iPGARD Advanced 2/4-Port DP/HDMI to DP/HDMI Secure KVM User Manual
- June 2, 2024
- iPGARD
Table of Contents
- iPGARD Advanced 2/4-Port DP/HDMI to DP/HDMI Secure KVM
- TECHNICAL SPECIFICATIONS
- WHAT’S IN THE BOX?
- SECURITY FEATURES
- INSTALLATION
- CAC PORT CONFIGURATION
- RESET: Restore Factory Defaults
- LED’s BEHAVIOR
- | Status| Description
- | Status| Description
- | Status| Description
- | Status| Description
- | Status| Description
- SYSTEM OPERATION
- TROUBLESHOOTING
- TECHNICAL SUPPORT
- LIMITED WARRANTY STATEMENT
- References
- Read User Manual Online (PDF format)
- Download This Manual (PDF format)
Advanced 2/4-Port DP/HDMI to DP/HDMI Secure KVM
User Manual
Advanced 2/4-Port DP/HDMI to DP/HDMI Secure KVM
USER MANUAL
iPGARD Advanced 2/4-Port DP/HDMI to DP/HDMI Secure KVM
SA-HDN-2S | 2-Port Secure Single-Head DP/HDMI to DP/HDMI KVM with Audio |
---|---|
SA-HDN-2S-P | 2-Port Secure Single-Head DP/HDMI to DP/HDMI KVM with Audio and |
CAC Support
SA-HDN-2D| 2-Port Secure Dual-Head DP/HDMI to DP/HDMI KVM with Audio
SA-HDN-2D-P| 2-Port Secure Dual-Head DP/HDMI to DP/HDMI KVM with Audio and CAC
Support
SA-HDN-4S| 4-Port Secure Single-Head DP/HDMI to DP/HDMI KVM with Audio
SA-HDN-4S-P| 4-Port Secure Single-Head DP/HDMI to DP/HDMI KVM with Audio and
CAC Support
SA-HDN-4D| 4-Port Secure Dual-Head DP/HDMI to DP/HDMI KVM with Audio
SA-HDN-4D-P| 4-Port Secure Dual-Head DP/HDMI to DP/HDMI KVM with Audio and CAC
Support
TECHNICAL SPECIFICATIONS
VIDEO
Format| DisplayPort1.2a, HDMI
Host Interface
| SA-HDN-2S / SA-HDN-2S-P| (2) DisplayPort1.2a, (2) HDMI
SA-HDN-2D / SA-HDN-2D-P / SA-HDN-4S / SA-HDN-4S-P| (4) DisplayPort1.2a, (4)
HDMI
SA-HDN-4D / SA-HDN-4D-P| (8) DisplayPort1.2a, (8) HDMI
User Console Interface
| SA-HDN-2S / SA-HDN-2S-P / SA-HDN-4S / SA-HDN-4S-P| (1) DisplayPort1.2a, (1)
HDMI
SA-HDN-2D / SA-HDN-2D-P / SA-HDN-4D / SA-HDN-4D-P| (2) DisplayPort1.2a, (2)
HDMI
Max Resolution| Up to 4K (3840×2160 @60Hz)
DDC| 5 volts p-p (TTL)
Input Equalization| Automatic
Input Cable Length| Up to 20 ft.
Output Cable Length| Up to 20 ft.
USB
Signal Type| USB 1.1 and 1.0 Keyboard and Mouse only. USB 2.0 for CAC
connection.
Host Interface
| SA-HDN-2S / SA-HDN-2D| (2)
SA-HDN-2S-P / SA-HDN-2D-P / SA-HDN-4S / SA-HDN-4D| (4)
SA-HDN-4S-P / SA-HDN-4D-P| (8)
User Console Interface| (2) USB Type-A for keyboard and mouse connection only
(1) USB Type-A for CAC connection (P models only)
AUDIO
Input| (2/4) Connector Stereo 3.5mm Female
Output| (1) Connector Stereo 3.5mm Female
POWER
Power Requirements| 12V DC, 2A (minimum) power adapter with center-pin
positive polarity. Quad head models require a 12V DC 3A (minimum) power
adapter with center-pin positive polarity.
ENVIRONMENT
Operating Temp| 32° to 104° F (0° to 40° C)
Storage Temp| -4° to 140° F (-20° to 60° C)
Humidity| 0-80% RH, non-condensing
CERTIFICATIONS
Security Accreditation| Common Criteria Validated To NIAP, Protection Profile
PSS Ver. 4.0
OTHER
Emulation| USB 1.1 and USB 2.0 Compatible
Control| Front Panel Buttons
WHAT’S IN THE BOX?
SA-HDN Unit | 2/4 Secure DP/HDMI to DP/HDMI KVM Switch |
---|---|
PS12VDC2A or PS12VDC3A | 12V DC, 2A (minimum) power adapter with center-pin |
positive polarity. Quad head models require a 12V DC 3A (minimum) power
adapter with center-pin positive polarity.
User Manual|
SECURITY FEATURES
Anti-Tamper Switches
Each model is equipped with internal Anti-Tamper switches, which sense
attempts to open the device enclosure. Once the system identifies such an
attempt, all the front panel LED’s will flash rapidly and the unit will become
useless by shutting off connection with all attached PCs and peripherals
disabling any functionality.
Tamper-Evident Seal
The enclosure of the unit is protected with a tamper-evident seal to provide a
visual evidence if the unit has been opened.
Protected Firmware
The controller of the unit has a special protection feature that prevents
reprogramming or reading the firmware.
High Isolation on USB Channels
Opto-isolators are used in the unit to keep USB data paths electrically
isolated from each other, providing high isolation and preventing data leakage
between ports.
Secure EDID Emulation
The unit prevents unwanted and unsecure data to be transmitted through the DDC
lines by means of secure EDID learning and emulation.
INSTALLATION
SYSTEM REQUIREMENTS
- iPGARD Secure PSS is compatible with standard personal/portable computers, servers or thin-clients, running operating systems such as Windows or Linux.
- The peripheral devices that are supported by the KVM are listed in the following table:
Console Port | Authorized Devices |
---|
Keyboard
| Wired keyboard and keypad without internal USB hub or composite device
functions, unless the connected device has at least one endpoint which is a
keyboard or mouse HID class, KVM/KM extender;
Audio out| Analog amplified speakers, Analog headphones, Digital audio
appliance.
Mouse/Pointing Device| Any wired mouse or trackball without internal USB hub
or composite device functions, Touch-screen, Multi-touch or digitizer, KVM/KM
extender.
User Authentication Device| Smart-card reader, PIV/CAC reader, Token or
Biometric reader*
*TOE-P and models only
Table 5-1
Single-Head Units:
- Ensure that power is turned off or disconnected from the unit and the computers.
- Use a DP or HDMI cable to connect the DP or HDMI output port from each computer to the corresponding DP/HDMI IN ports of the unit.
- Use a USB cable (Type-A to Type-B) to connect a USB port on each computer to the respective USB ports of the unit.
- Optionally connect a stereo audio cable (3.5mm to 3.5mm) to connect the audio output of the computers to the AUDIO IN ports of the unit.
- Connect a monitor to the DP/HDMI OUT console port of the unit using a DP or HDMI cable.
- Connect a USB keyboard and mouse in the two USB console ports.
- Optionally connect stereo speakers to the AUDIO OUT port of the unit.
- Optionally connect CAC (COMMON ACCESS CARD, SMART CARD READER) to the CAC port in the user console interface. For –P models.
- Finally, power on the KVM by connecting a 12VDC power supply to the power connector, and then turn on all the computers.
Note: The computer connected to port 1 will always be selected by default
after power up.
Note: You can connect up to 2 computers to the 2 port KVM and up to 4
computers to the 4 port KVM.
IMPORTANT WARNINGS – For security reasons:
- This product does not support wireless devices. Do not attempt to use a wireless keyboard or a wireless mouse with this product.
- This product does not support keyboards with integrated USB hubs or USB ports. Only use standard (HID) USB keyboards with this device.
- This product does not support microphone audio input or line input. Do not connect any microphones or headsets with microphones to this device.
- Connection of authentication devices (CAC) with external power sources is prohibited.
EDID Learn:
The KVM is designed to learn the connected monitor’s EDID upon power up. In
the event of connecting a new monitor to the KVM, a power recycle is required.
The KVM will indicate to the user the EDID learn process by flashing the front
panel’s LEDs. Port one green and push button blue LEDs will both begin to
flash for about 10 seconds. When the LEDs stop flashing, the EDID learn
process is done.
If the KVM has more than one video board (such as dual-head and quad-head
models), then the unit will continue to learn the EDIDs of the connected
monitors and indicate the progress of the process by flashing the next port
selection green and push button blue LEDs respectively.
The monitor must be connected to the video output connector located in the
console space at the back of the KVM during the EDID learn process.
If the read EDID from the connected monitor is identical to the current stored
EDID in the KVM then the EDID learn function will be skipped.
- Ensure that power is turned off or disconnected from the unit and the computer.
- Use a USB cable (Type-A to Type-B) to connect a USB port on a computer to its respective CAC USB ports on the KVM. Do not connect the USB cable if CAC functionality is not needed for that computer.
- Connect a CAC (smart card reader) to the CAC port in the user console interface.
- Power on the KVM by connecting a 12VDC power supply to the power connector, and then turn on all the computers.
- To disable CAC for any channel (all CAC ports are enabled as default), use the front panel buttons to switch the KVM to the channel whose CAC mode you wish to change. Once the channel is selected, the button LED for this specific channel should be on (CAC port enabled). Press and hold the button for 3 seconds until the button LED turns off. The CAC port is now disabled for this channel.
- To enable CAC for any channel, use the front panel buttons to switch the KVM to the channel whose CAC mode you wish to change. Once the channel is selected, the button LED for this specific channel should be off (CAC port disabled). Press and hold the button for 3 seconds until the button LED turns on. The CAC port is now enabled for this channel.
CAC PORT CONFIGURATION
The following steps are intended for the system administrator and operators
(users).
Note: Only one computer connected to port 1 is required for this
operation
CAC port Configuration is an optional feature, allowing registration of any USB peripheral to operate with the KVM. Only one peripheral can be registered and only the registered peripheral will operate with the KVM. By default, when no peripheral is registered, the KVM will operate with any Smart Card Reader.
Configure the CAC Port via User Menu Options
- Open the Administration and Security Management Program.
- Using the keyboard, press the Alt key twice and type “cnfg”.
- At this stage the mouse connected to the KVM/KM will stop functioning.
- Enter the default username “user” and press Enter.
- Enter the default password “12345” and press Enter.
- Select option 2 from the menu on your screen and press Enter.
- Connect the peripheral device to be registered to the CAC USB port in the console side of the KVM/KM and wait until the KVM/KM is reading the new peripheral information.
- The KVM/KM will list the information of the connected peripheral on the screen and buzz 3 times when registration is completed.
AUDITING: Dumping the Event Log via User Menu Options
The following steps are intended for the system administrator.
Note: Only one computer connected to port 1 is required for this operation The
Event Log is a detailed report of critical activities stored in the KVM
memory. A comprehensive feature list and guidance for Administration and
Security Management Tools can be found in the Administrator’s Guide available
for download from: http://ipgard.com/documentation/
To view or dump the Event Log:
- Open the Administration and Security Management Program
- Using the keyboard, press the Alt key twice and type “cnfg”.
- Enter the default admin name “admin” and press Enter.
- Enter the default password “12345” and press Enter.
- Request a Log Dump by selecting option 5 in the menu. (Shown in Figure 12-1)
- See Administration and Security Management Tool Guidance for detailed information.
RESET: Restore Factory Defaults
The following steps are intended for the system administrator.
Note: Only one computer connected to port 1 is required for this
operation Restore Factory Defaults will reset all settings on the KVM to their
original state CAC port registration will be removed KVM settings will be
reset to factory defaults
To Restore Factory Defaults via User Menu Options:
- Open the Administration and Security Management Program
- Using the keyboard, press the Alt key twice and type “cnfg”
- Enter the default admin name “admin” and press Enter.
- Enter the default password “12345” and press Enter.
- Select option 7 from the menu on your screen and press enter. (Menu shown in Figure 12-1)
- See Administration and Security Management Tool Guidance for detailed information.
LED’s BEHAVIOR
User Console Interface – Display LED:
| Status| Description
---|---|---
1| Off| Monitor is not connected
2| On| Monitor is connected
3| Flashing| EDID problem – Learn EDID to fix the problem
User Console Interface – CAC LED:
| Status| Description
---|---|---
1| Off| CAC is not connected
2| On| Authorized and functional CAC is connected
3| Flashing| Non-CAC peripheral is connected
Front Panel – Port Selection LED’s:
| Status| Description
---|---|---
1| Off| Non-selected port
2| On| Selected port
3| Flashing| EDID learn in process
Front Panel – CAC Selection LED’s:
| Status| Description
---|---|---
1| Off| CAC port is disabled or non-selected port
2| On| CAC port is enabled
3| Flashing| EDID learn in process
Front Panel – Port and CAC Selection LED’s:
| Status| Description
---|---|---
1| All Flashing| Connected peripheral to keyboard or mouse console ports is
rejected
EDID Learn – Front Panel LED’s:
All LED’s are turned on for 1 second. Then:
- Port 1 LED’s will flash until the end of the process.
- Port 2 LED’s will flash until the end of the process if a second video board exists (Dual-head KVM)
- Port 3 LED’s will flash until the end of the process if a third video board exists (Quad-head KVM)
- Port 4 LED’s will flash until the end of the process if a fourth video board exists (Quad-head KVM)
IMPORTANT!
If all the Front Panel LED’s are flashing and the buzzer is beeping, the KVM
has been
TAMPERED with and all functions are permanently disabled. Please contact
iPGARD technical support at support@iPGARD.com.
If all Front Panel LED’s are on and not flashing, the POWER UP SELF TEST has
failed and all functions are disabled. Check if any of the front panel port
selection buttons
are jammed. In this case, release the jammed button and recycle the power. If
power up self test is still failing, please contact iPGARD technical support
at support@iPGARD.com.
SYSTEM OPERATION
Front Panel Control
To switch to an input port, simply push the desired input button on the front-
panel of the KVM. If an input port is selected, the LED of that port will turn
on.
TROUBLESHOOTING
No Power
- Make sure that the power adapter is securely connected to the power connector of the unit.
- Check the output voltage of the power supply and make sure that the voltage value is around 12VDC.
- Replace the power supply.
No Video
- Check if all the video cables are connected properly.
- Connect the computer directly to the monitor to verify that your monitor and computer are functioning properly.
- Restart the computers.
Keyboard is not working
- Check if the keyboard is properly connected to the unit.
- Check if the USB cables connecting the unit and the computers are properly connected.
- Try connecting the USB on the computer to a different port.
- Make sure that the keyboard works when directly connected to the computer.
- Replace the keyboard.
Note: The NUM, CAPS, and SCROLL Lock LED indicators on the keyboard are not supposed to light up if connected to the KVM.
Mouse is not working
- Check if the mouse is properly connected to the unit.
- Try connecting the USB on the computer to a different port.
- Make sure that the mouse works when directly connected to the computer.
- Replace the mouse.
No Audio
- Check if all the audio cables are connected properly.
- Connect the speakers directly to the computer to verify that the speakers and the computer audio are functioning properly.
- Check the audio settings of the computer and verify that the audio output is through the speakers.
No CAC (COMMON ACCESS CARD, SMART CARD READER)
- Check if the USB cables connecting the unit and the computers are properly connected.
- Make sure the CAC port is enabled.
TECHNICAL SUPPORT
For product inquiries, warranty questions, or technical questions, please contact info@iPGARD.com.
LIMITED WARRANTY STATEMENT
A. Extent of limited warranty
iPGARD, Inc. warrants to the end-user customers that the iPGARD product
specified above will be free from defects in materials and workmanship for the
duration of 1 year, which duration begins on the date of purchase by the
customer. Customer is responsible for maintaining proof of date of purchase.
iPGARD limited warranty covers only those defects which arise as a result of
normal use of the product, and do not apply to any:
a. Improper or inadequate maintenance or modifications
b. Operations outside product specifications
c. Mechanical abuse and exposure to severe conditions
If iPGARD receives, during applicable warranty period, a notice of defect,
iPGARD will at its discretion replace or repair defective product. If iPGARD
is unable to replace or repair defective product covered by the iPGARD
warranty within reasonable period of time, iPGARD shall refund the cost of the
product.
iPGARD shall have no obligation to repair, replace or refund unit until
customer returns defective product to iPGARD.
Any replacement product could be new or like new, provided that it has
functionality at least equal to that of the product being replaced.
iPGARD limited warranty is valid in any country where the covered product is
distributed by iPGARD.
B. Limitations of warranty
To the extent allowed by local law, neither iPGARD nor its third party
suppliers make any other warranty or condition of any kind whether expressed
or implied with respect to the iPGARD product, and specifically disclaim
implied warranties or conditions of merchantability, satisfactory quality, and
fitness for a particular purpose.
C. Limitations of liability
To the extent allowed by local law the remedies provided in this warranty
statement are the customers sole and exclusive remedies.
To the extent allowed by local law, except for the obligations specifically
set forth in this warranty statement, in no event will iPGARD or its third
party suppliers be liable for direct, indirect, special, incidental, or
consequential damages whether based on contract, tort or any other legal
theory and whether advised of the possibility of such damages.
D. Local law
To the extent that this warranty statement is inconsistent with local law,
this warranty statement shall be considered modified to be consistent with
such law.
NOTICE
The information contained in this document is subject to change without
notice. iPGARD makes no warranty of any kind with regard to this material,
including but not limited to, implied warranties of merchantability and
fitness for particular purpose. iPGARD will not be liable for errors contained
herein or for incidental or consequential damages in connection with the
furnishing, performance or use of this material. No part of this document may
be photocopied, reproduced, or translated into another language without prior
written consent from iPGARD, Inc.
Toll Free: 888-994-7427
Phone: 702-800-0005
Fax: 702-441-5590
2455 W Cheyenne Ave, Suite 112
Las Vegas, NV 89032
iPGARD.COM