Belkin F1DN108K-3 User manual

Advanced Secure 4 and 8-Port
Keyboard/Mouse Switches
User Manual
F1DN104K-3 – Belkin Advanced Secure 4-Port Keyboard/Mouse Switch
F1DN108K-3 – Belkin Advanced Secure 8-Port Keyboard/Mouse Switch
Document Number 8820-01342 Rev. B03
This Belkin product is compliant
with latest NIAP Protection Profile
PSS Ver. 3.0, which exceeds EAL4
and PP PSS Ver. 2.1.
N
I
A
P
P
P
P
S
S
3
.
0
C
E
R
T
I
F
I
E
D
C
O
M
M
O
N
C
R
I
T
E
R
I
A

i
Belkin®Secure 4/8 port KM Switch User Manual
TABLE OF CONTENTS
SECTIONS 1 2 3 4 5 6 7
Table of Contents
Introduction ..............................................1
What is a KM (Keyboard / Mouse) Switch? .....................1
Package Contents.........................................2
Overview.................................................3
Safety Precautions ........................................3
User Guidance & Precautions ...............................4
Security Features .........................................6
Tamper Evident Labels .....................................7
Operational Features ......................................8
What is Seamless Cursor Switching? .........................9
Equipment Requirements ..................................10
Belkin Secure KM Features ................................13
Product Specifications ....................................15
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Before Installation ........................................16
Connection and Installation ................................17
Advanced Setup .........................................21
Operation ...............................................24
Operating the Secure KM Switch............................24
Troubleshooting .........................................26
Keyboard ...............................................26
Video ..................................................27
Mouse .................................................27
Appendices .............................................28
APPENDIX A – Secure KM Configuration
Utility Software (KMC Creator)..............................28
APPENDIX B – Secure KM Configuration
Utility (KMC Loader) Software ..............................35
Information..............................................38

1
Belkin®Secure 4/8 port KM Switch User Manual
INTRODUCTION
SECTIONS
Table of Contents 2 3 4 5 6 71
Thank you for purchasing this Belkin Advanced Secure Keyboard/Mouse
(K/M) Switch. This KM Switch is designed for use in secure environments
across wide security gaps. This product provides the highest security
safeguards and features, meeting current and future cyber prevention
requirements.
This User Manual provides all the details you’ll need to install and operate
your new product, and also to troubleshoot it in the unlikely event of a
problem.
What is a KM (Keyboard / Mouse) Switch?
There are many cases where one user needs to work simultaneously with
more than one computer. In some cases users have multiple displays
attached to multiple computers. The challenge is how a single user can
interact with multiple computers with multiple displays each. KVMs are not
suitable for these users as they are designed to switch displays; allowing
the user to only see and manage one target device at a given time. Using the
Belkin Secure KM users can see all the connected computers at the same
time and easily decide on which computer he wants to work.
A KM switch is a device that switches a single keyboard and mouse between
multiple computers. A KM switch is essentially a KVM switch without the
video switching - all displays are continuously connected to their respective
computers; so that all connected device can be managed seamlessly, in
real time. Multiply displays can be connected to each computer that is
connected to the Belkin Secure KM. The Belkin Secure KM is designed
to have up to 8 computers connected and working simultaneously in any
possible monitor setup. The configuration of the Belkin Secure KM can be
done by using the KM presets or by using the easy to use configuration tool.
The Belkin Secure KM supports Windows, Linux and Mac operating
systems. Switching is done simply by dragging your mouse from one
window to another having it disappearing from one machine and appearing
on another. Multi Displays connected to the same computers are only
supported by Windows based operating systems.

2
Belkin®Secure 4/8 port KM Switch User Manual
SECTIONS
Table of Contents 2 3 4 5 6 7
INTRODUCTION
1
Package Contents
• Belkin Advanced Secure KM Switch
• 12V 1.5A DC Power Supply (F1DN104K-3 only)
• AC Power Cord (F1DN108K-3 only)
• Interchangeable Port Color Chips
• Port-Naming Labels
• Belkin USB configuration cable
• User Manual
Important: This product is equipped with an always-on active
anti-tamper system. Any attempt to open the enclosure may
activate the anti-tamper system and render the unit permanently
inoperable. If the unit’s enclosure appears disrupted or if all the
port LEDs flash continuously, please call Belkin Technical Support
toll-free at [phone].
Please note: Belkin Secure KM Products cannot be upgraded, serviced
or fixed.
Important Security Note: If you are aware of potential security vulnerability
while installing or operating this product, we encourage you to contact us
immediately at the following email address: [email protected]

3
Belkin®Secure 4/8 port KM Switch User Manual
OVERVIEW
SECTIONS
Table of Contents 1 3 4 5 6 72
Safety Precautions
Please read the following safety precautions carefully before using the
product:
• Before cleaning, disconnect the product from any electrical power
supply.
• Do not expose the product to excessive humidity or moisture.
• Do not store or use for extensive period of time in extreme thermal
conditions – it may shorten product lifetime.
• Install the product only on a clean secure surface.
• If the product is not used for a long period of time, disconnect it from
electrical power.
• If any of the following situations occurs, have the product checked by
a qualified service technician:
– Liquid penetrates the product’s case.
– The product is exposed to excessive moisture, water or any other
liquid.
– The product is not working well even after carefully following the
instructions in this user’s manual.
– The product has been dropped or is physically damaged.
– The product shows obvious signs of breakage or loose internal
parts.
– In case of external power supply – If power supply overheats, is
broken or damaged, or has a damaged cable.
• The product should be stored and used only in temperature and
humidity controlled environments as defined in the product’s
environmental specifications.
• Never attempt to open the product enclosure. Any attempt to open
the enclosure will permanently damage the product.
• The product contains a non-replaceable internal battery. Never
attempt to replace the battery or open the enclosure.
• This product is equipped with an always-on active anti-tampering
system. Any attempt to open the product enclosure will activate the
anti-tamper triggers and render the unit inoperable and warranty void.

4
Belkin®Secure 4/8 port KM Switch User Manual
SECTIONS
Table of Contents 1 3 4 5 6 7
OVERVIEW
2
User Guidance & Precautions
Please read the following User Guidance & Precautions carefully before
using the product:
1. As product powers-up it performs a self-test procedure. In case of
self- test failure for any reason, including jammed buttons, the product
will be Inoperable. Self-test failure will be indicated by the following
abnormal LED behavior:
a. All channel-select LEDs will be turned ON and then OFF;
b. A specific, predefined LED combination will be turned ON;
c. The predefined LED combination will indicate the problem type
(jammed buttons, firmware integrity).
Try to power cycle product. If problem persists please contact your system
administrator or technical support.
2. By default, after product power-up, the active channel is #1.
3. The appropriate usage of peripherals (e.g. keyboard, mouse, display,
authentication device) is described in detail in this User Manual’s
appropriate sections. Do not connect any authentication device with
an external power source to product.
4. For security reasons products do not support wireless keyboards and
mice. In any case do not connect wireless keyboard/mouse to product.
5. For security reasons products do not support microphone/line-in
audio input. In any case do not connect a microphone to product audio
output port, including headsets.
6. Product is equipped with an always-on active anti-tampering system.
Any attempt to open product enclosure will activate the anti-tamper
system indicated by all channel-select LEDs flashing continuously.
In this case, product will be inoperable and warranty void. If product
enclosure appears disrupted or if all channel- select LEDs flash
continuously, please remove product from service immediately and
contact technical support.
7. Connecting external USB devices to product CAC port:
a. When connecting a USB device that is not qualified or rejected
for security reasons to product’s CAC port, the CAC LED will flash
green and USB device will be inoperable.
b. When connecting a USB device that is undetectable for any
reason (e.g. failed device, non-standard device etc.) to product’s
CAC port, the CAC LED will not illuminate at all and device will be
inoperable.
8. Do not connect product to computing devices:
a. That include telecommunication equipment;
b. That include frame grabber video cards;
c. That include special audio processing cards.
9. Product has a remote control port in the back panel labeled DCU. Do
not use this port - it is inoperable and for future use.

5
Belkin®Secure 4/8 port KM Switch User Manual
SECTIONS
Table of Contents 1 3 4 5 6 7
OVERVIEW
2
User Guidance & Precautions (Con.)
10. Important! Before re-allocating computers to channels, it is mandatory
to power cycle product, keeping it powered OFF for more than 1
minute.
11. Product log access and administrator configuration options are
described in product Administrator Guide.
12. If you are aware of any potential security vulnerability while installing or
operating product, please remove product from service immediately
and contact us in one of the ways listed in this manual.
Support for TEMPEST Devices
The Belkin Advanced Secure KM products are compatible with TEMPEST
devices. However, we RECOMMEND against connecting the Belkin KM
products to TEMPEST devices.
The reason is that these Belkin devices are designed with Common Criteria
Peripheral Sharing Switch (PSS) PP3.0 standards, not TEMPEST. The
TEMPEST certification mandates specific measures to prevent electrical
leakage and the PSS standards DO NOT include such measures. Thus,
connecting a switch to a TEMPEST devices could potentially render the
complete system non-TEMPEST-secure.
NOTE: Currently, there are no KM devices available (from any manufacturer)
that are both compliant with PP3.0 and TEMPEST-secure.

6
Belkin®Secure 4/8 port KM Switch User Manual
SECTIONS
Table of Contents 1 3 4 5 6 7
OVERVIEW
2
Security Features
Product is designed, manufactured and delivered in security-controlled
environments. Below is a summary of the main advanced features
incorporated in product:
Advanced isolation between computers and shared peripherals
The emulations of keyboard, mouse and display EDID, prevent direct
contact between computers and shared peripherals. Product design
achieves maximal security by keeping the video path separate with
keyboard and mouse switched together, purging keyboard buffer when
switching channels. All these features contribute to strong isolation between
computer interfaces, maintained even when product is powered off.
Unidirectional data flow: USB, audio and video
Unique hardware architecture components prevent unauthorized data flow,
including:
• Optical unidirectional data flow diodes in the USB data path that
filtrate and reject unqualified USB devices;
• Secure analog audio diodes that prevent audio eavesdropping with
no support for microphone or any other audio-input device;
• Video path is kept separate from all other traffic, enforcing
unidirectional native video flow. EDID emulation is done at power up
and blocks all EDID/MCCS writes. For DisplayPort video, filtration of
AUX channel exists to reject unauthorized transactions.
Isolation of power domains
Complete isolation of power domains prevents signaling attacks.
Secure administrator access & log functions
Product incorporates secure administrator access and log functions to
provide auditable trail for all product security events, including battery
backup life for anti-tampering and log functions. Non-reprogrammable
firmware prevents the ability to tamper with product logic.
Always-on, active anti-tamper system
Active anti-tampering system prevents hardware implants and wireless
key-loggers. Any anti-tampering attempt causes isolation of all computers
and peripheral devices rendering product inoperable and showing clear
indications of tampering event to user.
Holographic security tamper-evident labels are placed on the enclosure
to provide a clear visual indication if product has been opened or
compromised.
Metal enclosure is designed to resist mechanical tampering with all
microcontrollers protected against firmware-read, modification and rewrite.

7
Belkin®Secure 4/8 port KM Switch User Manual
SECTIONS
Table of Contents 1 3 4 5 6 7
OVERVIEW
2
Secure Packaging
“Tear away” packaging ensures secure delivery of the Switch as it is routed
to the end user. The recyclable packaging also breaks down flat, simplifying
the cleanup process.
LED Indicators
Each port button number illuminates to indicate that the console currently
controls the corresponding computer. As a port selector is pushed, or if the
mouse cursor crosses between displays associated to different computers
or networks, the LED number will light up.
Tamper Evident Labels
Belkin Secure Switch uses holographic tamper evident
labels to provide visual indications in case of enclosure
intrusion attempt.
If for any reason the tamper evident seal is missing,
appears disrupted, or looks different than the
example shown here, please avoid using product and
call Belkin Technical Support at: [phone].
Active Anti-Tampering System
Belkin Secure Switch is equipped with an always-on
active anti-tampering system. If mechanical intrusion is
detected by this system, the Switch will be permanently disabled and LED
will blink continuously.
If product indication tampered state (all LEDs blinking) - please call
Technical Support and avoid using that product
Product Enclosure Warning Label
Belkin Secure Switch has the following
warning printed next to the location of the
product Asset Tag and Tamper Evident labels
on product enclosure:
12345678

8
Belkin®Secure 4/8 port KM Switch User Manual
SECTIONS
Table of Contents 1 3 4 5 6 7
OVERVIEW
2
Operational Features
The Belkin Secure KM was designed with the user in mind for today’s
IT environment. Below is a summary of some key operational features
incorporated into the Product.
Support for multiple head
The Belkin Secure KM can be easily configured to support dual, triple and
up to 16 head computers through a signed software driver. Note that single
head installation does not need any software installation.
Extensive administrator setup options
Administrator mode provides many customizable settings from display
arrangement and size to cursor speed and acceleration.
Seamless Cursor Switching (SCS)
SCS allows the Belkin Secure KM to switch automatically between
computers once mouse cursor crosses display borders. The switching is
seamless between multiple computers with cursor movement.
Extensive administrator setup options
Administrator mode provides many customized settings, which includes
display arrangement, monitor size, cursor speed and mouse acceleration.
Please contact Belkin for the KM Creator and KM Loader customization
software.
Integrated Mounting Rails
The Belkin Secure KM features an integrated mounting system for easy
under-the-desk, or side-wall mounting.
Audio Support
The Belkin Secure KM supports audio out switching. Microphone switching
is not supported to prevent analog leakages through audio ports.
Port Coloring
The included color chips can be inserted into each port-selector button.
Colors can be associated with an established network to facilitate port
identification and reduce user switching error.
Port Naming
The included network-name labels can be placed in the area underneath
the port-selector button to facilitate port identification and reduce user
switching error. Blank labels are also provided for network names that are
not listed on the included network-name labels.
Increased Reliability
Using a new, advanced anti-tampering battery with extremely low self-
discharge rate the life expectancy of the switch has been increased
dramatically to over 25 years.