Belkin F1DN104M User manual

Advanced Secure Windowing KVM
User Manual
F1DN104M - Advanced Secure 4-Port Windowing KVM
F1DN204M - Advanced Secure 4-Port Multi-Display Windowing KVM
F1DN104Y - Advanced Secure 4-Port Windowing KVM w/DP
Document Number 8820-01348 Rev. A02

i
Belkin®Advanced Secure Windowing KVM User Manual
TABLE OF CONTENTS
SectionS 123456
Table of Contents
Introduction ..............................................1
What is a Windowing KVM? .................................1
Package Contents.........................................1
Safety Precaution .........................................2
Overview.................................................3
Security Features .........................................3
Other Features ...........................................5
Equipment Requirements ...................................6
Front-Panel Features – F1DN104M ...........................9
Rear-Panel Features – F1DN104M ...........................10
Rear-Panel Features – F1DN204M...........................11
Rear-Panel Features – F1DN104Y ...........................12
Tamper-Evident Label.....................................13
Active Anti-Tampering System ..............................13
Specifications ...........................................14
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Before Installation ........................................17
Installation ..............................................19
F1DN104M Typical System Installation .......................22
Administrator Setup ......................................23
Operation ...............................................26
Operating Modes ........................................26
Functions and Features ...................................30
Troubleshooting .........................................34
Information..............................................38

1
Belkin®Advanced Secure Windowing KVM User Manual
INTRODUCTION
SectionS
Table of Contents 234561
Thank you for purchasing The Belkin Advanced Secure Windowing
KVM. This product is designed for use in secure defense and intelligence
environments across wide security gaps. This third generation Secure
Windowing KVM offers multiple security features ensuring that no data
will leak between connected computers running at different security
levels even if both these computers attempt to attack the KVM. This
product provides the highest security safeguards and features that
meets today’s and will meet future cyber prevention requirements.
This User Manual provides all the details you’ll need to install and
operate your new product, and troubleshooting guidance—in the
unlikely event of a problem.
What is a Windowing KVM?
There are many cases where one computer user needs to work
simultaneously with few computers. The Belkin Advanced Secure
Windowing KVM is designed to provide users with a native windowing
environment across isolated networks. Connected computers may
operate on different isolated networks having different security levels
without exposing the organization to the risks of information leakage
through the KVM. The Belkin Advanced Secure Windowing KVM device
uses advanced video processing technology to draw a high-resolution
dynamic “mosaic” of images generated by different computer sources.
Built-in video source isolation forces unidirectional flow of data through
the USB and video ports. The product was designed and certified by
National Security agencies.
Package Contents
• Belkin Advanced Secure KVM
• 12V 5A DC Power Supply
• High Performance Mouse
• Administrator Mode Access Key
• Interchangeable Port Color Chips
• Port Naming Labels
• User Manual
Important Security Note: If you are aware of a potential security
vulnerability while installing or operating this product, we encourage
you to contact us immediately at the following e-mail address:
gov_securit[email protected]
Important: This product is equipped with an always-on active anti-
tamper system. Any attempt to open the enclosure may activate the
anti-tamper system and render the unit permanently inoperable.
If the unit’s enclosure appears disrupted or if all the port LEDs
flash continuously, please call Belkin Technical Support at
1 [phone]
BACK TO TABLE OF CONTENTS >

2
Belkin®Advanced Secure Windowing KVM User Manual
SectionS
Table of Contents 23456
INTRODUCTION
1
Safety Precaution
Please read the following safety precautions carefully before using
the product:
• Before cleaning, disconnect the product from DC power.
• Be sure not to expose the product to excessive humidity.
• Be sure to install the product on a clean secure surface.
• Do not place the DC power cord in the path of foot traffic.
• If the product is not used for a long period of time, remove the
product’s wall-mount power supply from the mains jack.
• If one of the following situations occurs, get the product checked
by a qualified service technician:
– The product’s power supply is overheated, damaged, broken,
causes smoke or shortens the mains power socket.
– Liquid penetrates the product’s case.
– The product is exposed to excessive moisture or water.
– The product is not working well even after carefully following
the instructions in this user manual.
– The product has been dropped or is physically damaged.
– The product has obvious signs of breakage or loose internal
parts.
• The product should be stored and used only in temperature- and
humidity-controlled environments as defined in the product’s
environmental specifications.
• The wall-mount power supply used with this product should be
the model supplied by the manufacturer or an approved equivalent
provided by Belkin or an authorized service provider. The use of
an improper power source will void product warranty.
• Product contains internal battery. Battery is non-replaceable.
Never attempt to replace battery as any attempt to open product
enclosure would permanently damage the product.
BACK TO TABLE OF CONTENTS >

3
Belkin®Advanced Secure Windowing KVM User Manual
OVERVIEW
SectionS
Table of Contents 1 34562
Security Features
The Belkin Advanced Secure Windowing KVM is the most advanced
and secure commercially available Windowing KVM today. It is based
on Belkin’s line of secure KVM switches, which are commonly used by
different security agencies around the world. The product is equipped
with multiple security and safety features to assure no leakage of
information between connected computers or their peripherals.
Unidirectional Data Paths
Optical diodes are used to enforce unidirectional data flow from the
peripheral devices to computers, preventing potential leakage paths
between computers even in the severe threat of two infected computers
attacking The Belkin Advanced Secure Windowing KVM.
No Shared Resources
This product is designed to securely operate even when peripheral
devices are vulnerable to signaling attacks. The Belkin Advanced
Secure Windowing KVM does not allow computer access to any shared
resource and does not share controllable power sources.
No Software - Physics-Based Peripheral Protection/Isolation
Hardware is used to draw images and process video. The Belkin
Advanced Secure Windowing KVM product does not use a computer,
operating system or software. No software installation is required on
connected computers either.
Non-Reprogrammable Firmware
The product features custom firmware that is not reprogrammable,
preventing the ability to remotely attack the KVM control logic.
USB Ports Protection
Console USB ports are protected from the use of storage and other
unsafe USB devices through strong filtering (independent of computer
protection means). Unqualified devices are rejected when connected to
the product. Only mouse and keyboard data are passed through.
Heavy-Duty Tamper-Resistant Enclosure
The Belkin Advanced Secure Windowing KVM uses thick metal
components to protect the product from physical tampering and to
minimize radiated electromagnetic emissions that can be snooped or
intercepted.
Active Always - On Anti-Tamper
An active chassis anti-tamper system prevents The Belkin Advanced
Secure Windowing KVM electronic circuitry from being accessed and
tampered with by permanently disabling the product once tampering
is detected.
Dedicated Processors for Emulation
The Belkin Advanced Secure Windowing KVM product features a
dedicated processor per computer port to emulate peripheral devices.
This keeps each computer running on different security levels physically
separated and secure at all times, and prevents any unintended data
leakage between computers.
Please note: Belkin Secure KVM products cannot be upgraded,
serviced or fixed.
BACK TO TABLE OF CONTENTS >

4
Belkin®Advanced Secure Windowing KVM User Manual
SectionS
Table of Contents 1 3456
OVERVIEW
2
Tamper-Evident Label
A holographic tamper-evident label is placed on the enclosure to provide
a visual indication if the Switch has been opened or compromised.
Common Access Card (CAC)
Belkin Secure Windowing KVM patented CAC Ports enable secure use
of not only CAC or smart-card readers but also biometric readers, face-
recognition and iris-recognition devices. Separate cables used for this
port enable further protection and isolation of this function.
Secure Packaging
“Tear away” packaging ensures secure delivery of the product as it is
routed to the end user.
Common Criteria EAL 4+ Listing
The product is listed by the Common Criteria organization. It is Common
Criteria validated to EAL 4+ (Evaluation Assurance Level 4) to assure the
highest level of protection.
BACK TO TABLE OF CONTENTS >

5
Belkin®Advanced Secure Windowing KVM User Manual
SectionS
Table of Contents 1 3456
OVERVIEW
2
Other Features
The Belkin Advanced Secure Windowing KVM was designed with the
user in mind for today’s IT environment. The Secure KVM is designed
using real-time video processing to provide a user-friendly windowing
environment while keeping connected computers fully isolated. Below
is a summary of some key features incorporated into the product.
Works simultaneously with up to four isolated networks
The user can work with a single display while accessing four isolated
networks with different security levels through windows.
Real-time and real-quality video
Pixel-by-pixel video image. No quality loss, latency, reduced colors,
dropped frames or artifacts. Fastest digital video processing technology
available in any KVM today. Less than 30-milisecond latency.
Easy Customization
Administrator mode enables easy customization of channels, colors,
cursors, task-bar, background etc. User-programmeable buttons
enable quick setting of user-defined screen arrangements.
CAC Port
The Belkin Advanced Secure Windowing KVM supports parallel
switching of a wide set of user authentication devices including CAC,
smart-card and biometric readers.
Audio Support
The Belkin Advanced Secure Windowing KVM supports audio-out
switching. Microphone switching is not supported to prevent analog
leakages through audio ports.
CAC Port Enable/Disable Functions
Belkin’s patented Host Detection Function enables simple switching
of display, keyboard audio and mouse without disconnecting the user
authentication session. This is done through the use of front-panel CAC
enable/disable switches.
DCU (Desktop Controller Unit) Support
The Belkin Advanced Secure Windowing KVM supports the patented
Desktop Controller Device to enable easy and intuitive KVM operation
at the user’s desktop. Channel names may be programmed into the
DCU display to improve usability and security.
Advanced Scaling Function
The Belkin Advanced Secure Windowing KVM has an advanced scaling
function allowing the user to scale the video source 1/2 times and 1/4
times smaller to assure good view and a superb work experience. Users
can now fit four full HD sources on a single HD screen by scaling each
source, all in real time with no data loss.
Scale and Tile Modes
The Scale and Tile modes allow users to focus on a main source while
viewing the other sources, or the Tile mode allows the user to fit all four
sources on a single display.
Bloomberg Keyboard Support
The Belkin Advanced Secure Windowing KVM supports the Bloomberg
keyboard through the console PS/2 keyboard jack.
BACK TO TABLE OF CONTENTS >

6
Belkin®Advanced Secure Windowing KVM User Manual
SectionS
Table of Contents 1 3456
OVERVIEW
2
Equipment Requirements
Cables
Belkin highly recommends the use of Belkin Cable Kits for your product
to help ensure superior security and performance. These cables offer
the highest quality possible and optimal data transmission.
One Cable Kit is required per connected computer.
Note: Due to USB signal limitations, the cable length cannot exceed
15 feet (4.6m) unless an active USB extender is used.
Belkin DVI-D/USB KVM Cable Kits with audio
F1D9012b06 – 6 ft. (1.8m)
F1D9012b10 – 10 ft. (3m)
F1D9012b15 – 15 ft. (4.6m)
Belkin CAC USB A/B Cables
F1D9013b06 – 6 ft. (1.8m)
F1D9013b10 – 10 ft. (3m)
F1D9013b15 – 15 ft. (4.6m)
Belkin Smart Cables
F1D9008b06 (DVI to VGA Smart Cable, 6')
F1D9009b06 (VGA to DVI Smart Cable, 6')
F1D9011b06 (USB to DVI-I Smart Cable, 6')
F1D9017b06 (DP to DVI Smart Cable, 6')
Belkin DP to DVI Cables F2CD002b06-E (DP to DVI)
BACK TO TABLE OF CONTENTS >

7
Belkin®Advanced Secure Windowing KVM User Manual
SectionS
Table of Contents 1 3456
OVERVIEW
2
The Belkin Advanced Secure Windowing KVM is compatible with
computers, thin-clients, servers and laptops running on, but not limited
to, the following OS platforms:
• Windows®2000
• Windows XP (Home/
Professional)
• Windows 2003 Server
• Windows 7
• Windows 8
• Windows Vista®
• Red Hat®Linux®
• Ubuntu®Linux®
• Other Linux distributions
• Mac OS®X v10.3 and higher
Laptop docking stations with DVI or HDMI®display outputs are supported
directly (VGA is also supported through the use of a Belkin Smart-Cable).
Software installation is not needed on any connected computer.
For the latest compatibility list see the Belkin website
www.belkinbusiness.com or contact Belkin support at
1 [phone]
USB Keyboard console port
The Belkin Advanced Secure Windowing KVM USB keyboard console
port is compatible with the following types of devices:
• Standard USB keyboard;
• Standard USB mouse; and
• Bar-code readers emulating USB keyboard.
Notes:
-Keyboard devices having internal USB hubs are not supported.
-Composite devices having keyboard function and mouse function
are supported including extenders.
PS/2 Keyboard console port
The Belkin Advanced Secure Windowing KVM PS/2 keyboard console
port is compatible with the following types of devices:
• Standard PS/2 keyboard; and
• Bar-code readers emulating USB keyboard.
USB Mouse console port
The Belkin Advanced Secure Windowing KVM USB mouse console port
is compatible with the following types of devices:
• 5-button USB mouse
Notes:
-Mouse devices having internal USB hubs are not supported.
-Composite devices having mouse function are supported
including extenders.
PS/2 Mouse console port
The Belkin Advanced Secure Windowing KVM PS/2 mouse console port
is compatible with the following types of devices:
• 5-button PS/2 mouse
• Regular PS/2 (using a regular PS/2 mouse might create some
limitations and is not recommended)
BACK TO TABLE OF CONTENTS >

8
Belkin®Advanced Secure Windowing KVM User Manual
SectionS
Table of Contents 1 3456
OVERVIEW
2
User Authentication Devices
The Belkin Advanced Secure Windowing KVM is compatible with
the following types of user authentication devices plugged into the
product’s CAC Port:
• USB smart-card readers (or Common Access Card readers);
• USB biometric devices (such as fingerprint-recognition devices);
or
• USB authentication tokens.
User Display
The Belkin Advanced Secure Windowing KVM is compatible with the
following types of user displays:
• DVI-D single-link;
• DisplayPort capable display (F1DN104Y model only);
• DVI-D dual-link interface that may operate as single-link;
• HDMI (adapter to DVI needed); or
• DVI-I (in digital interface mode).
• Maximum display resolution supported: 1920x1200
Notes: Some dual-link DVI-D displays can only operate in dual-link
mode. Do not use these displays with F1DN104M and F1DN204M.
Some older displays may cause long delays when switching
between normal view mode and full-screen mode.
Dual Display Model F1DN204M
The F1DN204M model uses two displays. It is preferable that both
displays will be the same type and model.
Displays must be landscape oriented and installed side by side in close
proximity to one another.
Displays must be with either 1920x1080 or 1920x1200 native resolution.
DisplayPort Model F1DN104Y
The F1DN104Y is compatible with the following types of user displays:
• DisplayPort capable display
User Audio Devices
Notes: Conversion from DisplayPort to DVI is not recommended
due to video quality loss.
Some older displays may cause long delays when switching
between normal view mode and full-screen mode.
The Belkin Advanced Secure Windowing KVM is compatible with the
following types of user audio devices:
• Stereo headsets; or
• Amplified stereo speakers.
Power Supply
Use only the Belkin power supply provided with The Belkin Advanced
Secure Windowing KVM product. In case of a power supply failure, a
replacement unit can be ordered from Belkin.
BACK TO TABLE OF CONTENTS >