately in one of the following ways:
Web form: http://www.highseclabs.com/support/case/
Email: security@highseclabs.com
Tel: +972-4-9591191 or +972-4-9591192
Important: This product is equipped with always-on active antitampering system. Any attempt to open the product enclosure
will activate the anti-tamper triggers and render the unit
inoperable and warranty void.
Introduction
Thank you for purchasing this HSL Secure Combiner KVM Switch.
There are many cases where one user needs to work simultaneously
with several computers. The Secure KVM Combiner is designed to
provide users with native windowing environment across isolated
networks.
The HSL Secure KVM Combiner switch uses advanced video
processing technology to draw a high resolution dynamic “mosaic” of
images generated by different computer sources. Built-in video
sources isolation forces unidirectional flow of data through the USB
and video ports. The product was designed and certified according to
NIAP standards.
This User Manual provides all the details you’ll need to install and
operate your new Switch, in addition to troubleshooting guidance—
in the unlikely event of a problem.
Package Contents
Inside product packaging you will find the following:
HSL Secure KVM Product
DC Power Supply
5-button Mouse
User Guidance Documentation
3
Secure Combiner KVM Switch User Manual
Security Features
EDID Emulation and Firewall
HSL Secure KVM Switch is the most advanced and secure
commercially available KVM Switch available today. This product is a
derivative of high security KVM product used in newest NATO nuclear
submarines. Below is a summary of some of the security features
incorporated into the product.
Unidirectional Data Paths
Optical diodes used to enforce unidirectional data flow from the
peripheral devices to computers preventing potential leakage paths
between computers even in the severe threat of two infected
computers attacking the KVM.
No Shared Resources
This KVM Switch designed to securely operate even when peripheral
devices are vulnerable to signaling attacks. This KVM Switch does not
allow computer access to any shared resource and does not share
controllable power sources.
Dedicated Processors for Emulation
The Switch features a dedicated processor per computer port to
emulate peripheral devices. This keeps each computer running on
different security levels physically separated and secure at all times,
and prevents any unintended data leakage between computers.
Non-Reprogrammable Firmware
The Switch features custom firmware that is not reprogrammable,
preventing the ability to remotely attack the KVM control logic.
HSL Secure KVM Switch blocks the computer access to the shared
display by using isolated EDID emulators. This arrangement together
with the internal EDID firewall protects from KVM attacks targeting
the external memory effect of the shared display.
USB Ports Protection
Console USB ports are protected from the use of storage and other
unsafe USB devices through strong filtering (independent of
computer protection means). Unqualified devices are rejected when
connected to the Switch. Only mouse and keyboard data are passed
through.
Heavy-duty Steel Enclosure
HSL Secure KVM Switches uses thick steel components to protect the
product from physical tampering and to minimize radiated
electromagnetic emissions that can be snooped or intercepted.
Active Always-On Anti-Tamper
Active chassis anti-tamper system prevents the KVM electronic
circuitry from being accessed and tampered with by permanently
disabling the product once tampering is detected.
Holographic Tamper-Evident Labels
Four serially numbered holographic security tamper-evident labels
are placed on the enclosure surface to provide a visual indication if
the Switch has been opened or compromised.
4
Secure Combiner KVM Switch User Manual
High Inter-Channel Analog Isolation
HSL Secure KVM Switches offers exceptionally high isolation between
computer channels to prevent analog leakages across the KVM.
Dedicated Peripheral Port
HSL patented Dedicated Peripheral Ports enables secure use of CAC
or smart-card readers leveraging security.
Common Criteria Listing
The Switch is listed by the Common Criteria organization.
5
Secure Combiner KVM Switch User Manual
Main Features
The HSL Secure KVM Switch was designed with the user in mind for
today’s IT environment. Below is a summary of some of the features
incorporated into the Product.
Video Support
DVI models support DVI-I displays as well as VGA and HDMI
via compatible cables.
Dual Display and Resolutions Supported
Products supports dual display and video resolutions of up to HD
(1920 X 1200 pixels).
Real-time and real quality video
Pixel-by-pixel video image. No quality loss, latency, reduced colors,
dropped frames or artifacts. Fastest digital video processing
technology available in any KVM today. Less than 30 millisecond
latency.
Easy customization
Advanced Scaling Function
The HSL Secure KVM Combiner has an advanced scaling function
allowing the user to scale the video source 2x and 4x smaller to assure
good view and superb work experience. User can now fit 4 full HD
sources on a single HD screen by scaling each source and all in real
time with no data loss.
Scale and Tile Modes
Allowing users to focus on a main source while viewing the other
sources or tile all of the sources equally
DPP port
Dedicated peripheral port enables to connect CAC and smart card
readers to product. Product is designed with complete isolation
between DPP data, such as user authentication smart card reader
data, and all other product traffic.
Administrator mode enables easy customization of channels, colors,
cursors, task-bar, background etc. User programmable buttons
enable quick setting of user defined screen arrangements.
Audio Support
The HSL Secure KVM Combiner supports audio out switching.
Microphone switching is not supported to prevent analog leakages
through audio ports.
6
Secure Combiner KVM Switch User Manual
Equipment Requirements
Cables
It is highly recommended to use HSL Cable Kits for product to ensure
optimal security and performance.
One Cable Kit is required per connected computer.
Operating Systems
Product is compatible with devices running on the following
operating systems:
• Microsoft® Windows®
• Red Hat®, Ubuntu® and other Linux® platforms
• Mac OS® X v10.3 and higher.
USB Keyboard console port
The product console USB keyboard port is compatible with Standard
USB keyboards.
Notes:
a. For security reasons products do not support wireless
keyboards. In any case do not connect wireless keyboard to
product.
b. Non-standard keyboards, such as keyboards with integrated
USB hubs and other USB-integrated devices, may not be fully
supported due to security policy. If they are supported, only
classical keyboard (HID) operation will be functional. It is
recommended to use standard USB keyboards.
USB Mouse console port
The product console USB mouse port is compatible with standard
USB mice.
Notes:
a. Console USB keyboard and mouse ports are switchable, i.e.
you can connect keyboard to mouse port and vice versa.
However, for optimal operation it is recommended to
connect USB keyboard to console USB keyboard port and
USB mouse to console USB mouse port.
b. Console USB mouse port supports Standard KVM Extender
composite device having a keyboard/mouse functions.
c. For security reasons products do not support wireless mice.
In any case do not connect wireless mouse to product.
PS/2 Mouse and Keyboard console ports
The product console PS/2 keyboard and mouse ports are compatible
with standard PS/2 keyboards and mice.
Video Support
Combiners supports DVI-I displays as well as VGA and HDMI
via compatible cables.
Resolutions Supported
DVI Dual-link supports resolution up to 2560 x 1600.
DVI Single-link supports resolution up to 1920x1200.
User Audio Devices
Product is compatible with the following types of user audio
devices:
Stereo headphones;
Amplified stereo speakers.
Note: In any case do not connect a microphone to product audio
output port including headsets.
DPP Port
The product operates with authorized USB devices plugged into the
console DPP Port, such as USB smart-card reader or Common Access
Card (CAC) reader.
7
Secure Combiner KVM Switch User Manual
Safety Precautions
Please read the following safety precautions carefully before using
the product:
Before cleaning, disconnect the product from DC
power.
Be sure not to expose the product to excessive
humidity.
Be sure to install the product on a clean secure
surface.
Do not place the DC power cord in a path of foot
traffic.
If the product is not used for a long period of time,
remove the product’s wall-mount power supply from
the mains jack.
If one of the following situations occurs, get the
product checked by a qualified service technician:
The product’s power supply is overheated,
damaged, broken, causes smoke or shortens
the mains power socket.
The product has obvious signs of breakage or
loose internal parts.
The product should be stored and used only in
temperature and humidity controlled environments
as defined in the product’s environmental
specifications.
The wall-mount power supply used with this product
should be the model supplied by the manufacturer
or an approved equivalent provided by HSL or an
authorized service provider. The use of improper
power source will void product warranty.
Liquid penetrates the product’s case.
The product is exposed to excessive moisture
or water.
The product is not working well even after
carefully following the instructions in this
user’s manual.
The product has been dropped or is physically
damaged.
8
Secure Combiner KVM Switch User Manual
1 – Steel enclosure
2 – DPP (Dedicated Peripheral Port) Status LED ("Freeze")
3 – DPP channel select LEDs
4 – Channel Select push-buttons and LEDs
5a-5b – Holographic Tamper Evident Labels
1 2 3
5b 4 5a
Front Panel Features
9
Secure Combiner KVM Switch User Manual
Console Area
1 - DPP (Dedicated Peripheral Port) console USB jack
2 - RDC remote control port RJ-45 (for future use)
3 – Audio console output 3.5 mm stereo jack
4 - USB Keyboard & Mouse jacks
5 – PS/2 Keyboard & Mouse jacks (Mini-DIN)
6 – Console 2 X DVI-D video input jacks & diagnostic LEDs
2 4 5
6
Computer Area
7 - Computer USB Keyboard & Mouse jack
8 - Computer audio input jack 3.5mm stereo
9 - Computer DPP USB jack
10 - Computer DVI-D video input jack
General
11 - DC Power input jack – barrel type
12 – Restore Factory Default
10
11
3 1 8
7 9 12
Rear Panel Features
Model shown K424F
10
Secure Combiner KVM Switch User Manual
Tamper Evident Labels
HSL Secure KVM Switch uses 4 holographic tamper evident labels to
provide visual indications in case of enclosure intrusion attempt.
These labels indicate white dots or the text “VOID” once removed.
When opening product packaging inspect the 4 tampering evident
labels.
If for any reason one or more tamper-evident label is missing,
appears disrupted, or looks different than the example shown here,
please call HSL Technical Support and avoid using that product.
HSL Holographic Tampering Evident Label
Active Anti-Tampering System
11
HSL Secure KVM Switch is equipped with always-on active antitampering system. If mechanical intrusion is detected by this
system, the Switch will be permanently disabled and LED will blink
continuously.
If product indication tampered state (all LEDs blinking) - please call
HSL Technical Support and avoid using that product.
Loading...