Belkin F1DN104S User manual

Advanced Secure USB Switch
User Manual
F1DN104S – Advanced Secure 4-Port USB Switch
Document Number 8820-01349 Rev. B

1
Belkin®Advanced Secure USB Switch User Manual
TABLE OF CONTENTS
SECTIONS 1234567
Table of Contents
Introduction ..............................................2
What is a Secure USB Switch? ..............................2
Package Contents.........................................2
Safety Precautions ........................................3
Overview.................................................4
Security Features .........................................4
Operational Features ......................................5
Equipment Requirements ...................................6
Computers...............................................7
Belkin Advanced Secure USB Switch Features ................10
Specifications ...........................................11
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Before Installation ........................................12
Connecting the Secure USB Switch .........................12
Defining the USB Device Policies ...........................13
Additional Options and Settings ...........................18
Viewing USB Switch Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Viewing Connection Status ................................18
Saving, Opening and Loading Preset Configurations............19
Set/Change Password ....................................19
Operation ...............................................20
Lock Function ...........................................20
DCU Port ...............................................20
USB Switch Configuration Samples .........................22
Troubleshooting .........................................24
Information..............................................25

2
Belkin®Advanced Secure USB Switch User Manual
INTRODUCTION
SECTIONS
Table of Contents 2345671
Thank you for purchasing this Advanced Secure USB Switch.
This Switch is a unique product that enables users to securely share any
USB device between up to four different computers.
You can apply your organization’s policy of security and operational
regulations regarding USB devices and their uses, including share
guidelines for USB devices between the different organization networks.
The Advanced Secure USB Switch is designed for use in secure defense
and intelligence environments across wide security gaps. It provides the
highest security safeguards and features, meeting current and future
cyber prevention requirements.
This User Manual provides all of the information you will need to install
and operate your new Switch. In addition, there is troubleshooting
guidance—in the unlikely event of a problem.
What is a Secure USB Switch?
There are cases where one user needs to work with a USB device on
more than one computer. The Switch enables setting rules stating
which USB devices are allowed or not allowed for each of one of the
computers.
Package Contents
• Advanced Secure USB Switch
• 12V 1A DC Power Supply
• Interchangeable Port Color Chips
• Port-Naming Labels
• CD Configuration Software
• 6ft Mini USB to USB programming cable (F3U138b06)
• 4 USB Cables (F3U133b06)
• User Manual
• Quick Start Guide
Important Security Note: If you are aware of potential security
vulnerability while installing or operating this product, we encourage
you to contact us immediately at the following email address:
gov_securit[email protected]
Important: This product is equipped with an always-on active anti-
tamper system. Any attempt to open the enclosure may activate the
anti-tamper system and render the unit permanently inoperable. If
the unit’s enclosure appears disrupted or if all the channel LEDs are
on (RED), please call Belkin Technical Support at [phone].
BACK TO TABLE OF CONTENTS >

3
Belkin®Advanced Secure USB Switch User Manual
INTRODUCTION
SECTIONS
Table of Contents 2345671
Safety Precautions
• Please read the following safety precautions carefully before using
the Secure USB Switch:
• Before cleaning, disconnect the product from DC power.
• Be sure not to expose the product to excessive humidity.
• Be sure to install the product on a clean secure surface.
• Do not place the DC power cord in a path of foot traffic.
• If the product is not used for a long period of time, remove the
product’s wall-mount power supply from the mains jack.
• If one of the following situations occurs, get the product checked
by a qualified service technician:
– The product’s power supply is overheated, damaged, broken,
causes smoke or shortens the mains power socket.
– Liquid penetrates the product’s case.
– The product is exposed to excessive moisture or water.
– The product is not working well even after carefully following
the instructions in this user’s manual.
– The product has been dropped or is physically damaged.
– The product has obvious signs of breakage or loose internal
parts.
• The wall-mount power supply used with this product should be
the model supplied by the manufacturer or an approved equivalent
provided by Belkin or an authorized service provider. The use of
improper power source will void product warranty.
• The product should be stored and used only in temperature- and
humidity-controlled environments as defined in the product’s
environmental specifications.
BACK TO TABLE OF CONTENTS >

4
Belkin®Advanced Secure USB Switch User Manual
OVERVIEW
SECTIONS
Table of Contents 1 345672
Security Features
The Advanced Secure USB Switch is the only commercially available
Secure USB Switch. This product is a derivative of high-security product
used in the latest NATO nuclear submarines. Below is a summary of
some of the security features incorporated into the product.
USB Device Filtering
The USB device filtering is based on a detailed scheme with ability to
create up to 32 rules to allow or block USB devices based on Class,
Subclass, Protocol, Serial number, VID and PID, and more.
No Shared Resources
The Belkin Secure USB Switch is designed to securely operate even
when peripheral devices are vulnerable to signaling attacks. The Switch
does not allow computer access to any shared resource and does not
share controllable power sources, preventing data leakages between
channels altogether.
Assign USB Devices to Specific Computers
The Belkin Secure USB Switch provides the ability to assign a specific
type of USB device only to some of the computers connected to it,
providing a more exact and secure USB device policy.
Non-reprogrammable Firmware
The Switch features custom firmware that is not reprogrammable,
preventing the ability to remotely attack the USB Switch control logic.
Solid-Aluminum, Uni-Body Enclosure
The one-piece aluminum enclosure reduces the entry points into
the product’s electronics and minimizes radiated signals that can be
snooped or intercepted.
Active Always-On Anti-Tamper
An active chassis anti-tamper system prevents electronic circuitry
from being accessed and tampered with by permanently disabling the
product once tampering is detected.
Holographic Tamper-Evident Labels
Four serially numbered holographic security tamper-evident labels are
placed on the enclosure surface to provide a visual indication if the
Switch has been opened or compromised.
Secure Packaging
“Tear away” packaging ensures secure delivery of the Switch as it is
routed to the end user.
Password Protect Switch Settings
To prevent unauthorized users from changing the applied USB device
policy the Belkin Advanced Secure USB Switch is protected by a
password that can be changed only by an authorized administrator.
Please note:
Belkin Secure products cannot be upgraded, serviced or fixed.
BACK TO TABLE OF CONTENTS >

5
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Operational Features
The Belkin Advanced Secure USB Switch was designed for today’s IT
environment with the user in mind. A summary of some of the features
incorporated into the product is listed below:
Wide Variety of USB Devices are Supported
This Switch was designed and tested to support the widest variety of
USB devices.
Hot Swap USB Devices
Allows hot-swapping of USB devices while still connected to the target
computers. This enables organizations to create multiple USB device
rules, allowing the users to share devices in a single configuration.
Easy-to-Use, Password Protected Programing Software
(for Administrators)
Administrators can program the Switch using its easy-to-use, built-in
application.
Password Protected Software
Only authorized users have access to defined settings through
password protection.
BACK TO TABLE OF CONTENTS >

6
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Equipment Requirements
Cables
Belkin highly recommends the use of Belkin Cable Kits for your product
to help ensure superior security and performance. These cables offer
the highest quality possible and optimal data transmission.
One cable is required per connected computer.
Please note: The use of cables other than those provided by Belkin
is not recommended. The use of other cables may affect system
security and may permanently damage the product. This may void
product warranty.
Note: Due to USB signal limitations, the cable length cannot exceed
15 feet (4.6m).
Belkin USB Cables:
F3U133-06 – 6 ft. (1.8m)
F3U133-10 – 10 ft. (3m)
BACK TO TABLE OF CONTENTS >

7
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Computers
The Belkin Advanced Secure USB Switch is compatible with computers,
thin-clients, servers and laptops running on, but not limited to, the
following OS platforms:
• Windows®2000
• Windows XP (Home/Professional)
• Windows 2003 Server
• Windows 7
• Windows 8
• Windows Vista®
• Mac OS®X v10.3 and higher
Laptop docking stations having USB ports are supported.
For the latest compatibility list, see the Belkin website or contact Belkin
support.
Note: USB Hubs are not supported by the Belkin Secure USB switch
in any way. Any device connected to a USB hub will be blocked by
the Secure USB switch. Any other USB device will work given the
correct USB policy.
Desktop Controller Unit (DCU) Support
It is possible to chain the USB Switch to Belkin Advance Secure KVM
Switch via Belkin Desktop Controller Unit.
Once Chained the USB switch will be synchronized with the Belkin
Advance Secure KVM Switch. A USB device connected to the Secure
USB Switch will be mapped to the active port of the KVM. This set-up
will allow Secure KVM users to use devices such as: touch screens and
web cameras.
AUX
Port
KVM Port
DCU
DCU Port USB Switch Back
DCU Port
KVM Switch Back
P/N F1D9 03 6-10
Optional - Not included with the Secure USB Switch
RJ14 6 ft. DCU Cable
Included in the DCU Kit
BACK TO TABLE OF CONTENTS >

8
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Active Anti-Tampering System
Belkin Advanced Secure USB Switch is equipped with an always-on
active anti-tampering system. If mechanical intrusion is detected by
this system, the product will be permanently disabled and the LEDs
will flash continuously. If a DCU is used, the DCU will indicate that the
product has been tampered with.
If the product indicates a tampered state (all LEDs flashing
continuously), please call Belkin Technical Support and avoid
using the product.
E-Lock USB Cable / E-Lock USB Brackets
In many organizations the use of USB devices and even the use of the
USB ports of the computers is highly sensitive and monitored carefully.
Users who are using the Secure USB switch can easily bypass the
security mechanism by disconnecting the USB cables either from the
switch or PC. The user can then connect unauthorized\unsupervised
USB devices.
The Optional USB e-locks cables combined with the USB switch will
form an electronic lock for the PC USB ports preventing unauthorized
use of USB peripheral. The user will have to use the supervised Secure
USB switch for that. The USB e-lock is an optional accessory that
can be purchased separately and used in conjunction with the secure
USB switch.
The USB e-lock is a USB cable with a normal USB – B connector that
connects to the Secure USB Switch and locks using a locking bracket.
E-Lock USB Brackets
DCU
USB
USB Device
USB USB USB
Admin
4 3 2 1
USB
4
USB
3
USB
2
USB
1
USB
USB
USB
USB
The other side of the cable is a special USB
Type A plug with electromechanical lock
mechanism, which secures the plug inside any
standard USB jack.
Once the USB e-lock cable is inserted, it can
only be removed with special command from
the Secure USB Switch.
It is locked by default, even when power is off.
The cable is 6 ft. long (1.9 m).
E-Locks are an optional kit that can be bought separately.
SKU: F1DN105E
Description: ADVANCED SECURE USB SWITCH E-LOCK KIT
E-Lock USB Cable
BACK TO TABLE OF CONTENTS >

9
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
F1DN104S Front Panel Features
21
36
45
1Port Selector 3Color Chip 5Lock LED
2LED Indicator 4Tamper-Evident Label 6Lock Button
IMPORTANT
NOTICE:
If for any reason the
tamper-evident seal
is missing, appears
disrupted, or looks
different than the
example shown
here, please call
Belkin Technical
Support at:
[phone]
12345678
BACK TO TABLE OF CONTENTS >

10
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
F1DN104S Back Panel Features
32 41
56
1DCU Port 3Device USB Jack 5Admin Configuration Port
2Device Status LED 4Host DPP USB Cable Jack 6DC Power Jack
BACK TO TABLE OF CONTENTS >

11
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 1 34567
OVERVIEW
2
Specifications
Part No. F1DN104S
Enclosure Heavy-duty extruded aluminum
enclosure with metal faceplate
Power Requirements 12V DC, 1A (maximum) power adapter
with center-pin-positive polarity
AC Input 100 to 240VAC
No. of Secure Channels 4
Operating Temp 32° to 104° F (0° to 40° C)
Storage Temp -4° to 140° F (-20° to 60° C)
Humidity 0-80% RH, non-condensing
Dimensions 272 (W) x 82 (D) x 30 (H) mm /
10.7 (W) x 3.2 (D) x 1.18 (H) inches
Weight 1 kg. (2.2 lbs.)
Made in USA
Product Design Life-cycle 15 years
Warranty 3 years
BACK TO TABLE OF CONTENTS >

12
Belkin®Advanced Secure USB Switch User Manual
INSTALLATION
SECTIONS
Table of Contents 12 45673
Before Installation
Unpacking the Product
Before opening the Belkin Advanced Secure USB Switch packaging,
inspect the packaging seal condition to assure that product was not
accessed or tampered with during delivery. If the packaging seal looks
suspicious, contact Belkin Technical Support and do not use the product.
After removing the packaging seal, please inspect packaging contents
to verify that required components included match the list in the
Package Contents section of this manual.
After the Belkin Advanced Secure USB Switch is removed from its
packaging materials, inspect the tampering-evident label to assure that
product is properly sealed. If the label is damaged or missing, contact
Belkin Tech Support and do not use the product.
Warning: Avoid placing cables near fluorescent lights, air-
conditioning equipment, or machines that create electrical noise
(e.g., vacuum cleaners).
Consider the following when deciding where to place the Switch:
The location of your computers in relation to your console.
The length of the cables used to connect the computers to the Switch.
Connecting the Secure USB Switch
Step 1 – Connecting the Computers
Connect up to four computers to the Secure USB Switch using the
following steps:
Connect each computer with a USB cable (Belkin F3U133 series cable,
sold separately). For additional details on cables see page 6. The USB
cable can be connected to any free USB port on the computer.
Note: If the number of computers used is less than the number of USB
channels (4) connect the computers in proper order 1, 2 and then 3.
The USB cable must be connected directly to a free USB port on the
computer, with no USB hubs or other devices in between.
Step 2 – Power Up
1. Power up the Secure USB Switch by connecting the DC power plug.
2. Power up the connected computers.
If you encounter an error, check your cable connections for that
computer and reboot. If the problem persists, please refer to the
Troubleshooting section on page 23.
BACK TO TABLE OF CONTENTS >

13
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 12 4567
INSTALLATION
3
Important: By default the USB Switch is loaded with a configuration
to allow only USB authentication devices. All other USB devices will
be blocked on all ports.
Administrator Setup
After installing the Secure USB Switch, use the USB Device
Configuration Utility (UCU) to set USB device policies.
Defining the USB Device Policies
The USB device policies are configured using the USB Device
Configuration Utility, which lists allowed and blocked devices.
Allowed devices are listed in the white list, and blocked devices are
listed in the black list.
Note: Devices on the black list will always supersede devices on the
white list.
Specific devices can be assigned to certain computers but not to
others.
Device policy rules can be created based on:
• Class
• Sub-class
• Protocol
• VID, PID
• Serial Number
Once configured, the policy is loaded onto the Belkin Advanced Secure
USB Switch.
You can save a USB device policy on one Secure USB Switch and load
it on another.
Note: For examples on how to configure the Secure USB Switch,
please refer to Appendix A on page 22
BACK TO TABLE OF CONTENTS >

14
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 12 4567
INSTALLATION
3
The USB Device Configuration Utility supports the following operating
systems:
• WinXP or greater
Step 1 – Installing the USB Device Configuration Utility
Install the USB Device Configuration Utility by following the installation
wizard instructions.
Step 2 – Connect the Belkin Advanced Secure USB Switch to the
management PC
The management PC can be any external laptop or desktop running
WinXP or greater. Connect a USB Cable (F3U138b06) from the
computer being used to configure the policies to the Belkin Advanced
Secure USB Switch Admin Port on the back side of the Switch.
BACK TO TABLE OF CONTENTS >

15
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 12 4567
INSTALLATION
3
Step 3 – Open the USB Device Configuration Utility (UCU)
The UCU GUI includes the following areas:
Status Bar – Shows the status of the USB Switch
and UCU.
Command Bar – Performs certain commands.
White List Rules – Lists allowed devices using
“or” relationship rules.
Black List Rules – Lists the blocked devices using
“or” relationship rules.
Read Bar – Upon request, displays the attributes of the
currently connected device.
Note: The black list rules will always supersede the white list rules.
Note: For examples on how to configure the Secure USB Switch,
please refer to Appendix A on page 22
BACK TO TABLE OF CONTENTS >

16
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 12 4567
INSTALLATION
3
Step 4 – Check the Connection and Secure UCU
Check the status bar to make sure a connection is established.
There are several status options:
• Not Connected – UCU is not communicating with Advanced
Secure USB Switch
• Connected/Access Granted – UCU is communicating with
Advanced Secure USB Switch
Step 5 – Create USB device rules
Once the Advanced Secure USB Switch is powered up and connected
to the UCU, create your first rule.
The mechanisms to create white list and black list rules are very similar
and can be done in two ways:
Method 1: Read Attributes from USB Device
You can read the attributes of a connected USB device to create the
white list and black list rules.
1. Connect the USB device to the “USB Device” jack at the back of
the Advanced Secure USB Switch.
2. In SCT, select Device > Read.
The USB device attributes will appear in the Currently Connected
Device pane.
3. Right-click attributes and select from the drop-down list if you
want to add to the white list or black list.
4. Repeat the above steps for every USB device.
BACK TO TABLE OF CONTENTS >

17
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 12 4567
INSTALLATION
3
Method 2: Manually Define USB Devices
1. Go to the white or black list areas and select the attributes by
which you would like to define your products.
2. Double-click on a field to open a complete list of all possible
attributes. Alternatively just type the value you want.
Note:
• For the white list rules, you can also define a host to which you
would like to allow the device.
• All fields must be entered.
• Use “*” to define an “any” attribute in a field. * can also be used
within the field to define a wild card, for example:
• 4765* will allow 47653, 476598, 47650.
• You can create up to 16 white list rules and 16 black list rules in
every configuration.
• To delete a rule or move it to the opposite list, right click it, and
select the desired action..
Note: For examples on how to configure the Secure USB Switch,
please refer to Appendix A on page 22
Step 6 – Load the Configuration
Once you have defined the configuration, load it to the Advanced Secure
USB Switch.
1. Go to Configuration > Load:
2. When the load command is received on the Advanced Secure
USB Switch, the device status LED will turn off.
3. Restart the Advance Secure USB Switch to apply the new
configuration by disconnecting and reconnecting the power supply.
Note: It is impossible to view the configuration currently loaded
on the Secure USB Switch. You can Open a previously saved
configuration, edit it and load it to the switch.
BACK TO TABLE OF CONTENTS >

18
Belkin®Advanced Secure USB Switch User Manual
ADDITIONAL OPTIONS AND SETTINGS
SECTIONS
Table of Contents 123 5674
Viewing USB Switch Information
You can view information required for troubleshooting by accessing the
device information dialog: Device > Information
Viewing Connection Status
You can get information regarding the USB connection status by clicking
Connection Status at the bottom left corner of the application window.
BACK TO TABLE OF CONTENTS >

19
Belkin®Advanced Secure USB Switch User Manual
SECTIONS
Table of Contents 123 567
ADDITIONAL OPTIONS AND SETTINGS
4
Saving, Opening and Loading Preset Configurations
You can save defined configurations to a file and later open or load the
saved configuration.
To save the configuration:
1. In he menu bar, click Configuration > Save As...
2. Navigate to the directory where you want to save the configuration
file, name the file and click Save.
To open and load a saved file:
1. In he menu bar, click Configuration > Open.
2. Navigate to the directory where the configuration file is saved, select
it and click Open.
3. Connect an Advanced Secure USB Switch to the administrator PC,
as described in Step 2- Connect the Belkin Advanced Secure USB
Switch to the Management PC on page 14.
4. Load the configuration into the device, as described in Step 6 - Load
the Configuration, on page 17.
A saved configuration can be opened by selecting Open from the
Configuration Menu. Once the saved file is opened, it can be edited as
needed and then loaded to the Switch.
Set/Change Password
To prevent the UCU from being used by unauthorized users, you can
set a password. By default, no password is required, but protecting the
Switch settings with a password is highly recommended.
To change a password:
5. From the Command Bar, select Device, then select Change
Password.
6. In the Change Password window, enter the old password (if
applicable), then enter the new password twice, and click on OK.
Note: If the UCU is password-protected, on startup, Enter Password
will appear in the status bar. This indicates that a password has been
set and is needed to allow configuration of the Advanced Secure
USB Switch.
BACK TO TABLE OF CONTENTS >