Belkin F1DN104F-3 User manual

Advanced Secure Dual-Head
DVI-I KVM Switch
User Manual
F1DN104E-3 – Belkin Advanced Secure Dual-Head DVI-I KVM Switch; 4-Port
F1DN104F-3 – Belkin Advanced Secure Dual-Head DVI-I KVM Switch; 4-Port Plus
Document Number 8820-00764 Rev. B02
This Belkin product is compliant
with latest NIAP Protection Profile
PSS Ver. 3.0, which exceeds EAL4
and PP PSS Ver. 2.1.
N
I
A
P
P
P
P
S
S
3
.
0
C
E
R
T
I
F
I
E
D
C
O
M
M
O
N
C
R
I
T
E
R
I
A

i
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
TABLE OF CONTENTS
SECTIONS 1 2 3 4 5 6 87
Table of Contents
Introduction ..............................................1
Package Contents.........................................1
Safety Precautions ........................................2
User Guidance & Precautions ...............................3
Overview.................................................5
Security Features .........................................5
Tamper Evident Labels .....................................6
Other Features ...........................................7
Equipment Requirements ...................................8
System Requirements......................................9
Unit Display Diagrams ....................................11
Specifications ...........................................13
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Pre-Configuration ........................................14
Connection and Installation ................................15
Operating the KVM Switch ................................18
Common Access Card (CAC) Configuration and Installation ...19
Frequently Asked Questions...............................20
Troubleshooting .........................................21
Information..............................................23

1
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
INTRODUCTION
SECTIONS
Table of Contents 2 3 4 5 6 871
Thank you for purchasing this Belkin Secure DVI-I Dual-Head KVM
Switch (the Switch). This KVM Switch is designed for use in secure
defense and intelligence installations. The Switch offers safe centralized
control, which prevents unintended data transfer between computers
running at different security levels. The Switch provides the highest
security safeguards and features that meet today’s IA (information
assurance) computing requirements.
This User Manual provides all the details you’ll need to install and
operate your new Switch, in addition to expert troubleshooting advice -
in the unlikely event of a problem.
Important: This Switch is equipped with active anti-tamper triggers.
Any attempt to open the enclosure will activate the anti-tamper
triggers and render the unit inoperable. If the unit’s enclosure
appears disrupted or if all the port LE Ds flash continuously, please
call Belkin Technical Support at [phone].
Package Contents
• Belkin Secure DVI-I Dual-Head KVM Switch
• 12V 1.5A DC Power Supply
• 1 set Interchangeable Port Color Chips (multiple colors)
• 1 set Port-Naming Labels
• 6 Ft. USB Cable (F1DN104F-3 model only)
• User Manual
Please note: Belkin Secure KVM Products cannot be upgraded,
serviced or fixed.

2
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 2 3 4 5 6 87
INTRODUCTION
1
Safety Precautions
Please read the following safety precautions carefully before using the
product:
• Before cleaning, disconnect the product from any electrical power
supply.
• Do not expose the product to excessive humidity or moisture.
• Do not store or use for extensive period of time in extreme thermal
conditions – it may shorten product lifetime.
• Install the product only on a clean secure surface.
• If the product is not used for a long period of time, disconnect it
from electrical power.
• If any of the following situations occurs, have the product checked
by a qualified service technician:
– Liquid penetrates the product’s case.
– The product is exposed to excessive moisture, water or any
other liquid.
– The product is not working well even after carefully following
the instructions in this user’s manual.
– The product has been dropped or is physically damaged.
– The product shows obvious signs of breakage or loose internal
parts.
– In case of external power supply – If power supply overheats, is
broken or damaged, or has a damaged cable.
• The product should be stored and used only in temperature and
humidity controlled environments as defined in the product’s
environmental specifications.
• Never attempt to open the product enclosure. Any attempt to
open the enclosure will permanently damage the product.
• The product contains a non-replaceable internal battery. Never
attempt to replace the battery or open the enclosure.
• This product is equipped with an always-on active anti-tampering
system. Any attempt to open the product enclosure will activate
the anti-tamper triggers and render the unit inoperable and
warranty void.

3
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 2 3 4 5 6 87
INTRODUCTION
1
User Guidance & Precautions
Please read the following User Guidance & Precautions carefully before
using the product:
1. As product powers-up it performs a self-test procedure. In case of
self- test failure for any reason, including jammed buttons, the product
will be Inoperable. Self-test failure will be indicated by the following
abnormal LED behavior:
a. All channel-select LEDs will be turned ON and then OFF;
b. A specific, predefined LED combination will be turned ON;
c. The predefined LED combination will indicate the problem type
(jammed buttons, firmware integrity).
Try to power cycle product. If problem persists please contact your
system administrator or technical support.
2. By default, after product power-up, the active channel is #1.
3. The appropriate usage of peripherals (e.g. keyboard, mouse, display,
authentication device) is described in detail in this User Manual's
appropriate sections. Do not connect any authentication device with
an external power source to product.
4. For security reasons products do not support wireless keyboards and
mice. In any case do not connect wireless keyboard/mouse to product.
5. For security reasons products do not support microphone/line-in
audio input. In any case do not connect a microphone to product audio
output port, including headsets.
6. Product is equipped with an always-on active anti-tampering system.
Any attempt to open product enclosure will activate the anti-tamper
system indicated by all channel-select LEDs flashing continuously.
In this case, product will be inoperable and warranty void. If product
enclosure appears disrupted or if all channel- select LEDs flash
continuously, please remove product from service immediately and
contact technical support.
7. Connecting external USB devices to product CAC port:
a. When connecting a USB device that is not qualified or rejected
for security reasons to product's CAC port, the CAC LED will
flash green and USB device will be inoperable.
b. When connecting a USB device that is undetectable for
any reason (e.g. failed device, non-standard device etc.) to
product's CAC port, the CAC LED will not illuminate at all and
device will be inoperable.
8. Do not connect product to computing devices:
a. That include telecommunication equipment;
b. That include frame grabber video cards;
c. That include special audio processing cards.
9. Product has a remote control port in the back panel labeled DCU. Do
not use this port - it is inoperable and for future use.

4
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 2 3 4 5 6 87
INTRODUCTION
1
User Guidance & Precautions (Con.)
10. Important! Before re-allocating computers to channels, it is mandatory
to power cycle product, keeping it powered OFF for more than 1 minute.
11. Product log access and administrator configuration options are
described in product Administrator Guide.
12. If you are aware of any potential security vulnerability while installing or
operating product, please remove product from service immediately
and contact us in one of the ways listed in this manual .
Support for TEMPEST Devices
The Belkin Advanced Secure KVM products are compatible with
TEMPEST devices. However, we RECOMMEND against connecting the
Belkin KVM products to TEMPEST devices.
The reason is that these Belkin devices are designed with Common
Criteria Peripheral Sharing Switch (PSS) PP3.0 standards, not
TEMPEST. The TEMPEST certification mandates specific measures to
prevent electrical leakage and the PSS standards DO NOT include such
measures. Thus, connecting a switch to a TEMPEST devices could
potentially render the complete system non-TEMPEST-secure.
NOTE: Currently, there are no KVM devices available (from any
manufacturer) that are both compliant with PP3.0 and TEMPEST-
secure.

5
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
OVERVIEW
SECTIONS
Table of Contents 1 3 4 5 6 872
Security Features
Product is designed, manufactured and delivered in security-controlled
environments. Below is a summary of the main advanced features
incorporated in product:
Advanced isolation between computers and shared peripherals
The emulations of keyboard, mouse and display EDID, prevent direct
contact between computers and shared peripherals. Product design
achieves maximal security by keeping the video path separate with
keyboard and mouse switched together, purging keyboard buffer when
switching channels. All these features contribute to strong isolation
between computer interfaces, maintained even when product is
powered off.
Unidirectional data flow: USB, audio and video
Unique hardware architecture components prevent unauthorized data
flow, including:
• Optical unidirectional data flow diodes in the USB data path that
filtrate and reject unqualified USB devices;
• Secure analog audio diodes that prevent audio eavesdropping
with no support for microphone or any other audio-input device;
• Video path is kept separate from all other traffic, enforcing
unidirectional native video flow. EDID emulation is done at power
up and blocks all EDID/MCCS writes. For DisplayPort video,
filtration of AUX channel exists to reject unauthorized transactions.
Isolation of power domains
Complete isolation of power domains prevents signaling attacks.
Secure administrator access & log functions
Product incorporates secure administrator access and log functions to
provide auditable trail for all product security events, including battery
backup life for anti-tampering and log functions. Non-reprogrammable
firmware prevents the ability to tamper with product logic.
Always-on, active anti-tamper system
Active anti-tampering system prevents hardware implants and wireless
key-loggers. Any anti-tampering attempt causes isolation of all
computers and peripheral devices rendering product inoperable and
showing clear indications of tampering event to user.
Holographic security tamper-evident labels are placed on the enclosure
to provide a clear visual indication if product has been opened or
compromised.
Metal enclosure is designed to resist mechanical tampering with all
microcontrollers protected against firmware-read, modification and
rewrite.

6
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 3 4 5 6 87
OVERVIEW
2
USB Device Detection
Storage and other unsafe USB devices are rejected when connected to
the Switch. Only mouse and keyboard data are passed through.
Secure Packaging
“Tear away” packaging ensures secure delivery of the Switch as it is
routed to the end user.
Tamper Evident Labels
Belkin Secure Switch uses holographic tamper
evident labels to provide visual indications in case
of enclosure intrusion attempt.
If for any reason the tamper evident seal is missing,
appears disrupted, or looks different than the
example shown here, please avoid using product and
call Belkin Technical Support at: [phone].
Active Anti-Tampering System
Belkin Secure Switch is equipped with an always-
on active anti-tampering system. If mechanical
intrusion is detected by this system, the Switch will be permanently
disabled and LED will blink continuously.
If product indication tampered state (all LEDs blinking) - please call
Technical Support and avoid using that product
Product Enclosure Warning Label
Belkin Secure Switch has the following
warning printed next to the location of the
product Asset Tag and Tamper Evident
labels on product enclosure:
12345678

7
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 3 4 5 6 87
OVERVIEW
2
Other Features
The Belkin Secure DVI-I Dual-Head KVM Switch was designed with the
user in mind for today’s IT environment. Below is a summary of some
features incorporated into the Switch.
USB Support
The Switch is compatible with USB technology and supports plug-and-
play connectivity with USB computers, keyboards, and mice.
DVI-I Support
The Switch supports both digital and analog video signals. Analog
signals are passed through.
Dual-Link/Dual-Display DVI Support
The Switch supports video resolutions of up to 3840x2160 pixels for up
to two displays.
Audio Switching
Allows you to share speakers between computers.
Port Coloring
The included color chips can be inserted into each port-selector button.
Colors can be associated with an established network to facilitate port
identification and reduce user switching error.
Port Naming
The included network-name labels can be placed in the area underneath
the port-selector button to facilitate port identification and reduce user
switching error.
LED Indicators
Each port button number illuminates to indicate that the console
currently controls the corresponding computer. As a port selector is
pushed, the LED number will light up.
Integrated Mounting Rails
Integrated mounting system for easy under-desk or side-wall mounting.

8
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 3 4 5 6 87
OVERVIEW
2
Equipment Requirements
Cables
Belkin highly recommends you use Belkin Dual DVI/USB KVM Cable
Kits for your Switch to help ensure superior performance. These cables
offer the highest quality possible to ensure optimal data and video
transmission. One Cable Kit is required per connected computer
Belkin Dual DVI-D/USB KVM Cable Kits with audio:
F1D9014b06 – 6 ft. (1.8m)
F1D9014b10 – 10 ft. (3m)
F1D9014b15 – 15 ft. (4.6m)
Belkin CAC USB A/B Cable (F1DN104F-3 model only)
F1D9013b06 – 6 ft. (1.8m)
F1D9013b10 – 10 ft. (3m)
F1D9013b15 – 15 ft. (4.6m)
Note: Due to USB and DVI signal limitations, the cable length cannot
exceed 15 feet (4.6m).

9
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 3 4 5 6 87
OVERVIEW
2
System Requirements
Operating Systems
Product is compatible with devices running on the following operating
systems:
• Microsoft®Windows®
• Red Hat®, Ubuntu®and other Linux®platforms
• Mac OS®X v10.3 and higher.
USB Keyboard console port
The product console USB keyboard port is compatible with Standard
USB keyboards.
Notes:
a. Console USB keyboard and mouse ports are switchable,
i.e. you can connect keyboard to mouse port and vice
versa. However, for optimal operation it is recommended to
connect USB keyboard to console USB keyboard port and
USB mouse to console USB mouse port.
b. For security reasons products do not support wireless
keyboards. In any case do not connect wireless keyboard
to product.
c. Non-standard keyboards, such as keyboards with integrated
USB hubs and other USB-integrated devices, may not be
fully supported due to security policy. If they are supported,
only classical keyboard (HID) operation will be functional. It
is recommended to use standard USB keyboards.
USB Mouse console port
The product console USB mouse port is compatible with standard USB
mice.
Notes:
a. Console USB keyboard and mouse ports are switchable,
i.e. you can connect keyboard to mouse port and vice
versa. However, for optimal operation it is recommended to
connect USB keyboard to console USB keyboard port and
USB mouse to console USB mouse port.
b. Console USB mouse port supports Standard KVM Extender
composite device having a keyboard/mouse functions.
c. For security reasons products do not support wireless mice.
In any case do not connect wireless mouse to product.

10
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 3 4 5 6 87
OVERVIEW
2
PS/2 Mouse and Keyboard console ports
• The product console PS/2 keyboard and mouse ports are
compatible with standard PS/2 keyboards and mice.
User Display
• The console video ports are compatible with DVI-I displays as well
as VGA and HDMI via compatible cables.
Common Access Card Readers
(F1DN104F-3 model only)
• USB-compatible CAC or smart-card readers

11
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 3 4 5 6 87
OVERVIEW
2
Unit Display Diagram, Front View
F1DN104F-3 model shown
2 31
4 5 6
1LED Indicator 3Tamper-Evident Seal 5 Name Label Guide
2Port Selector 4CAC Enable Switch
(F1DN104F-3 model only) 6Color Chip

12
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 3 4 5 6 87
OVERVIEW
2
Unit Display Diagram, Back View
F1DN104F-3 model shown
2 43 5 6 7 8 9 101
13 14 15 1611 12
1Console USB CAC Reader Port
and LED (F1DN104F-3 model only)
7PS/2 Console mouse Port 13 Video Diagnostic LEDs
2Remote control (non-operative, for future use) 8Computer USB KM port 14 Console DVI Ports
3Console Audio Input Jack 9Computer audio port 15 Computer DVI ports
4Console USB Mouse Port 10 Computer CAC USB Port
(F1DN104F-3 model only)
16 Mounting Track
5Console USB Keyboard Port 11 Mounting Track
6PS/2 Console Keyboard Port 12 DC Power Jack

13
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 3 4 5 6 87
OVERVIEW
2
Specifications
Part No. F1DN104E-3, F1DN104F-3
Enclosure Metal enclosure with high-impact plastic
faceplate
Power Requirements 12V DC, 1.5A (minimum) power adapter with
center-pin-positive polarity
AC Input 100 to 240VAC
No. of Secure Channels 4
No. of Users Supported 1
No. of Computers Supported 4
Monitors Supported 2 single-link and dual-link digital DVI-D
displays; VGA & HDMI monitors with
compatible cables
Max Resolution Support 3840x2160 pixels (UHD 4K) at 30Hz,
2560x1600 pixels @ 60Hz
Console Keyboard Input USB Type A or PS/2 Mini-DIN 6-pin female
connector
Console Mouse Input USB Type A or PS/2 Mini-DIN 6-pin female
connector
Console CAC Input USB Type A (F1DN104F-3 model only)
Console Monitor Port 2 DVI-I dual-link female
Console Speaker 1/8" (3.5mm) female
CPU Keyboard/Mouse Ports USB Type B
CPU CAC Ports USB Type B (F1DN104F-3 model only)
CPU Keyboard/Mouse Ports USB Type B
CPU Audio 1/8" (3.5mm) female
CPU Monitor Ports 2 DVI dual-link female
Port Selectors 4
LED Indicators 4
Operating Temp 32° to 104° F (0° to 40° C)
Storage Temp -4° to 140° F (-20° to 60° C)
Humidity 0-80% RH, non-condensing
Dimensions (F1DN104E-3) 12.5 (W) x 6.4 (D) x 2.5 (H) in
(F1DN104F-3) 12.5 (W) x 6.4 (D) x 2.5 (H) in
Weight (F1DN104E-3) 4.85 lbs.
(F1DN104F-3) 4.9 lbs.
Made in Designed in California. Assembled in US with
US and Foreign components.
Product Life-Cycle 5 years
Warranty 3 years
Security Accreditation Common Criteria Validated To Niap
Protection Profile PSS Ver. 3.0

14
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
INSTALLATION
SECTIONS
Table of Contents 1 2 4 5 6 873
Pre-Configuration
Where to place the Switch:
The enclosure of the Switch is designed for desktop or under-mount
configuration. An optional Mount Kit (Belkin part number F1D008) is
available.
Consider the following when deciding where to place the Switch:
• your proximity to the port selectors on the front of the Switch
• the lengths of the cables attached to your keyboard, monitor, and
mouse
• the location of your computers in relation to your console
• the lengths of the cables you use to connect your computers to
the Switch
Warning: Avoid placing cables near fluorescent lights, air-
conditioning equipment, or machines that create electrical noise
(e.g., vacuum cleaners).
Important:
1. If the unit’s enclosure appears disrupted or if all channel-select LEDs
flash continuously, please remove product from service immediately
and contact Belkin Technical Support at [phone].
2. Do not connect product to computing devices:
a. That include telecommunication equipment;
b. That include frame grabber video cards;
c. That include special audio processing cards.

15
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 2 4 5 6 87
INSTALLATION
3
Connection and Installation
Important: As the unit powers up it performs a self-test procedure. In
case the self- test has failed for any reason the product LED behavior
will be abnormal as described in User Guidance section. Try to
power cycle the unit. If problem persists please contact your system
administrator or Technical Support.
Step 1 – Connecting the Console to the Switch
Warning: Before attempting to connect anything to the Switch or
your computers, please ensure that all computer equipment and
devices are powered off.
Connect your monitors, keyboard, mouse, and speaker to the rear
of the Switch in the “User Console” section. (Refer to diagram on
previous page).
Notes:
1. Console USB keyboard and mouse ports are switchable, i.e.
you can connect keyboard to mouse port and vice versa.
However, for optimal operation it is recommended to connect
USB keyboard to console USB keyboard port and USB mouse to
console USB mouse port.
2. For security reasons products do not support wireless keyboards.
In any case do not connect wireless keyboard to product.
3. Non-standard keyboards, such as keyboards with integrated
USB hubs and other USB-integrated devices, may not be
fully supported due to security policy. If they are supported,
only classical keyboard (HID) operation will be functional. It is
recommended to use standard USB keyboards.
4. Console USB mouse port supports Standard KVM Extender
composite device having a keyboard/mouse functions.
Step 2 – Power Up
2.1 Power on the monitors.
2.2 Power up the KVM Switch by connecting the power. The display
diagnostic LEDs should be solid green a few seconds after power
up. This indicates the display EDID information has been captured
and secured. If the display diagnostic LED remains blinking for
longer than 10 seconds after power up, refer to the Troubleshooting
section of this user manual.

16
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 2 4 5 6 87
INSTALLATION
3
Step 3 – Connecting the Computers
3.1 Using USB cables, connect each computer to the USB port in
"computer interface ports" area on product.
3.2 If computer uses audio output, e.g. speakers/headphones, connect
audio cable from its audio output port to the corresponding audio
input port on product.
3.3 If the computer uses a smart card/CAC reader, connect a USB
cable between the CAC-enabled computer and the corresponding
CAC port on product.
Note:
1. If the number of product channels is larger than the number of
sources used, make sure the computers are connected in a row
starting from computer #1. For example, if there are 3 channels
used, connect computers to channels #1, #2 and then #3.
2. The USB cable must be connected directly to a free USB port
on the computer, with no USB hubs or other devices in between.
Step 4 – Powering Up the Computers
Power up all the attached computers and check for display
and peripheral functionality. All computers can be powered on
simultaneously.
Note: Your computers should recognize the Switch and automatically
install the HID USB driver if necessary.
When you power on your computers, the Switch emulates both a mouse
and keyboard on each port and allows your computers to boot normally.
The computer connected to port “1” will be displayed on the monitor.
Check to see that the keyboard, monitor, and mouse are working
normally. Proceed to do this with all occupied ports to verify that all
computers are connected and responding correctly. If you encounter
an error, check your cable connections for that computer and reboot.
If the problem persists, please refer to the Troubleshooting section in
this User Manual.

17
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
SECTIONS
Table of Contents 1 2 4 5 6 87
INSTALLATION
3
Color Code Chip Installation
The KVM Switch’s port-selector buttons can be color-coded for easier
identification. Refer to the installation instructions below.
Note: You may have to remove the existing black color chip first.
Insert color chip Remove color chip with
a standard paperclip
Port Name Label
The included network-name labels can be placed in the area underneath
the port-selector buttons for port identification.

18
Belkin®Secure DVI-I KVM Dual-Head Switch with Audio User Manual
OPERATING THE KVM SWITCH
SECTIONS
Table of Contents 1 2 3 5 6 874
Operation
Self-Test Procedure:
As product powers-up it performs a self-test procedure. In case of
self- test failure for any reason, including jammed buttons, the product
will be Inoperable. Self-test failure will be indicated by the following
abnormal LED behavior:
• All channel-select LEDs will be turned ON and then OFF;
• A specific, predefined LED combination will be turned ON;
• The predefined LED combination will indicate the problem type
(jammed buttons, firmware integrity).
Try to power cycle product. If problem persists please contact your
system administrator or technical support.
Now that product, computers and peripherals are connected and
powered up, it is ready for use.
Selecting a Computer Using Port Selectors
Now that you have connected your console and computers to the
Switch, it is ready for use. You can select which computer you wish to
control by pressing the corresponding port selector on the front of the
Switch. The LED number will illuminate to indicate which computer (or
port) is currently selected. It may take approximately 1 second for the
video signal to sync after switching ports. This is normal behavior and
is dependent on the display connected. This is normal operation and
ensures that proper synchronization is established between the monitor
and the connected computers.
Keyboard and mouse inputs can only be sent to the selected computer,
and video outputs can only be received from the selected computer. The
Switch also prevents any data transfer between connected computers,
ensuring the security of your computers.
Please note that the default port at power-up is port 1. In case of a
power failure or if the power is cycled, the Switch will default to port 1.