Belkin F1DN104K-3 User manual

F1DN104K-3
F1DN108K-3
Custom Monitor Configuration Guide
May, 2018
LNKPG-00559 Rev. A00

Page | 1Secure KM Custom Monitor Configuration Guide LNKPG-00559 Rev. A00
Introduction
The Secure KM Switch
Viewing and Interacting with Multiple Systems Simultaneously
The Secure KM Switch (models F1DN104K-3 and F1DN108K-3) are engineered for high-security
environments where operators require simultaneous interaction with multiple computing systems
across different security enclaves. Unlike the traditional Secure KVM, the Secure KM only switches the
USB keyboard and mouse between connected inputs, relying on the individual computers to drive their
own video displays. The KM is therefore the ideal technology for Command and Control room
environments where operators often interact with monitor walls displaying video from multiple
systems.
Connections
The Belkin Secure KM Switch can support 2, 4 or 8 computers simultaneously with the use of a single
keyboard and mouse. For demonstration purposes, the F1DN104K-3, supporting 4 computers, is used as
the reference below.
Hardware Connections:
-4x Input Ports (USB Keyboard/Mouse, Audio)
-1x Console Output Port (USB or PS2 keyboard/Mouse, Audio)
-1x Power Port
Software requirements:
-No software is required to be installed on any computer or system unless a connected
system has more than one monitor. In that case, the Belkin Multi-Monitor Mouse Driver is
necessary to be installed on Windows PCs. The driver can be found at
http://www.belkin.com/us/support-article?articleNum=286117

Page | 2Secure KM Custom Monitor Configuration Guide LNKPG-00559 Rev. A00
Secure KM Switch Controls and Modes
Keyboard and Mouse
As with Belkin’s Secure KVMs, each of the KM’s keyboard and mouse USB ports is isolated from one
another using the same optical data diode technology to eliminate signal leakage. Further, no user data
is buffered in the KM that can potentially create security vulnerabilities. These ports are filtered to
allow only HID keyboard and mouse commands to pass from the keyboard to the KM and physically
block any reverse data flow. The KM eliminates vulnerabilities that exist for data theft or the ability for
signals to leak from one security enclave to another via the USB keyboard or mouse.
Mouse
The KM emulates a USB mouse such that each connected computer believes a keyboard and mouse are
connected directly, even though there is only one physical keyboard and mouse shared among these
systems. The KM mouse function can be configured to work in either Absolute or Relative mode. In
either case, commands are sent to one computer at a time only via the optical data diode isolation
described above and the cursors being emulated on the other computers are hidden from view.
Absolute Mode:
In Absolute mode, the KM maps all monitors onto the same grid, maintaining the coordinates that
reflect the edge of one physical monitor to another. As the cursor is moved from the coordinate at the
edge of one physical monitor and onto the coordinate indicating the edge of its neighbor monitor, the
KM passes data from the physical mouse to the USB emulation logic for the second computer and paints
the cursor onto its corresponding monitor (while simultaneously hiding the cursor on the former
monitor). In doing so, it also invokes the Seamless Cursor Switching (SCS) mechanism to seamlessly
switch the mouse and keyboard controls to the corresponding input source. The KM’s mouse
emulators offer zero delay in switching between computers allowing for an instant response. In keeping
with information assurance requirements, the front panel of the KM illuminates the button LED of the
new channel to provide constant visual feedback to operators as to which enclave they are working
with.

Page | 3Secure KM Custom Monitor Configuration Guide LNKPG-00559 Rev. A00
Relative Mode:
In Relative mode the movement of the mouse is confined to the borders of each computer’s display.
The user will then need to select which console to interact with by pressing the console buttons on the
KM switch as with a traditional KVM.
Keyboard
The keyboard connected to the KM interacts with each computer individually and only interacts with
one computer at any time. A user can switch the interaction of the keyboard between computers either
by pressing the console buttons on the KM or by using the movement of the mouse in Absolute Mode to
switch between computers.
Since mouse and keyboard data flow in a unidirectional data path, any keyboard indicators that require
acknowledgement from the computer will not be shown, including LEDs for Caps Lock, Num Lock, or
Scroll Lock. For example, when a user presses the Caps Lock key the command will reach the computer
and activate all keys as caps, but the computer will not be able to acknowledge the change back to the
keyboard to then enable the key’s LED indicator.

Page | 4Secure KM Custom Monitor Configuration Guide LNKPG-00559 Rev. A00
Display
The KM provides for a variety of pre-configured monitor configurations that should meet most user
requirements. The size, relative positioning, and coordinates of these display configurations are pre-
programmed in the KM and can be selected thru administration options.
Should one of these presets be inadequate for the application, the F1DN104K-3 and F1DN108K-
3 also support a custom configuration option using the Belkin KM Configuration utility that can
be downloaded from http://www.belkin.com/us/Resource-Center/Cybersecurity/Resources/

Page | 5Secure KM Custom Monitor Configuration Guide LNKPG-00559 Rev. A00
Working with the KM Configuration Tool to Create Custom Monitor Layouts
Requirements:
1) Belkin Secure KM with appropriate firmware:
•F1DN104K-3 with SC firmware 14090817 or higher
•F1DN108K-3 with SC Firmware 09240817 or higher
2) Windows compatible PC (Windows 7 recommended)
3) USB Type A to USB Type A cable
Step 1: Download and install Belkin_KM_Tools_Setup-2.5.exe on a Windows® machine.
The following items will be install:
1. KMCreator (KM Configuration Utility Version 2.01)
2. KMLoader (KMConfigLoader Version 1.0.0.5)
3. KM Device driver (Belkin Reg - CDC Driver/Belkin Registration Device)
Install the Belkin_KM_Tools_Setup-2.5.exe:
a) Review EULA and select Next
b) Choose the location to install files and select Next
c) Choose folder for program icons and select Next to begin the installation

Page | 6Secure KM Custom Monitor Configuration Guide LNKPG-00559 Rev. A00
d) Select Install to begin and follow the installation wizard to complete the process.
e) Once complete, select Finish
Once the installation wizard is complete, shortcuts for KMCreator and KMLoader will be
available in the file location you chose.
Step 2: Define monitor configuration with the KM Configuration Utility

Page | 7Secure KM Custom Monitor Configuration Guide LNKPG-00559 Rev. A00
The KMCreator is used to define the monitor layout and generate a KM configuration
file (.kmc file) that will be uploaded to the KM using the KMLoader utility.
Using the KMCreator utility, administrators can define the layout and relevant traits of
monitors connected to each computer with different or identical sizes and screen
resolutions. The monitors can be deployed in any physical layout. This software also
allows removal of unneeded bridges between monitors that can be used to prevent
channel switching via the SCS capability.
Before You Begin
A KM configuration file is based on the number of computers that will be
connected to the KM and the number, size, and resolution of the monitors each
computer will have associated with it.
NOTES :
1) The KMCreator and KMLoader software do not need to be loaded on each
computer.
2) The software should be installed on an external computer and used to upload
the configuration to the KM. The KMCreator and KMLoader software are not
needed after the desired configuration has been loaded onto the KM.
1) Create a new Project
Each KM configuration file is called a “KM Configuration Project”. For every setup
you will be required to create a new project. Click “Back” to return to the
previous stage, at any point during the configuration process.
•Open KMCreator
•Select “New Project”
2) Enter Project Details
Please enter the requested information in the following manner:
•Project Name – The name can be a combination of English characters or
numbers. It is advised to use a name that will be reflective of the configuration

Page | 8Secure KM Custom Monitor Configuration Guide LNKPG-00559 Rev. A00
for example: “Dealer 3 5 monitors”, “Generic Workstation 7”. The project name
can be read from the KM after loading.
•Product Model – The product model can be found on the product label of the
KM switch. The Belkin Secure KMs come in 4, and 8 input models.
•Mouse Speed – This is the default mouse speed for all systems. Changing the
mouse speed on each computer will not affect the KM mouse speed.
•Mouse Acceleration – Same as above.
•Number of Computers – The total number of computers that will be connected
to the KM for this configuration.
• Click “Next Step”
3) Enter Description
Add a description for the project. The description will appear in the
configuration file (.kmc) and can help differentiate one configuration from
another when working with multiple potential configurations.
4) Monitor Configuration
For each computer, define the number of monitors connected to the
computer by selecting it from the drop down menu “Number of Displays”.
The maximum number of possible displays is limited to four per computer.
Once the number of monitors is selected, you will be able to enter the size
and native resolution for every monitor.
Note: If a certain monitor is set to portrait orientation, the Native resolution
should be entered accordingly. For example, for a monitor with a native
screen resolution of 1680x1050 which is used in portrait orientation, enter
the resolution as 1050x1680.

Page | 9Secure KM Custom Monitor Configuration Guide LNKPG-00559 Rev. A00
Working with Multiple Monitors per Computer
When using more than one display per computer, Microsoft Windows’
display options must be synchronized with the KM for proper operation.
Microsoft Windows maps monitors into a virtual desktop, allowing a user
to move the mouse cursor from one monitor to the other. The KM must
understand how these monitors are mapped in a Windows desktop
environment and which monitor defines the edge between channels so
as to invoke SCS channel switching. This procedure must be done for
each PC with multiple monitors.
1) To begin, open the display settings dialog on the Windows PC.
•Right-click on the desktop and select Display Settings or navigate to
Control Panel, Display Settings
The following instructions are based on Windows 7, but can also be
used with Windows 8 and Windows 10.
2) In the KM configuration dialog you will be asked to provide information
regarding your primary display. Primary display is referred to as “main
display” in the Windows “Screen Resolution” dialog. You can determine