Belkin F1DN104P-3 User manual

Advanced Secure DisplayPort™ KVM
User Manual
F1DN104P-3 – Advanced Secure 4-Port DisplayPort KVM, PP 3.0
F1DN104W-3 – Advanced Secure 4-Port DisplayPort Dual-Head KVM, PP 3.0
F1DN104Q-3 – Advanced Secure 4-Port Quad-Head KVM, PP 3.0
Document Number
HDC10386 Rev.C

i
Belkin®Advanced Secure DisplayPort KVM
TABLE OF CONTENTS
SECTIONS 1234567
Table of Contents
Introduction ..............................................1
Package Contents.........................................1
Safety Precautions ........................................2
User Guidance & Precautions ...............................3
Overview.................................................5
Security Features .........................................5
Tamper Evident Labels .....................................6
Other Features ...........................................7
Equipment Requirements ...................................9
System Requirements ....................................10
Unit Display Diagrams ....................................11
Specifications ...........................................15
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Pre-Configuration ........................................17
Connection and Installation ................................18
Color Code Chip Installation ...............................20
Operating the KVM Switch ................................21
Common Access Card (CAC) Configuration and OPERATION ..22
Troubleshooting .........................................23
Information..............................................27

1
Belkin®Advanced Secure DisplayPort KVM
INTRODUCTION
SECTIONS
Table of Contents 2345671
Thank you for purchasing this Belkin Secure DisplayPort KVM. This
Switch is designed for use in secure environment installations. The
Switch offers safe centralized control, which prevents unintended data
transfer between computers running at different security levels. The
Switch provides the highest security safeguards and features that meet
today’s Information Assurance (IA) computing requirements.
Belkin Advanced Secure DisplayPort KVM is especially challenging in
terms of security as DisplayPort is a very robust protocol by nature,
which is capable of transferring various types of information, such as
USB and Ethernet other than display. Belkin has developed this unique
Secure KVM switch with the highest possible security in mind, assuring
no leakage of information between connected computers through any
channels including DP dedicated channels.
This User Manual provides all the details you’ll need to install and
operate your new Switch, in addition to expert troubleshooting advice—
in the unlikely event of a problem.
Reporting Belkin Product Security Vulnerability
If you are aware of potential security vulnerability while installing or
operating this product, we encourage you to contact us immediately
at the following email address: [e-mail]
Please note: Belkin Secure KVMs cannot be upgraded, serviced
or fixed.
Package Contents
• Belkin Advanced Secure DisplayPort KVM
• 12V 1.5A DC Power Supply (F1DN104P-3)
• 12V 3A DC Power Supply (F1DN104W-3, F1DN104Q-3)
• Interchangeable Port Color Chips
• Port-Naming Labels
• User Manual
Important: This product is equipped with an always-on active
anti-tamper system. Any attempt to open the enclosure may
activate the anti-tamper system and render the unit permanently
inoperable. If the unit’s enclosure appears disrupted or if all the
port LEDs flash continuously, please call Belkin Technical Support
toll-free at [phone].
Revision
A – Initial Release, 23 Feb 2015
B – Updates to User Guidance, 26 April 2015
C – User Guidance changes, 16 June 2015

2
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 234567
INTRODUCTION
1
Safety Precautions
Please read the following safety precautions carefully before using the
product:
• Before cleaning, disconnect the product from any electrical power
supply.
• Do not expose the product to excessive humidity or moisture.
• Do not store or use for extensive period of time in extreme thermal
conditions – it may shorten product lifetime.
• Install the product only on a clean secure surface.
• If the product is not used for a long period of time, disconnect it
from electrical power.
• If any of the following situations occurs, have the product checked
by a qualified service technician:
– Liquid penetrates the product’s case.
– The product is exposed to excessive moisture, water or any
other liquid.
– The product is not working well even after carefully following
the instructions in this user’s manual.
– The product has been dropped or is physically damaged.
– The product shows obvious signs of breakage or loose internal
parts.
– In case of external power supply – If power supply overheats, is
broken or damaged, or has a damaged cable.
• The product should be stored and used only in temperature and
humidity controlled environments as defined in the product’s
environmental specifications.
• Never attempt to open the product enclosure. Any attempt to
open the enclosure will permanently damage the product.
• The product contains a non-replaceable internal battery. Never
attempt to replace the battery or open the enclosure.
• This product is equipped with an always-on active anti-tampering
system. Any attempt to open the product enclosure will activate
the anti-tamper triggers and render the unit inoperable and
warranty void.

3
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 234567
INTRODUCTION
1
User Guidance & Precautions
Please read the following User Guidance & Precautions carefully before
using the product:
1. As product powers-up it performs a self-test procedure. In case of
self- test failure for any reason, including jammed buttons, the product
will be Inoperable. Self-test failure will be indicated by the following
abnormal LED behavior:
a. All channel-select LEDs will be turned ON and then OFF;
b. A specific, predefined LED combination will be turned ON;
c. The predefined LED combination will indicate the problem type
(jammed buttons, firmware integrity).
Try to power cycle product. If problem persists please contact your
system administrator or technical support.
2. Product power-up and RFD behavior:
a. By default, after product power-up, the active channel will
be computer #1, indicated by the applicable front panel push
button LED lit.
b. Product Restore-to-Factory-Default (RFD) function is available
via a physical control button on rear panel. Use a sharp object
or paper clip to hold RFD button pressed for several seconds
to initiate an RFD action.
c. RFD action will be indicated by front panel LEDs blinking all
together.
d. When product boots after RFD, keyboard and mouse will be
mapped to the active channel #1 and default settings will be
restored, erasing all user-set definitions.
3. The appropriate usage of peripherals (e.g. keyboard, mouse, display,
authentication device) is described in detail in this User Manual’s
appropriate sections. Do not connect any authentication device with
an external power source to product.
4. For security reasons products do not support wireless keyboards and
mice. In any case do not connect wireless keyboard/mouse to product.
5. For security reasons products do not support microphone/line-in
audio input. In any case do not connect a microphone to product audio
output port, including headsets.
6. Product is equipped with an always-on active anti-tampering system.
Any attempt to open product enclosure will activate the anti-tamper
system indicated by all channel-select LEDs flashing continuously.
In this case, product will be inoperable and warranty void. If product
enclosure appears disrupted or if all channel- select LEDs flash
continuously, please remove product from service immediately and
contact technical support.
7. In case a connected device is rejected in the console port group the
user will have the following visual indications:
a. When connecting a non-qualified keyboard, the keyboard will
be non-functional with no visible keyboard strokes on screen
when using the keyboard.
b. When connecting a non-qualified mouse, the mouse will be
non-functional with mouse cursor frozen on screen.
c. When connecting a non-qualified display, the video diagnostic
LED will flash green and video will not work.
d. When connecting a non-qualified USB device, CAC LED will
flash green and USB device will be inoperable.

4
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 234567
INTRODUCTION
1
User Guidance & Precautions (Con.)
8. Do not connect product to computing devices:
a. That are TEMPEST computers;
b. That include telecommunication equipment;
c. That include frame grabber video cards;
d. That include special audio processing cards.
9. Important! Before re-allocating computers to channels, it is mandatory
to power cycle product, keeping it powered OFF for more than 1 minute.
10. Product log access and administrator configuration options are
described in product Administrator Guide.
11. Authentication session will be terminated once product power is down
or user intentionally terminates session.
12. If you are aware of any potential security vulnerability while installing or
operating product, please remove product from service immediately
and contact us in one of the ways listed in this manual.

5
Belkin®Advanced Secure DisplayPort KVM
OVERVIEW
SECTIONS
Table of Contents 1 345672
Security Features
Product is designed, manufactured and delivered in security-controlled
environments. Below is a summary of the main advanced features
incorporated in product:
NIAP PPS Ver. 3.0 compliant
Product is designed from scratch to comply with latest NIAP PPS ver.
3.0 standard. Thoroughly tested, product meets international NIAP
security requirements and covers latest technologies:
• Optimized for USB (USB 1.1, 2.0, 3.0 and Type C) to support
newest peripherals;
• Optimized for HDMI and DisplayPort video;
• Enables newer protocols such as MHL to support mobile devices
and not only computers;
• Supports modern user interaction modes, such as cursor control,
touch-screen, multi-touch, and more.
Advanced isolation between computers and shared peripherals
The emulations of keyboard, mouse and display EDID, prevent direct
contact between computers and shared peripherals. Product design
achieves maximal security by keeping the video path separate with
keyboard and mouse switched together, purging keyboard buffer when
switching channels. All these features contribute to strong isolation
between computer interfaces, maintained even when product is
powered off.
Unidirectional data flow: USB, audio and video
Unique hardware architecture components prevent unauthorized data
flow, including:
• Optical unidirectional data flow diodes in the USB data path that
filtrate and reject unqualified USB devices;
• Secure analog audio diodes that prevent audio eavesdropping
at TEMPEST level with no support for microphone or any other
audio-input device;
• Video path is kept separate from all other traffic, enforcing
unidirectional native video flow. EDID emulation is done at power
up and blocks all EDID/MCCS writes. For DisplayPort video,
filtration of AUX channel exists to reject unauthorized transactions.
Isolation of power domains
Complete isolation of power domains prevents signaling attacks.
Secure administrator access & log functions
Product incorporates secure administrator access and log functions to
provide auditable trail for all product security events, including battery
backup life for anti-tampering and log functions. Non-reprogrammable
firmware prevents the ability to tamper with product logic.

6
Belkin®Advanced Secure DisplayPort KVM
OVERVIEW
SECTIONS
Table of Contents 1 345672
Always-on, active anti-tamper system
Active anti-tampering system prevents hardware implants and wireless
key-loggers. Any anti-tampering attempt causes isolation of all
computers and peripheral devices rendering product inoperable and
showing clear indications of tampering event to user.
Holographic security tamper-evident labels are placed on the enclosure
to provide a clear visual indication if product has been opened or
compromised.
Metal enclosure is designed to resist mechanical tampering with all
microcontrollers protected against firmware-read, modification and
rewrite.
Tamper Evident Labels
Belkin Secure Switch uses holographic tamper
evident labels to provide visual indications in case
of enclosure intrusion attempt.
If for any reason the tamper evident seal is missing,
appears disrupted, or looks different than the
example shown here, please avoid using product
and call Belkin Technical Support at: [phone].
Active Anti-Tampering System
Belkin Secure Switch is equipped with an always-on
active anti-tampering system. If mechanical intrusion
is detected by this system, the Switch will be permanently disabled and
LED will blink continuously.
If product indication tampered state (all LEDs blinking) - please call
Technical Support and avoid using that product
Product Enclosure Warning Label
Belkin Secure Switch has the following
warning printed next to the location of the
product Asset Tag and Tamper Evident
labels on product enclosure:
12345678

7
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Other Features
The Belkin Advanced Secure DisplayPort KVM was designed with the
user in mind for today’s IT environment. Below is a summary of some
features incorporated into the Switch.
Protected Display Information
Protected DDC/EDID emulation prevents software weaknesses that
can cause data leakage while maintaining compatibility with the
console display.
USB Device Detection
Storage and other unsafe USB devices are rejected when connected
to the Switch. Only mouse, keyboard, and CAC reader data are
passed through.
Secure Packaging
“Tear away” packaging ensures secure delivery of the Switch as it is
routed to the end user. The recyclable packaging also breaks down flat,
simplifying the cleanup process.
USB Support
The Switch is compatible with USB technology and supports
plug-and-play connectivity with USB computers, keyboards, mice, and
CAC readers.
User Display
The Belkin Advanced Secure DisplayPort KVM is compatible with the
following types of user displays:
• HDMI capable display (console area)
• DisplayPort capable displays (computers input area)
• DVI capable displays (F1DN104Q-3 model).
HDMI and DisplayPort 1.1/1.2 ports support 4K-2K UHD resolutions of
up to 3840×2160 pixels.
DVI-I port supports up to 2560x1600 pixels (F1DN104Q-3 only).
Audio Switching
Allows you to share speakers between computers.

8
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Port Coloring
The included color chips can be inserted into each port-selector button.
Colors can be associated with an established network to facilitate port
identification and reduce user switching error.
Port Naming
The included network-name labels can be placed in the area underneath
the port-selector button to facilitate port identification and reduce user
switching error.
LED Indicators
Each port button number illuminates to indicate that the console
currently controls the corresponding computer. As a port selector is
pushed, the LED number will light up.
Integrated Mounting Rails
Integrated mounting system for easy under-desk or side-wall mounting.
USB Connectors
High-retention USB connectors keep the USB connections secure and
tight, preventing accidental disconnections.
Increased Reliability
Using a new, advanced anti-tampering battery with an extremely low
self-discharge rate the life expectancy of the switch has been
increased dramatically to over 15 years.

9
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Equipment Requirements
Cables
Belkin highly recommends you use Belkin DisplayPort/USB KVM Cable
Kits for your Switch to help ensure superior performance. These cables
offer the highest quality possible to ensure optimal data and video
transmission. One Cable Kit is required per connected computer.
Belkin DP to DP KVM Cable Kits with audio:
F1D9019b06 – 6 ft. (1.8m)
F1D9017b10 – 10 ft. (3m)
Belkin CAC USB A/B Cables
F1D9013b06 – 6 ft. (1.8m)
F1D9013b10 – 10 ft. (3m)
F1D9013b15 – 15 ft. (4.6m)
Belkin HDMI to HDMI cable
F8V3311b06-CL2 – 6 ft. (1.8m); CL-2 Rated
Belkin Smart Cables
F1D9011b06 (USB to DVI-I Smart Cable, 6’)
F1D9017b06 (DP to DVI Smart Cable, 6’)
Belkin DP to DVI Cables
F2CD002b06-E (DP to DVI)
Note: Due to USB and DisplayPort signal limitations, the cable length
cannot exceed 15 feet (4.6m), unless a USB extender is used

10
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
System Requirements
Operating Systems
Product is compatible with devices running on the following operating
systems:
• Microsoft®Windows®
• Red Hat®, Ubuntu®and other Linux®platforms
• Mac OS®X v10.3 and higher.
USB Keyboard console port
The product console USB keyboard port is compatible with Standard
USB keyboards.
Notes:
a. Console USB keyboard and mouse ports are switchable,
i.e. you can connect keyboard to mouse port and vice
versa. However, for optimal operation it is recommended to
connect USB keyboard to console USB keyboard port and
USB mouse to console USB mouse port.
b. For security reasons products do not support wireless
keyboards. In any case do not connect wireless keyboard
to product.
c. Non-standard keyboards, such as keyboards with integrated
USB hubs and other USB-integrated devices, may not be
fully supported due to security policy. If they are supported,
only classical keyboard (HID) operation will be functional. It
is recommended to use standard USB keyboards.
USB Mouse console port
The product console USB mouse port is compatible with standard USB
mice.
Notes:
a. Console USB keyboard and mouse ports are switchable,
i.e. you can connect keyboard to mouse port and vice
versa. However, for optimal operation it is recommended to
connect USB keyboard to console USB keyboard port and
USB mouse to console USB mouse port.
b. Console USB mouse port supports Standard KVM Extender
composite device having a keyboard/mouse functions.
c. For security reasons products do not support wireless mice.
In any case do not connect wireless mouse to product.
PS/2 Mouse and Keyboard console ports
The product console PS/2 keyboard and mouse ports are compatible
with standard PS/2 keyboards and mice.
User Display
The console video ports are compatible with DisplayPort1.1/1.2

11
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Unit Display Diagram, Front View
(F1DN104P-3 model shown)
2 31
4 5 6
1LED Indicator 3Tamper-Evident Seal 5 Name Label Guide
2Port Selector 4CAC Enable Switch
(F1DN104C-3 model only) 6Color Chip

12
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Unit Display Diagram, Back View
(F1DN104P-3 model shown)
2 43 5 6 7 8 9 101
13 14 15 1611 12
1Console USB CAC Reader Port and LED 7Console PS/2 mouse port 13 Video Diagnostic LED
2DCU port (Non operative, for future use) 8Computer USB KM port 14 Console HDMI Port
3Console Audio out jack 9Computer audio port 15 Computer DP port
4Console USB Mouse Port 10 Computer CAC USB Port 16 Mounting Track
5Console USB Keyboard Port 11 Mounting Track
6Console PS/2 keyboard port 12 DC Power Jack

13
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Unit Display Diagram, Back View
(F1DN104Q-3 model shown)
2 43 5 6 7 8 1091
13 15 17 1811 12 14 16
1Console USB CAC Reader Port and LED 7PS/2 Console mouse Port 13 Video Diagnostic LEDs
2Remote control (non-operative, for future use) 8Computer USB KM port 14 Console DVI Port
3Console Audio Input Jack 9Computer audio port 15 Console HDMI Ports
4Console USB Mouse Port 10 Computer CAC USB Port 16 Computer DVI Port
5Console USB Keyboard Port 11 Mounting Track 17 Computer DP Ports
6PS/2 Console Keyboard Port 12 DC Power Jack 18 Mounting Track

14
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Unit Display Diagram, Back View
(F1DN104W-3 model shown)
2 43 51
13 14 15 1611 12
6 7 8 9 10
1Console USB CAC Reader Port and LED 7PS/2 Console mouse Port 13 Video Diagnostic LEDs
2DCU port - (non operative, for future use) 8Computer USB KM port 14 Console HDMI Ports
3Console Audio Input Jack 9Computer audio port 15 Computer DP Ports
4Console USB Mouse Port 10 Computer CAC USB Port 16 Mounting Track
5Console USB Keyboard Port 11 Mounting Track
6PS/2 Console Keyboard Port 12 DC Power Jack

15
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Specifications
Part No. F1DN104P-3, F1DN104W-3, F1DN104Q-3
Enclosure
Faceplate
Heavy-duty extruded aluminum
enclosure with metal faceplate
Power Requirements 12V DC, 1.5A (maximum) power adapter
with center-pin-positive polarity (for
F1DN104P-3)
12V DC, 3A (maximum) power adapter
with center-pin-positive polarity (for
F1DN104W-3 and F1DN104Q-3)
AC Input 100 to 240VAC
No. of Users Supported 4
No. of Computers Supported 4
No. of monitors per
computer supported
F1DN104P-3 - 1 monitor
F1DN104W-3 - 2 monitors
F1DN104Q-3 - 4 monitors
Video supported F1DN104P-3 & F1DN104W-3
HDMI capable display for console area
DisplayPort capable displays for computers
input area
F1DN104Q-3
HDMI capable display for console area
DisplayPort and DVI-I capable displays for
computers input area
Resolution supported HDMI and DisplayPort 1.1/1.2 ports
support 4K-2K UHD resolutions of up
to 3840×2160 pixels.
DVI-I port supports up to 2560x1600
pixels (F1DN104Q-3 only).
Console Keyboard Port USB Type A or PS/2 Mini-DIN 6-pin
female connector
Console Mouse Port USB Type A or PS/2 Mini-DIN 6-pin
female connector
Console CAC Input USB Type A
Console Monitor Port 1 x HDMI1.4 female connector
(F1DN104P-3)
2 x HDMI1.4 female connector
(F1DN104W-3)
3 x HDMI1.4 female connector & 1 x
DVI-I female connector(F1DN104Q-3)
Console Speaker 1/8" (3.5mm) female
CPU Keyboard/Mouse Ports USB Type B
CPU CAC Ports USB Type B
CPU Keyboard/Mouse Ports USB Type B
CPU Audio 1/8" (3.5mm) female

16
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
CPU Monitor Ports 1 x DisplayPort 1.1/1.2 female
connector (F1DN104P-3)
2 x DisplayPort 1.1/1.2 female
connector (F1DN104W-3)
3 x DisplayPort 1.1/1.2 female
connector & 1 x DVI-I female
connector(F1DN104Q-3)
Port Selectors 4
LED Indicators 4
User Channel Selection Methods Front-panel push buttons
Operating Temp 32° to 104° F (0° to 40° C)
Storage Temp -4° to 140° F (-20° to 60° C)
Humidity 0-80% RH, non-condensing
Dimensions F1DN104P-3
12.5 (W) x 1.7 (H) x 6.4 (L) inches /
317.5 (W) x 43.2 (H) x 162.6(L) mm
F1DN104W-3
12.5 (W) x 2.5 (H)x 6.4 (L) inches/
317.5 (W) x 63.5 (H)x 162.6(L) mm
F1DN104Q-3
12.5 (W) x 3.8 (H)x 6.4 (L) inches/
317.5 (W) x 96.5 (H)x 162.6(L) mm
Weight F1DN104P-3
F1DN104W-3
F1DN104Q-3
3.9 lbs.(1.77kg)
4.85 lbs.(2.2kg)
5.85 lbs.(5.65kg)
Made in Designed in California. Assembled in
US with US and Foreign components.
Product Life-Cycle 5 years
Warranty 3 years

17
Belkin®Advanced Secure DisplayPort KVM
INSTALLATION
SECTIONS
Table of Contents 12 45673
Pre-Configuration
Where to place the Switch:
The enclosure of the Switch is designed for desktop or rack-mount
configuration. Rack-mount brackets are included with the Switch.
Consider the following when deciding where to place the Switch:
• Your proximity to the port selectors on the front of the Switch
• The lengths of the cables attached to your keyboard, monitor,
and mouse
• The location of your computers in relation to your console
• The lengths of the cables you use to connect your computers to
the Switch
Warning: Avoid placing cables near fluorescent lights,
air-conditioning equipment, or machines that create electrical noise
(e.g., vacuum cleaners).
Important:
1. If the unit’s enclosure appears disrupted or if all channel-
select LEDs flash continuously, please remove product from
service immediately and contact Belkin Technical Support
at [phone].
2. Do not connect product to computing devices:
a. That are TEMPEST computers;
b. That include telecommunication equipment;
c. That include frame grabber video cards;
d. That include special audio processing cards.

18
Belkin®Advanced Secure DisplayPort KVM
SECTIONS
Table of Contents 12 4567
INSTALLATION
3
Connection and Installation
Important: As the unit powers up it performs a self-test procedure. In
case the self- test has failed for any reason the product LED behavior
will be abnormal as described in User Guidance section. Try to
power cycle the unit. If problem persists please contact your system
administrator or Technical Support.
Step 1 – Connecting the Console to the Switch
Warning: Before attempting to connect anything to the Switch or your
computers, please ensure that all computer equipment and devices are
powered off.
Connect your monitor, keyboard, mouse, and speaker to the rear of the
Switch in the “User Console” section.
Notes:
1. Console USB keyboard and mouse ports are switchable, i.e.
you can connect keyboard to mouse port and vice versa.
However, for optimal operation it is recommended to connect
USB keyboard to console USB keyboard port and USB mouse to
console USB mouse port.
2. For security reasons products do not support wireless keyboards.
In any case do not connect wireless keyboard to product.
3. Non-standard keyboards, such as keyboards with integrated
USB hubs and other USB-integrated devices, may not be
fully supported due to security policy. If they are supported,
only classical keyboard (HID) operation will be functional. It is
recommended to use standard USB keyboards.
4. Console USB mouse port supports Standard KVM Extender
composite device having a keyboard/mouse functions.
Step 2 – Power Up
2.1 Turn the monitor on.
2.2 Power up the Belkin Advanced Secure DisplayPort KVM by
connecting the power. The display diagnostic LED should be solid
green a few seconds after power up. This indicates the display EDID
information has been captured and secured.