Belkin F1DN001R User manual

Secure Desktop Controller Unit (DCU)
User Manual
F1DN001R – 4 Buttons DCU for 2-4 ports
F1DN002R – 4 Buttons DCU for 2-4 ports with LCD
F1DN003R – 3 Buttons DCU for 2-16 ports with LCD
Document Number 8820-01347 Rev. A02

i
Belkin®Secure Desktop Controller Unit (DCU) User Manual
TABLE OF CONTENTS
SECTIONS 1234567
Table of Contents
Introduction .............................................. 1
Package Contents.........................................1
Safety Precautions ........................................2
Overview................................................. 3
Security Features .........................................3
Operational Features ......................................4
Equipment Requirements ...................................5
Unit Display Diagrams .....................................6
Tamper-Evident Label.....................................10
Product Specifications ....................................11
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Before Installation ........................................12
Typical Secure KVM System Installation Diagram
with the Belkin Secure DCU ................................14
Operation ...............................................15
Normal Secure DCU Operation .............................15
Channel selection on F1DN001R and F1DN002R ...............16
Channel selection on F1DN003R ............................16
Normal operation with CAC ................................17
Operation with 8/16 ports..................................18
Configuration............................................19
Administrator Configuration (F1DN002R and F1DN003R Only) . . . . 19
Messages ..............................................21
System Information.......................................21
Customize Channels ......................................22
Display Backlight.........................................26
Load Configuration .......................................26
Save Configuration .......................................28
Exit ....................................................29
Troubleshooting .........................................30
Operation Troubleshooting.................................30
General Troubleshooting ..................................32
Information..............................................35
FCC Statement ..........................................35
Warranty ...............................................35
Reporting Belkin Product Security Vulnerability ................37

1
Belkin®Secure Desktop Controller Unit (DCU) User Manual
INTRODUCTION
SECTIONS
Table of Contents 2345671
Thank you for purchasing this Belkin Secure Desktop Controller Unit
(DCU). The Belkin Secure DCU is a major enhancement to Belkin's line
of Secure KVM products. This product provides an easy and intuitive
user interface to control complex Secure KVM systems. The Secure
DCU enables textual browsing of the available networks/resources
through a color display. It significantly improves user’s situational
awareness and, therefore, enhances security and productivity for users
who operate continuously in multiple-domain secure environments.
This User Manual provides all the details you’ll need to install and
operate your new DCU, in addition to troubleshoot—in the unlikely event
of a problem.
Package Contents
•Belkin Secure DCU
•RJ14 6 ft. DCU Cable
•This User Manual
Important: This product is equipped with an always-on active anti-
tamper system. Any attempt to open the enclosure may activate the
anti-tamper system and render the unit permanently inoperable. If
the unit’s enclosure appears disturbed or if all the port LEDs flash
continuously, please call Belkin Technical Support at [phone].
BACK TOTABLE OF CONTENTS >

2
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 234567
INTRODUCTION
1
Safety Precautions
Carefully read the following safety precautions before using the product:
•Before cleaning, disconnect the product from the attached Secure
KVM or KM unit.
•Do not expose the product to excessive humidity.
•Do not store or use for an extensive period of time in extreme
thermal conditions—this may shorten the product life.
•Install the product on a clean and secure surface.
•Do not place the Secure DCU’s cable in the path of foot traffic.
•If the product is not used for an extended period, disconnect the
Secure DCU from the KVM or KM.
•If one of the following situations occur, send the product to
a qualified Belkin service technician:
– Liquid penetrates the product’s case.
– The product is exposed to excessive moisture or water.
– The product does not work well even after carefully following
the instructions in this user’s manual.
– The product has been dropped or is physically damaged.
– The product shows signs of breakage or loose internal parts.
•The product should be stored and used only in temperature and
humidity-controlled environments as defined in the product’s
environmental specifications.
•The product contains a non-replaceable internal battery. Never
attempt to replace battery. Any attempt to open product enclosure
will permanently damage the product.
BACK TOTABLE OF CONTENTS >

3
Belkin®Secure Desktop Controller Unit (DCU) User Manual
OVERVIEW
SECTIONS
Table of Contents 1 345672
Security Features
Belkin’s Secure KVM Switches are the most advanced and secure
commercially available KVM Switches available today. The Belkin
Secure DCU is an accessory that is designed to improve the usability
of Belkin’s Secure KVMs, providing a similar set of advanced security
features.
These are some of its key security features:
Improved User Situational Awareness
The Belkin Secure DCU clearly indicates the selected channel,
showing the channel number along with programmable text and color
(F1DN002R and F1DN003R models only).
Non-Programmable Firmware
The Belkin Secure DCU’s firmware cannot be reprogrammed,
preventing a remote attack on the DCU control logic.
Active Always-On Anti-Tamper
The Belkin Secure DCU’s enclosure active anti-tamper system prevents
access and tampering of its electronic circuitry, permanently disabling
the product once tampering is detected.
Holographic Tamper-Evident Label
A serially numbered holographic tamper-evident security label on the
Belkin Secure DCU enclosure clearly shows if the enclosure has been
opened or compromised.
Secure Packaging
“Tear away” packaging clearly shows if the packaging was opened or
tampered during shipping, ensures secure delivery all the way to the
end user.
Common Criteria EAL 4+ Listing
The Belkin Secure KVM Switch and the Belkin Secure DCU are listed
by the Common Criteria organization. Belkin’s Secure DCU is Common
Criteria validated to EAL 4+ (Evaluation Assurance Level 4), to assure
the highest level of protection.
BACK TOTABLE OF CONTENTS >

4
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Operational Features
The Belkin Secure DCU enhances the Belkin Secure KVMs, making
them easier to use. These are some of its key operating features:
Textual Display of network/resource name and color
The F1DN002R and F1DN003R color LCD display shows the available
networks, along with clear administrator programmable name and color.
The F1DN003R displays and controls up to 16 channels.
Clear DCU and KVM error messages
The F1DN002R and F1DN003R show clear error messages and
operating problems.
Easy configuration with an SD card
Saving and loading of configuration files to an SD memory card enables
easy deployment of multiple systems (F1DN002R and F1DN003R).
Note: The Unlock SD card, USB to Mini-USB cable and API CD are
part of the Secure Desktop Controller Administrator Kit, ordered
separately.
CAC status indication
The Secure DCU display clearly shows the CAC status of each network
or resource.
Multilanguage support
Network/resource names can be customized with special characters
in US English, GB English, French, German and Spanish (F1DN002R
and F1DN003R).
Administrator Unlock SD Card
Advanced settings are locked to prevent access by unauthorized users.
Administrator must use a special Unlock SD card to access these
settings.
BACK TOTABLE OF CONTENTS >

5
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Equipment Requirements
Cables
Belkin Secure DCU requires a custom cable with RJ14 connectors. It
is supplied with a 6 ft. (1.9 m) cable. An optional 50 ft. (15 m) cable is
also available.
DCU Cables:
•F1D9026-06
(CABLE, RJ14, 6P6C, 26AWG,UNSHIELDED, DCU CABLE, 6’)
•F1D9026-50 (Sold separately)
(CABLE, RJ14, 6P6C, 26AWG, UNSHIELDED, DCU CABLE, 50’)
Important: Do not connect the Belkin Secure DCU to PPoE, LAN
switches or LAN ports. Connecting to other devices may damage the
Secure DCU or the connected equipment.
Secure KVM
Connect the Belkin Secure DCU only to Belkin Secure KVM units that
support DCU. For the latest information on product support, go to the
Belkin website http://belkinbusiness.com/
F1DN001R and F1DN002R can only be used only with Belkin 2 and
4-port KM/KVM/Windowing KVM switches.
Administrator Setup Equipment
F1DN002R and F1DN003R enable interface with standard keyboards,
for easy setup. The following parts are included in the Secure Desktop
Controller Administrator Kit (ordered separately):
•An API CD allowing the control of the DCU externally
(documentation is supplied in CD).
•USB Type-A to Mini-USB adapter
•Unlock SD card with custom file format, sample configurations
and Secure DCU Setup Unlock function
Belkin Part Number: F1DR180
Secure Desktop Controller Administrator Kit
In addition to the above kit, the administrator also needs a standard
USB keyboard, to manually enter text and select colors.
BACK TOTABLE OF CONTENTS >

6
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Front-Panel Features – F1DN001R
1
5
2
3
4
1Channel #1 select illuminated push-button 4Channel #4 select illuminated push-button
2Channel #2 select illuminated push-button 5Tamper-Evident Label
3Channel #3 select illuminated push-button
BACK TOTABLE OF CONTENTS >

7
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Front-Panel Features – F1DN002R
1
6
5
2
3
4
1Channel #1 select illuminated push-button 4Channel #4 select illuminated push-button
2Channel #2 select illuminated push-button 5Graphic LCD display
3Channel #3 select illuminated push-button 6Tamper-Evident Label
BACK TOTABLE OF CONTENTS >

8
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Front-Panel Features – F1DN003R
1
5
4
2
3
1Up illuminated push-button 4Graphic LCD display
2Select illuminated push-button 5Tamper-Evident Label
3Down illuminated push-button
BACK TOTABLE OF CONTENTS >

9
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Rear-Panel Features – F1DN001R
1
2
3
1Tamper-Evident Label
2DCU cable RJ14 port
3Mini-USB programming connector
Rear-Panel Features – F1DN002Rand F1DN003R
1
2
3
5
4
1Tamper-Evident Label 4AUX port
2SD card slot 5Mini-USB keyboard connector
3DCU cable RJ14 port
Note: The AUX port is intended to connect to the following devices:
•Belkin Secure USB Switch
(see Belkin Secure USB Switch User Manual)
•External computer running the Secure DCU API
(see Belkin Secure DCU API Programming and Reference Manual)
BACK TOTABLE OF CONTENTS >

10
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Tamper-Evident Label
The Belkin Secure DCU uses a holographic tamper-evident label that
shows if the enclosure was tampered. The label shows white dots or
the text “VOID” when removed. Inspect the tamper-evident label when
opening product packaging.
IMPORTANT NOTICE:
Call Belkin Technical Support at [phone] if for any reason,
the tamper-evident label is missing, torn, disconnected, appears
disrupted, or looks different than the example shown here.
12345678
Belkin Holographic Tamper-Evident Label
Active Anti-Tampering System
The Belkin Secure DCU is equipped with an always-on active anti-
tampering system. If the system detects mechanical intrusion, the DCU
displays a message stating the product that has been tampered.
If the product indicates a tampered state, avoid using the product
and call Belkin Technical Support.
BACK TOTABLE OF CONTENTS >

11
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Product Specifications
Part No. F1DN001R
F1DN002R
F1DN003R
Enclosure Impact-Resistant ABS Plastic
Power Requirements 5V DC, 1A (maximum)
from connected Secure KVM unit
No. of Channels Supported 4 maximum for F1DN001/2R
16 maximum for F1DN003R
No. of Users Supported 1
Displays Size 3.5 inch diagonal (F1DN002/3R)
Display Resolution 240 x 400 RGB (F1DN002/3R)
Display Color Depth 65K (F1DN002/3R)
Display Technology a-Si with white LEDs for backlight
KVM Interface RJ14 jack for Belkin Secure DCU bus.
Uses the supplied Belkin Secure DCU cable.
Other Interfaces – Mini-USB Type A female connector
for administrator keyboard connection
(adapter cable must be ordered separately)
– SD card slot
– AUX control and monitoring port
(available in F1DN002/3R only)
User Interface – Four illuminated channel selection buttons
(F1DN001/2R)
– One toggle switch with up/down/select
buttons (F1DN003R)
Languages Supported English, French, Spanish, German,
Operating Temp 32° to 104° F (0° to 40° C)
Storage Temp -4° to 140° F (-20° to 60° C)
Humidity 0-80% RH, non-condensing
Dimensions 5.51 (W) x 3.54 (D) x 4.34 (H) inches /
140 (W) x 90 (D) x 110 (H) mm /
Weight 0.55 lb. (0.25 kg)
Security Accreditation Common Criteria EAL 4+
Made in USA
Product Design Life-Cycle 10 years per MIL-HDBK-217E
BACK TOTABLE OF CONTENTS >

12
Belkin®Secure Desktop Controller Unit (DCU) User Manual
INSTALLATION
SECTIONS
Table of Contents 12 45673
Before Installation
Unpacking the Product
Before opening the product packaging, inspect the packaging’s seals,
to assure that the packaging was not opened or tampered during
shipping. If the packaging’s seals look suspicious, do not use the
product and contact Belkin support.
After opening the packaging, inspect the package contents to verify
all required components are included. See packaging contents list on
page 1.
After removing the Belkin Secure DCU from its packaging materials,
inspect the tamper-evident label, to assure that it is properly sealed and
was not tampered. Do not use that product if the label is damaged or
missing, and contact Belkin support.
Where to place the Belkin Secure DCU?
The Belkin Secure DCU is designed to be placed on a desktop, near the
display, mouse and keyboard that the user will use to control the Secure
KVM. Locate the Belkin Secure DCU in the user’s primary field of view
while working with the display, since Secure KVM channel selection and
continuous status monitoring is required from a security standpoint.
Typical location is on the user’s desktop to the lower right of the display
for right-handed users, or to the lower left for left-handed users.
The product may be fixed to a rack or table using Velcro®pads, if
necessary.
Avoid direct sunlight or strong light source reflections on the Belkin
Secure DCU display, to prevent eye fatigue to the user.
The Secure DCU must be located in a secure and well-protected
environment, to prevent potential access by attackers.
Consider the following when deciding where to place the Belkin Secure
DCU:
•User must have easy access to the push-buttons on the Belkin
Secure DCU.
•Distance: Cables from the Secure DCU to the Secure KVM may
extend up to 50 feet.
•User’s keyboard, mouse and CAC device must connect directly
to the Secure KVM
•The Belkin Secure DCU must be in the user’s primary field of view.
Note: Connect the DCU directly to the KVM. Do not connect switches
or other devices between them.
Note: Use the following cables to connect the Belkin Secure DCU to
the Secure KVM:
– Up to 6 ft. (1.9 m): F1D9026-06
– From 6 ft. (1.9 m) to 50 ft. (15 m): F1D9026-50
BACK TOTABLE OF CONTENTS >

13
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 12 4567
INSTALLATION
3
Step 1 –
Connecting the Belkin Secure DCU to the Secure KVM/KM/
Windowing KVM Switch
•Complete all Secure KVM installation steps as defined in the
Secure KVM User Manual.
•Power up the Secure KVM and verify that it is operating, and
then shut it down. Using the supplied DCU cable, connect the
RJ14 port on the Secure DCU’s back panel to the DCU port in the
Secure KVM’s back panel Console area. See connection diagram
on page 14.
•If computers that connect to the Secure KVM require CAC
authentication, connect a CAC card reader to the CAC port in the
Console area of the back panel.
Step 2 – Power up
•Power up the user display.
•Power up the Secure KVM.
•Verify that the KVM’s front-panel LEDs indicate that channel #1
(default channel) is selected.
•Models F1DN002 and F1DN003R:
– Verify that the Belkin Secure DCU display is illuminated
– Verify that is the DCU indicates that channel #1 is selected.
– No message appears.
•Model F1DN001R:
– Verify that the Belkin Secure DCU push-buttons are illuminated
and indicate channel #1.
•The following error message appears if the Belkin Secure DCU was
moved from a system having a different configuration, such as a
different number of ports:
F1DN003R
Configuration
DCU is currently not set to work
with the available ports in your
device Press the <UP> key to
sync with your device or
Press enter key to exit...
Note: the Secure KVM front-panel push-buttons become disabled
when connected to the Belkin Secure DCU.
Note: F1DN001R: Installation is now complete. Skip the rest of this
section.
Note: The Belkin Secure DCU will not operate if it is connected to
the KVM after the KVM is powered up. The Secure KVM will continue
to work with no interaction with the connected Belkin Secure DCU.
To activate the Belkin Secure DCU, restart the KVM after connecting
the DCU.
See how to configure the Belkin Secure DCU to be compatible with the
Secure KVM on page 19.
BACK TOTABLE OF CONTENTS >

14
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 12 4567
INSTALLATION
3
Typical Secure KVM System Installation Diagram with the Belkin Secure DCU
4
Console
DCU
Display Video
CAC CACAudio Audio K/MMouse Keyboard PS/ 2 K PS/ 2 M
3
Video
CACAudio K/M
2
Video
CACAudio K/M
1
Video
CAC
Restore
Audio K/M
F1DN104M
Computers
DCU
Audio
Mouse
Keyboard
User display
CAC Reader
AC Power
BACK TOTABLE OF CONTENTS >

15
Belkin®Secure Desktop Controller Unit (DCU) User Manual
OPERATION
SECTIONS
Table of Contents 12345674
Normal Secure DCU Operation
If the Belkin Secure DCU has already been configured, or it is operating
in its default configuration, you can begin using it.
•Power up the Secure KVM. It should identify the connected
Secure DCU and the configured channels appear on the display.
Note:
– F1DN001R: Channel 1 button lights
– F1DN002R: 4 channels appear on the display. Channel 1 appears
as the active channel.
– F1DN003R: The first 4 channels appear on the display. Channel 1
appears as the active channel.
•On F1DN001R and F1DN002R, press the button of the channel
that you want to activate.
•On F1DN003R, press the down button (
) to scroll down the list
of connected channels. Press the Select button to activate the
selected channel.
Operation
Once the Secure KVM and the Belkin Secure DCU are properly installed
and powered-up, they operate immediately with the factory default
configuration. Once a custom configuration is loaded and applied, they
restart and operate according to the new configuration. Channel 1 is
the default channel after power up for all Belkin Secure KVMs. LED #1
on the Secure KVM’s front panel and the Belkin Secure DCU display
indicate the active channel.
The following example uses a 4-port Secure KVM to demonstrate the
operation of the Belkin Secure DCU.
Note: Operation of F1DN002R model is similar to F1DN003R
described here, but instead of the up/down and select push-buttons,
use the four illuminated push-buttons to control the cursor location
and state.
F1DN001R and F1DN002R are operated by simply pressing the
illuminated buttons on the front panel of the Belkin Secure DCU. The
illuminated push-buttons are a simple extension of front-panel push-
buttons of the KVM and behave exactly the same.
Note: The front panel push-buttons of the Secure KVM switch are
disabled when the Belkin Secure DCU is connected it.
Note: The Belkin Secure DCU does not operate if it is connected after
the Secure KVM powered up and operating, or if it is momentarily
disconnected and reconnected to the Secure KVM. The Secure
KVM continues to work without interaction with the Belkin Secure
DCU. The user can still operate the secure KVM using keyboard
commands.
BACK TOTABLE OF CONTENTS >

16
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 123 567
OPERATION
4
Channel selection on F1DN001Rand F1DN002R
•The default display after Belkin Secure DCU and KVM power up
indicate channel #1 as the active channel.
•On the front panel of the Secure DCU, press the channel button
corresponding to the desired computer.
Channel selection on F1DN003R
Select which computer to control using the Belkin Secure DCU:
•The default display after Belkin Secure DCU and KVM power up
indicate channel #1 as the active channel.
F1DN003R
Channel
CAC
CAC
1 Internet
2 Secure AF
3 Classified ERP
4 Navy OP
•Press the up or down push buttons to move the arrow to another
channel.
F1DN003R
Channel
CAC
CAC
1 Internet
2 Secure AF
3 Classified ERP
4 Navy OP
•Press the center (Select) button ( ) to activate the new channel.
The new channel is highlighted.
F1DN003R
Channel
CAC
CAC
1 Internet
2 Secure AF
3 Classified ERP
4 Navy OP
•The user may also use keyboard shortcuts to switch channels.
Type Ctrl,Ctrl,<channel number> to switch the KVM to another
channel.
For example: Type Ctrl, Ctrl, 4to change to channel 4.
BACK TOTABLE OF CONTENTS >

17
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 123 567
OPERATION
4
Normal operation with CAC
CAC indication appears on every channel in which CAC is enabled. To
enable or disable CAC use the front panel sliders on the Secure KVM,
as described in the Secure KVM User Manual.
CAC indication only appears on enabled channels when a CAC device
is connected to the CAC port for those channels on the Secure KVM.
The following example uses a 4-Port Secure KVM with CAC enabled on
computers 1 and 3.
•Default display after power up shows the active KVM channel is 1.
CAC is enabled on channels 1 and 3.
F1DN003R
Channel
CAC
1 Internet
2 Secure AF
3 Classified ERP
4 Navy OP
CAC
•The CAC indicator next to the channel name flashes and then
appears highlighted, showing that CAC is mapped to this channel.
•Selecting channel 2 will move the active channel to 2 but the CAC
remains on channel 1, because CAC is not enabled on channel 2.
•Selecting channel 3 will move the active channel to 3 and the CAC
to the same channel.
F1DN003R
Channel
CAC
1 Internet
2 Secure AF
3 Classified ERP
4 Navy OP
CAC
F1DN003R
Channel
1 Internet
2 Secure AF
3 Classified ERP
4 Navy OP
CAC
CAC
Note: Depending on the CAC configuration on the target computer,
changing from a CAC enabled channel to a different channel, the
CAC authorization may continue indefinitely, terminate after a timeout
period, or terminate immediately.
Note: Leaving and returning to a channel that requires CAC
authentication may require re-authorization.
Caution: Terminate all CAC authorized sessions when leaving secure
computers unattended. Verify that CAC authorization is inactive and
the CAC indicator for each channel is not highlighted.
BACK TOTABLE OF CONTENTS >

18
Belkin®Secure Desktop Controller Unit (DCU) User Manual
SECTIONS
Table of Contents 123 567
OPERATION
4
Operation with 8/16 ports
The Belkin Secure DCU F1DN003R can connect to a Secure KVM
switch with up to 16 ports.
Belkin Secure DCU operation is similar to 4-port operation except for
the following:
1. The Belkin Secure DCU F1DN003R can list all the channels on the
connected Secure KVM Switch, but can only display four channels
at a time.
2. When scrolling down past channel 4, the list refreshes to list
channels 5 through 8, and so on.
For example, the 8-port secure KVM highlights the operational
differences.
•Press the Down button to scroll to channel 8. The display shows
channels 5 through 8, without showing the currently active channel 1.
The channel number and CAC status appear at the top of the CAC
column.
F1DN003R
Channel CAC: 1
CAC
CAC
5 Internet
6 SecNet01
7 SecNet02
8 OpenNet
CAC
•Scrolling down and selecting channel 8 shows it marked and fixed
at the bottom of the list.
F1DN003R
Channel CAC: 1
CAC
CAC
5 Internet
6 SecNet01
7 SecNet02
8 OpenNet
CAC
•Since channel 8 is not CAC enabled, CAC authorization freezes
automatically and remains active on channel 1.
BACK TOTABLE OF CONTENTS >