Belkin F1DN108KVM-UN-4 User manual

Universal 2nd Gen Secure
DP/HDMI to DP/HDMI KVM Switch
User Manual
F1DN108KVM-UN-4 – Universal Secure 8-Port Single-Head KVM with CAC, PP 4.0
F1DN208KVM-UN-4 – Universal Secure 8-Port Dual-Head KVM with CAC, PP 4.0
F1DN116KVM-UN-4 – Universal Secure 16-Port Single-Head KVM with CAC, PP 4.0
Document Number - LNKPG-00675 Rev. B00
This Belkin product is compliant with latest
NIAP Protection Profile PSD v4.0, which
exceeds Protection Profile PSS v3.0.

i
TABLE OF CONTENTS
Belkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM Switch
SECTIONS
Table of Contents 2 3 4 5 6 71
TABLE OF CONTENTS
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1
Package Contents ..............................................................1
Safety Precautions.............................................................2
User Guidance & Precautions ..................................................3
Overview ..................................................................4
Security Features ..............................................................4
Tamper Evident Labels ........................................................5
Other Features ................................................................6
Equipment Requirements ......................................................8
System Requirements..........................................................9
Unit Display Diagrams ........................................................10
Specifications.................................................................14
Installation ............................................................... 16
Pre-Configuration ............................................................16
Connection and Installation ...................................................17
Color Coding the Channel Buttons ............................................19
Operating the KVM Switch ................................................20
Common access Card (CaC) Configuration and Operation.....................21
Troubleshooting ..........................................................22
Information...............................................................26

1
Belkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM Switch
INTRODUCTION
SECTIONS
Table of Contents 2 3 4 5 6 71
INTRODUCTION
Thank you for purchasing this Belkin Secure DisplayPort/HDMI KVM. This Switch
is designed for use in secure environment installations. The Switch offers safe
centralized control, which prevents unintended data transfer between computers
running at different security levels. The Switch provides the highest security
safeguards and features that meet today’s Information Assurance (IA) computing
requirements.
Belkin Universal Secure DisplayPort/HDMI KVM is especially challenging in terms
of security as DisplayPort is a very robust protocol by nature, which is capable of
transferring various types of information, such as USB and Ethernet other than
display. Belkin has developed this unique Secure KVM switch with the highest
possible security in mind, assuring no leakage of information between connected
computers through any channels including DP dedicated channels.
This User Manual provides all the details you’ll need to install and operate your
new Switch, in addition to expert troubleshooting advice— in the unlikely event of
a problem.
Please note: Belkin Secure KVMs cannot be upgraded, serviced or fixed.
Package Contents
• Belkin Advanced Secure DisplayPort/HDMI KVM
• AC power cord with WW interchangeable mains connectors
• QIG (Quick Installation Guide)
Important: This product is equipped with an always-on active anti-tamper system.
Any attempt to open the enclosure may activate the anti-tamper system and render
the unit permanently inoperable. If the unit’s enclosure appears disrupted or if
all the port LEDs flash continuously, please call Belkin Technical Support toll-free
at [phone].
Revision
A – Initial Release, September 2022
Reporting Belkin Product Security Vulnerability
If you are aware of potential security vulnerability while installing or operating
this product, we encourage you to contact us immediately at the following email
address: gov[email protected]
BACK TO TABLE OF CONTENTS >BACK TO TABLE OF CONTENTS >

2
Belkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM SwitchBelkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM Switch
INTRODUCTION
SECTIONS
Table of Contents 2 3 4 5 6 71
INTRODUCTION
Safety Precautions
Please read the following safety precautions carefully before using the product:
• Before cleaning, disconnect the product from any electrical power supply.
• Do not expose the product to excessive humidity or moisture.
• Do not store or use for extensive period of time in extreme thermal conditions –
it may shorten product lifetime.
• Install the product only on a clean secure surface.
• If the product is not used for a long period of time, disconnect it from electrical
power.
• If any of the following situations occurs, have the product checked by a
qualified service technician:
– Liquid penetrates the product’s case.
– The product is exposed to excessive moisture, water or any other liquid.
– The product is not working well even after carefully following the
instructions in this user’s manual.
– The product has been dropped or is physically damaged.
– The product shows obvious signs of breakage or loose internal parts.
– In case of external power supply – If power supply overheats, is broken or
damaged, or has a damaged cable.
• The product should be stored and used only in temperature and humidity-
controlled environments as defined in the product’s environmental specifications.
• Never attempt to open the product enclosure. Any attempt to open the
enclosure will permanently damage the product.
• The product contains a non-replaceable internal battery. Never attempt to
replace the battery or open the enclosure.
• This product is equipped with an always-on active anti-tampering system.
Any attempt to open the product enclosure will activate the anti-tamper
triggers and render the unit inoperable and warranty void.
1
BACK TO TABLE OF CONTENTS >BACK TO TABLE OF CONTENTS >

3
INTRODUCTION
Belkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM Switch
SECTIONS
Table of Contents 2 3 4 5 6 71
INTRODUCTION
User Guidance & Precautions
Please read the following User Guidance & Precautions carefully before using
the product:
1. By default, after product power-up, the active channel is #1.
2. The appropriate usage of peripherals (e.g., keyboard, mouse, display, authentication
device) is described in detail in this User Manual’s appropriate sections. Do not
connect any authentication device with an external power source to product.
3. For security reasons products do not support wireless keyboards and mice. In any
case do not connect wireless keyboard/mouse to product.
4. For security reasons products do not support microphone/line-in audio input. In any
case do not connect a microphone to product audio output port, including headsets.
5. Product is equipped with an always-on active anti-tampering system. Any attempt
to open product enclosure will activate the anti-tamper system indicated by all
channel-select LEDs flashing continuously. In this case, product will be inoperable
and warranty void. If product enclosure appears disrupted or if all channel- select
LEDs flash continuously, please remove product from service immediately and
contact technical support.
6. Connecting external USB devices to product CAC port (if equipped):
a. When connecting a USB device that is not qualified or rejected for
security reasons to product’s CAC port, the CAC LED will flash green and
USB device will be inoperable.
b. When connecting a USB device that is undetectable for any reason (e.g. failed
device, non-standard device etc.) to product’s CAC port, the CAC LED will not
illuminate at all and device will be inoperable.
7. Do not connect product to computing devices:
a. That include telecommunication equipment;
b. That include frame grabber video cards;
c. That include special audio processing cards.
8. Product has a remote control port in the back panel labeled “Remote”
9. Important! Before re-allocating computers to channels, it is mandatory to
power cycle product, keeping it powered OFF for more than 1 minute
.
10. Product log access and administrator configuration options are described in
product Administrator Guide
.
11. If you are aware of any potential security vulnerability while installing or operating
product, please remove product from service immediately and contact us in one of
the ways listed in this manual.
1
BACK TO TABLE OF CONTENTS >BACK TO TABLE OF CONTENTS >

4
OVERVIEW
Belkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM Switch
SECTIONS
Table of Contents 23 4 5 6 71
OVERVIEW
Security Features
The product is designed, manufactured and delivered in security-controlled environments.
Below is a summary of the main advanced features incorporated in product:
Advanced isolation between computers and shared peripherals
The emulations of keyboard, mouse and display EDID, prevent direct contact
between computers and shared peripherals. Product design achieves maximal
security by keeping the video path separate with keyboard and mouse switched
together, purging the keyboard buffer when switching channels. All these features
contribute to strong isolation between computer interfaces, maintained even when
product is powered off.
Unidirectional data flow: USB, audio and video
Unique hardware architecture components prevent unauthorized data flow, including:
• Optical unidirectional data flow diodes in the USB data path that filtrate and
reject unqualified USB devices;
• Secure analog audio diodes that prevent audio eavesdropping with no
support for microphone or any other audio-input device;
• Video path is kept separate from all other traffic, enforcing unidirectional
native video flow. EDID emulation is done at power up and blocks all EDID/
MCCS writes. For DisplayPort video, filtration of AUX channel exists to reject
unauthorized transactions.
Isolation of power domains
Complete isolation of power domains prevents signaling attacks.
Secure administrator access & log functions
The product incorporates secure administrator access and log functions to provide
auditable trail for all product security events, including battery backup life for anti-
tampering and log functions. Non-reprogrammable firmware prevents the ability to
tamper with product logic. Configuration of front panel LEDs and CAC (if equipped)
are covered in the PP4.0 Admin manual.
Always-on, active anti-tamper system
Active anti-tampering system prevents malicious insertion of hardware implant such
as wireless key-logger inside product enclosure. Any anti-tampering attempt causes
isolation of all computers and peripheral devices rendering product inoperable and
showing clear indications of a tampering event to the user.
Holographic security tamper-evident labels are placed on the enclosure to provide a
clear visual indication if product has been opened or compromised.
Metal enclosure is designed to resist mechanical tampering with all microcontrollers
protected against firmware-read, modification and rewrite.
1
BACK TO TABLE OF CONTENTS >BACK TO TABLE OF CONTENTS >

5
Belkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM SwitchBelkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM Switch
OVERVIEW
SECTIONS
Table of Contents 23 4 5 6 71
OVERVIEW
Tamper Evident Labels
Belkin Secure Switch uses holographic tamper evident labels to
provide visual indications in case of enclosure intrusion attempt.
If for any reason the tamper evident seal is missing, appears
disrupted, or looks different than the example shown here, please
avoid using the product and call Belkin Technical Support at:
[phone].
Active Anti-Tampering System
Belkin Secure Switch is equipped with an always-on active
anti-tampering system. If mechanical intrusion is detected
by this system, the Switch will be permanently disabled and
LED will blink continuously.
If product indication tampered state (all LEDs blinking) - please call Technical
Support and avoid using that product
Product Enclosure Warning Label
Belkin Secure Switch has the following warning printed
next to the location of the product Asset Tag and
Tamper Evident labels on product enclosure:
12345678
BACK TO TABLE OF CONTENTS >BACK TO TABLE OF CONTENTS >

6
Belkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM SwitchBelkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM Switch
OVERVIEW
SECTIONS
Table of Contents 23 4 5 6 71
OVERVIEW
Other Features
The Belkin Universal Secure DisplayPort/HDMI KVM was designed with the user in
mind for today’s IT environment. Below is a summary of some features incorporated
into the Switch.
Protected Display Information
Protected DDC/EDID emulation prevents software weaknesses that can cause data
leakage while maintaining compatibility with the console display.
USB Device Detection
Storage and other unsafe USB devices are rejected when connected to the Switch.
Only mouse, keyboard, and CAC reader data are passed through.
Secure Packaging
“Tear away” packaging ensures secure delivery of the Switch as it is routed to the end
user. The recyclable packaging also breaks down flat, simplifying the cleanup process.
USB Support
The Switch is compatible with USB technology and supports plug-and-play
connectivity with USB computers, keyboards, mice, and CAC readers.
User Display
The Belkin Universal Secure DisplayPort/HDMI KVM is compatible with the
following types of user displays:
• DisplayPort 1.2 or HDMI 2.0 capable display (console connection).
• DisplayPort 1.2 or HDMI 2.0 capable display (console connection).
• DVI capable displays with cables passive connection cables (see Belkin.com
for details).
Audio Switching
Allows you to share speakers between computers.
BACK TO TABLE OF CONTENTS >BACK TO TABLE OF CONTENTS >

7
Belkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM SwitchBelkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM Switch
OVERVIEW
SECTIONS
Table of Contents 23 4 5 6 71
OVERVIEW
Port Coloring
The front panel LEDs can be configured by an administrator to maximize
identification of multiple enclaves. Consult the PP4.0 Admin manual for details.
Port Naming
The included network-name labels can be placed in the area underneath the port-
selector button to facilitate port identification and reduce user switching error.
LED Indicators
Each port button number and port button outline illuminates to indicate that the
console currently controls the corresponding computer. As a port selector is pushed,
the LED number and button outline will light up.
Integrated Mounting Rails
Integrated mounting system for easy under-desk or side-wall mounting.
USB Connectors
High-retention USB connectors keep the USB connections secure and tight,
preventing accidental disconnections.
Increased Reliability
Using a new, advanced anti-tampering battery with an extremely low self-
discharge rate the life expectancy of the switch has been increased dramatically
to over 7 years.
BACK TO TABLE OF CONTENTS >BACK TO TABLE OF CONTENTS >

8
Belkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM SwitchBelkin®Universal 2nd Gen Secure DP/HDMI to DP/HDMI KVM Switch
OVERVIEW
SECTIONS
Table of Contents 23 4 5 6 71
OVERVIEW
Equipment Requirements
Cables
The Universal SKVM can accommodate DP, HDMI, and DVI PC connections. Belkin
highly recommends you use Belkin DisplayPort, HDMI, or DVI passive conversion/USB
KVM Cable Kits for your Switch to help ensure superior performance. These cables
offer the highest quality possible to ensure optimal data and video transmission.
One Cable Kit is required per connected computer.
Note: The video connectors can accept a Display Port or HDMI cable. Proper
insertion of an HDMI cable should be followed, as the connector can be damaged
by improper insertion.
Belkin currently available cables:
http://www.belkin.com/us/products/business/cybersecurity-secure-kvm/c/
cables-and-secure-accessories
Note: Due to USB and DisplayPort signal limitations, the cable total length cannot
exceed 10 feet (3.5m), unless a USB extender is used
BACK TO TABLE OF CONTENTS >BACK TO TABLE OF CONTENTS >