BLACKBOX KVS4-8001DX Advanced 1-Port Secure Kvm Isolator User Guide

ADVANCED 1-PORT
SECURE KVM ISOLATOR
USER GUIDE
USM-2S0-MM1
REV: 2.0B
DATE: 10/25/2021

KVS4-8001DX Advanced 1-Port Secure Kvm Isolator

MODELS:

• KVS4-8001DX 1-Port SH Secure DVI-I KVM w/audio and CAC
• KVS4-8001HX 1-Port SH Secure HDMI KVM w/audio and CAC
• KVS4-8001VX 1-Port SH Secure DP KVM w/audio and CAC

TECHNICAL SPECIFICATIONS

VIDEO

Format| DisplayPort, HDMI, DVI-I Dual Link

Host Interface

| KVS4-8001DX| (1) DVI-I 23-pin (female)
KVS4-8001HX| (1) HDMI 19-pin (female)
KVS4-8001VX| (1) DisplayPort 20-pin (female)

User Console Interface

| KVS4-8001DX| (1) DVI-I 23-pin (female)
KVS4-8001HX| (1) HDMI 19-pin (female)
KVS4-8001VX| (1) DisplayPort 20-pin (female)
Max Resolution| 3840×2160 @ 30Hz
DDC| 5 volts p-p (TTL)
Input Equalization| Automatic
Input Cable Length| Up to 20 ft.
Output Cable Length| Up to 20 ft.

USB

Signal Type| USB 1.1 and 1.0 Keyboard and Mouse only. USB 2.0 for CAC connection (Only in models with CAC)
Type B| (2) USB Type B

User Console Interface

| (2) USB Type-A for keyboard and mouse connection only
(1) USB Type-A for CAC connection (only in models with CAC)

AUDIO

Input| (1) Connector Stereo 3.5mm Female
Output| (1) Connector Stereo 3.5mm Female

POWER

Power Requirements| 12V DC, 3A (minimum) power adapter with center-pin positive polarity.

ENVIRONMENT

Operating Temp| 32° to 104° F (0° to 40° C)
Storage Temp| -4° to 140° F (-20° to 60° C)
Humidity| 0-80% RH, non-condensing

CERTIFICATIONS

Security Accreditation| Common Criteria Validated To NIAP, Protection Profile PSS Ver. 4.0

OTHER

Emulation| Keyboard, Mouse and Video
Control| Front Panel Buttons

WHAT’S IN THE BOX?

SECURITY FEATURES

ANTI-TAMPER SWITCHES
Each model is equipped with internal Anti-Tamper switches, which sense attempts to open the device enclosure. Once the system identifies such an attempt, all the front panel LED’s will flash rapidly and the unit will become useless by shutting off connection with all attached PCs and peripherals disabling any functionality.
TAMPER-EVIDENT SEAL
The enclosure of the unit is protected with a tamper-evident seal to provide a visual evidence if the unit has been opened.
PROTECTED FIRMWARE
The controller of the unit has a special protection feature that prevents reprogramming or reading the firmware.
HIGH ISOLATION ON USB CHANNELS
Opto-isolators are used in the unit to keep USB data paths electrically isolated from each other, providing high isolation and preventing data leakage between ports.
SECURE EDID EMULATION
The unit prevents unwanted and unsecure data to be transmitted through the DDC lines by means of secure EDID learning and emulation.
SELF-TEST
A self-test is performed each times the KVM is powered on as part of its boot- up sequence. If the KVM starts up correctly and is functional, the self-test has passed. However, if all LED’s are on and not flashing, the power up self- test has failed and all functions are disabled. Check if the button is jammed. In this case, release the jammed button and recycle the power.

INSTALLATION

SYSTEM REQUIREMENTS

1. Black Box Secure PSS is compatible with standard personal/portable computers, servers or thin-clients, running operating systems such as Windows or Linux.
2. The peripheral devices that are supported by the Secure KVM Isolator are listed in the following table:

Console Port

|

Authorized Devices

---|---
Keyboard| Wired keyboard and keypad without internal USB hub or composite device functions, unless the connected device has at least one endpoint which is a keyboard or mouse HID class.
Display| Display device (e.g. monitor, projector) that uses an interface that is physically and logically compatible with the product ports (DisplayPort, HDMI or DVI-I, depends on model).
Audio out| Analog amplified speakers, Analog headphones.
Mouse / Pointing Device| Any wired mouse or trackball without internal USB hub or composite device functions.
User Authentication Device| USB devices identified as user authentication (base class 0Bh, e.g. Smart-card reader, PIV/ CAC reader, Token, or Biometric reader)

Table 5-1
KVS4-8001DX:

1. Ensure that power is turned off or disconnected from the unit and the computers.
2. Use a DVI cable to connect the DVI output port from the computer to the corresponding DVI-I IN port of the unit.
3. Use a USB cable (Type-A to Type-B) to connect a USB port on the computer to the respective USB port of the unit.
4. Optionally connect a stereo audio cable (3.5mm to 3.5mm) to connect the audio output of the computer to the AUDIO IN ports of the unit.
5. Connect a monitor to the DVI-I OUT console port of the unit using a DVI cable.
6. Connect a USB keyboard and mouse to the two USB console ports.
7. Optionally connect stereo speakers to the AUDIO OUT port of the unit.
8. Optionally connect CAC (COMMON ACCESS CARD, SMART CARD READER) to the CAC port in the user console interface.
9. Finally, power on the Secure KVM Isolator by connecting a 12VDC power supply to the power connector, and then turn on the computer.

Note: You can connect up to 1 computer to the 1 port Secure KVM Isolator. IMPORTANT WARNINGS – FOR SECURITY REASONS:

• This product does not support wireless devices. Do not attempt to use a wireless keyboard or a wireless mouse with this product.
• This product does not support keyboards with integrated USB hubs or USB ports. Only use standard (HID) USB keyboards with this device.
• This product does not support microphone audio input or line input. Do not connect any microphones or headsets with microphones to this device.
• Connection of authentication devices (CAC) with external power sources is prohibited.

KVS4-8001HX:

1. Ensure that power is turned off or disconnected from the unit and the computers.
2. Use a HDMI cable to connect the HDMI output port from the computer to the corresponding HDMI IN port of the unit.
3. Use a USB cable (Type-A to Type-B) to connect a USB port on the computer to the respective USB port of the unit.
4. Optionally connect a stereo audio cable (3.5mm to 3.5mm) to connect the audio output of the computer to the AUDIO IN ports of the unit.
5. Connect a monitor to the HDMI OUT console port of the unit using a HDMI cable.
6. Connect a USB keyboard and mouse to the two USB console ports.
7. Optionally connect stereo speakers to the AUDIO OUT port of the unit.
8. Optionally connect CAC (COMMON ACCESS CARD, SMART CARD READER) to the CAC port in the user console interface.
9. Finally, power on the Secure KVM Isolator by connecting a 12VDC power supply to the power connector, and then turn on the computer.

Note: You can connect up to 1 computer to the 1 port Secure KVM Isolator. KVS4-8001VX:

1. Ensure that power is turned off or disconnected from the unit and the computers.
2. Use a DisplayPort cable to connect the DisplayPort output port from the computer to the corresponding DP IN port of the unit.
3. Use a USB cable (Type-A to Type-B) to connect a USB port on the computer to the respective USB port of the unit.
4. Optionally connect a stereo audio cable (3.5mm to 3.5mm) to connect the audio output of the computer to the AUDIO IN ports of the unit.
5. Connect a monitor to the DP OUT console port of the unit using a DP cable.
6. Connect a USB keyboard and mouse to the two USB console ports.
7. Optionally connect stereo speakers to the AUDIO OUT port of the unit.
8. Optionally connect CAC (COMMON ACCESS CARD, SMART CARD READER) to the CAC port in the user console interface.
9. Finally, power on the Secure KVM Isolator by connecting a 12VDC power supply to the power connector, and then turn on the computer.

Note: You can connect up to 1 computer to the 1 port Secure KVM Isolator.
EDID Learn:
Factory default video EDID is set to HP (1080P max resolution) to allow initial operation with most of the DP display brands. For security reasons, EDID learn of most DP displays’ brands can be achieved only by Authenticated Administrator.
Use the following steps to properly set up your EDID learning:

1. Ensure power is disconnected or turned off from both the unit and the computer.
2. Using a USB cable (Type-A to Type-B), connect the PC to the Secure KVM Isolator host’s K/M.
3. Connect a USB keyboard & mouse to the two USB console ports.
4. Connect a video cable betwen the PC and the Secure KVM Isolator host’s video.
5. Connect a display to the Secure KVM Isolator console’s output port.
6. Power up the PC and the Secure KVM Isolator.
7. Download the Administration and Security Management Tool to your PC from this link: https://www.blackbox.com/NIAP4/documentation.
8. Run the Administration and Security Management Tool executable file.

Initiate the session using the following steps in the Administration and Security Management Tool:

1. Type “alt alt c n f g” on your keyboard.
2. The mouse connected to the Secure KVM Isolator will stop functioning and you will be prompted to “Enter credential id”.
3. Login in as the administrator by entering the default username “admin”, and pressing Enter.
4. Enter the default password “1 2 3 4 5” and press Enter.
5. Seven options will appear in a numerical menu: select option 6 and press Enter.
6. A menu will appear prompting you to Select Mode; instead, type “local” and press Enter.

The Administration and Security Management Tool will now automatically learn and store the display’s EDID, then the device will reset and reboot. At the end of the boot-up, ensure all computers are con-nected to the Secure KVM Isolator through each port to verify that all are properly presenting video on the connected display.
For additional assistance or information, please refer to the Black Box Secure KVM Isolator EDID Configuration Guide available at ftp://ftp.blackbox.com/Secure%20KVM%20Switches/.

CAC (COMMON ACCESS CARD, SMART CARD READER) INSTALLATION

INSTALLATION
The following steps are intended for the system administrator or IT manager only.
CAC connection to the computer requires a USB cable connection separate from the keyboard and mouse. This allows the CAC to be connected independently from the keyboard and mouse.

1. Ensure that power is turned off or disconnected from the unit and the computer.
2. Use a USB cable (Type-A to Type-B) to connect a USB port on the computer to its respective CAC USB port on the Secure KVM Isolator. Do not connect the USB cable if CAC functionality is not needed for that computer.
3. Connect a CAC (smart card reader) to the CAC port in the user console interface.
4. Power on the Secure KVM Isolator by connecting a 12VDC power supply to the power connector, and then turn on all the computers.

Note: The open session will be immediately terminated upon the removal of the registered CAC device.

CAC PORT CONFIGURATION

The following steps are intended for the system administrator and operators (users).
CAC port Configuration is an optional feature, allowing registration of any USB peripheral to operate with the Secure KVM Isolator. Only one peripheral can be registered and only the registered peripheral will operate with the Secure KVM Isolator. By default, when no peripheral is registered, the Secure KVM Isolator will operate with any Smart Card Reader. Configure the CAC Port via User Menu Options.
Configure the CAC Port via User Menu Options

1. Open the Administration and Security Management Program.
2. Using the keyboard, press the Alt key twice and type “cnfg”.
3. At this stage the mouse connected to the Secure KVM Isolator will stop functioning.
4. Enter the default username “user” and press Enter.
5. Enter the default password “12345” and press Enter.
6. Select option 2 from the menu on your screen and press Enter.
7. Connect the peripheral device to be registered to the CAC USB port in the console side of the Secure KVM Isolator and wait until the Secure KVM Isolator is reading the new peripheral information.
8. The Secure KVM Isolator will list the information of the connected peripheral on the screen and buzz 3 times when registration is completed.
   

AUDITING: Dumping the Event Log via User Menu Options

The following steps are intended for the system administrator.
The Event Log is a detailed report of critical activities stored in the Secure KVM Isolator memory. A comprehensive feature list and guidance for Administration and Security Management Tools can be found in the Administrator’s Guide available for download from: https://www.blackbox.com/NIAP4/documentation.

1. Open the Administration and Security Management Program.
2. Using the keyboard, press the Alt key twice and type “cnfg”.
3. Enter the default admin name “admin” and press Enter.
4. Enter the default password “12345” and press Enter.
5. Request a Log Dump by selecting option 5 in the menu. (Shown in Figure 12-1)
   

• See Administration and Security Management Tool Guidance for detailed information.

RESET: Restore Factory Defaults

The following steps are intended for the system administrator.
Note: Only one computer connected to port 1 is required for this operation.
Restore Factory Defaults will reset all settings on the Secure KVM Isolator to their original state ….
Secure KVM Isolator mode.
CAC port registration will be removed.
Secure KVM Isolator settings will be reset to factory defaults.
To Restore Factory Defaults via User Menu Options:

1. Open the Administration and Security Management Program.
2. Using the keyboard, press the Alt key twice and type “cnfg”.
3. Enter the default admin name “admin” and press Enter.
4. Enter the default password “12345” and press Enter.
5. Select option 7 from the menu on your screen and press enter. (Menu shown in Figure 12-1)

• See Administration and Security Management Tool Guidance for detailed information.

LED’s BEHAVIOR

User Console Interface – Display LED:

#| Status|

Description

---|---|---
1| Off| Monitor is not connected
2| On| Monitor is connected
3| Flashing| EDID problem – Learn EDID to fix the problem

User Console Interface – CAC LED:

#| Status|

Description

---|---|---
1| Off| CAC is not connected
2| On| Authorized and functional CAC is connected
3| Flashing| Non-CAC peripheral is connected

Front Panel – ST LED:

#

| Status|

Description

---|---|---
1| All Flashing| Connected peripheral to keyboard or mouse console ports is rejected

IMPORTANT!
If all the Front Panel LED’s are flashing and the buzzer is beeping, the Secure KVM Isolator has been TAMPERED with and all functions are permanently disabled. Please contact Black Box technical support at info@blackbox.com
If all LED’s are on and not flashing, the POWER UP SELF TEST has failed and all functions are disabled. Check if the button is jammed. In this case, release the jammed button and recycle the power. If power up self test is still failing, please contact Black Box technical support at info@blackbox.com
EDID Learn – Front Panel LED’s:
All LED’s are turned on for 1 second. Then:

• Video LED will flash until the end of the process.

SYSTEM OPERATION

Front Panel Control
No controls are required beyond ensuring the product is powered on and all peripheral/computer ports are connected.

TROUBLESHOOTING

No Power

• Make sure that the power adapter is securely connected to the power connector of the unit.
• Check the output voltage of the power supply and make sure that the voltage value is around 12VDC.
• Replace the power supply.

Flashing LEDs in the Front Panel with clicking sound

• Reboot the unit. If the error persists then there is a malfunction or wrong input connections at the K/M ports.
• Verify both Keyboard and Mouse connections are USB 1.0 or 1.1.
• Only USB Keyboard or Mouse can be connected in the designated K/M ports.

Flashing USB LED

• Make sure that the correct peripheral device is connected to the correct port of the Secure KVM.
• Check to see that the K/M USB cable is connected to the K/M port on the back of the unit.
• Check to see that the CAC USB cable is connected to the CAC port on the back of the unit.

No Video

• Check if all the video cables are connected properly.
• Connect the computer directly to the monitor to verify that your monitor and computer are functioning properly.
• Restart the computers

Keyboard is not working

• Check if the keyboard is properly connected to the unit.
• Check if the USB cables connecting the unit and the computers are properly connected.
• Try connecting the USB on the computer to a different port.
• Make sure that the keyboard works when directly connected to the computer.
• Replace the keyboard.

Note: The NUM, CAPS, and SCROLL Lock LED indicators on the keyboard are not supposed to light up if connected to the Secure KVM Isolator.
Mouse is not working

• Check if the mouse is properly connected to the unit.
• Try connecting the USB on the computer to a different port.
• Make sure that the mouse works when directly connected to the computer.
• Replace the mouse.

No Audio

• Check if all the audio cables are connected properly.
• Connect the speakers directly to the computer to verify that the speakers and the computer audio are functioning properly.
• Check the audio settings of the computer and verify that the audio output is through the speakers.

No CAC (COMMON ACCESS CARD, SMART CARD READER)

• Check if the USB cables connecting the unit and the computers are properly connected.

TECHNICAL SUPPORT

For product inquiries, warranty questions, or technical questions, please contact info@blackbox.com.
FREE technical support 24 hours a day, 7 days a week: Call 877-877-2269 or fax 724-746-0746.

LIMITED WARRANTY STATEMENT

A. Extent of limited warranty
Black Box warrants to the end-user customers that the product specified above will be free from defects in materials and workmanship for the duration of 18 months, which duration begins on the date of purchase by the customer. Customer is responsible for maintaining proof of date of purchase.
Black Box limited warranty covers only those defects which arise as a result of normal use of the product, and do not apply to any:
a. Improper or inadequate maintenance or modifications
b. Operations outside product specifications
c. Mechanical abuse and exposure to severe conditions
If Black Box receives, during applicable warranty period, a notice of defect, Black Box will at its discretion replace or repair defective product. If Black Box is unable to replace or repair defective product covered by the Black Box warranty within reasonable period of time, Black Box shall refund the cost of the product.
Black Box shall have no obligation to repair, replace or refund unit until customer returns defective product to Black Box.
Any replacement product could be new or like new, provided that it has functionality at least equal to that of the product being replaced.
Black Box limited warranty is valid in any country where the covered product is distributed by Black Box.
B. Limitations of warranty
To the extent allowed by local law, neither Black Box nor its third party suppliers make any other warranty or condition of any kind whether expressed or implied with respect to the Black Box product, and specifically disclaim implied warranties or conditions of merchantability, satisfactory quality, and fitness for a particular purpose.
C. Limitations of liability
To the extent allowed by local law the remedies provided in this warranty statement are the customers sole and exclusive remedies.
To the extent allowed by local law, except for the obligations specifically set forth in this warranty statement, in no event will Black Box or its third party suppliers be liable for direct, indirect, special, incidental, or consequential damages whether based on contract, tort or any other legal theory and whether advised of the possibility of such damages.
D. Local law
To the extent that this warranty statement is inconsistent with local law, this warranty statement shall be considered modified to be consistent with such law.
NOTICE
The information contained in this document is subject to change without notice. Black Box makes no warranty of any kind with regard to this material, including but not limited to, implied warranties of merchantability and fitness for particular purpose. Black Box will not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance or use of this material. No part of this document may be photocopied, reproduced, or translated into another language without prior written consent from Black Box, Inc.

20180411
Black Box Corporation
1000 Park Drive
Lawrence, PA 15055-1018
Phone: 877-877-2269
www.blackbox.com
1.877.877.2269
BLACKBOX.COM

References

• Global IT Products & Network Solutions Provider | Black Box
• NIAP 4 Documentation | Black Box

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>