K304x-K308 Secure KM Switch User Manual Models: K304 - Secure 4-port KM Switch w/audio K304E - Secure 4-port KM Switch w/audio and DPP K308 – Secure 8-port KM Switch w/audio Rev: 2.7 Doc No : HDC06147 K304x-K308 Secure KM Switch User Manual...
Section 1 - Introduction Package Contents Introduction Inside product packaging you will find the following: Thank you for purchasing this HSL Secure KM Switch. This KM HSL Secure KM Switch unit • Switch is designed for use in secure defense and intelligence environments across wide security gaps.
The K304 does not allow computer access to any shared resource and does not share controllable power sources. Holographic Tamper-Evident Labels...
Page 5
Section 2 - Overview Secure Packaging “Tear away” packaging ensures secure delivery of the product as it is routed to the end user. Common Criteria EAL-4 Listing The product is the only KM in the market that is listed by the Common Criteria organization.
Virtual Display Technology (VDT) user’s desktop. Channel names may be programmed into the RDC display to improve usability and security. VDT allows the K304 to switch automatically between computers once mouse cursor crosses display borders. Seamless switching Audio Support between multiple computers with cusrsor movement.
Section 2 - Overview What is Virtual Display Technology (VDT)? Virtual Display Technology (VDT) is implemented in HSL K300 Secure KM switches series to enable seamless cursor and keyboard switching between multiple displays. VDT allows administrators to configure any desired displays configuration with same or different size and resolution.
Section 2 - Overview Equipment Requirements Cables HSL highly recommends you use HSL Cable Kits for your product to help ensure superior security and performance. These cables offer the highest quality possible to ensure optimal data transmission. One Cable Kit is required per connected computer. How to order? To connect: Use:...
Page 9
Section 2 - Overview Computers Standard PS/2 keyboard; and: • Bar-code readers emulating USB keyboard. • The K304x-K308 Secure KM Switches are compatible with computers, thin-clients, servers and laptops running the following OS platforms: USB Mouse console port • Windows® 2000 The K304x-K308 USB mouse console port is compatible with the following types of devices: •...
Page 10
Section 2 - Overview Remote Desktop Controllers Programming Cable In order to use HSL’s external configuration tool it is required to The KM Switch is compatible with the following types of Remote purchase and use HSL’s special USB configuration cable. Desktop Controller device: HSL RDC440 device connected to the switch RDC port.
Section 2 - Overview Safety Precautions Please read the following safety precautions carefully before using the product: The product has obvious signs of breakage or Before cleaning, disconnect the product from DC or loose internal parts. AC power. The product should be stored and used only in Be sure not to expose the product to excessive temperature and humidity controlled environments humidity.
Section 2 - Overview Front Panel Features – K308 1 – Steel enclosure 2 – Channel Select push-buttons and LEDs 3a-3b – Holographic Tamper Evident Labels K304x-K308 Secure KM Switch User Manual...
Page 15
Section 2 - Overview Rear Panel Features – K308 1 – RDC Port – RJ-45 jack 8 – Computer #4 group area 2 – Audio console output 3.5 mm stereo jack 9 – Computer #4 group Keyboard/Mouse USB jack 3a - Holographic Tamper Evident Label 10 - Computer #4 group audio input jack 3.5 mm stereo 4 - USB Mouse jack 11 –...
Section 2 - Overview Tamper Evident Labels Active Anti-Tampering System HSL Secure KM Switch is equipped with always-on active anti- HSL Secure KM Switch uses four holographic tamper evident labels tampering system. If mechanical intrusion is detected by this to provide visual indications in case of enclosure intrusion attempt. system, the Switch will be permanently disabled and LED will blink These labels indicate white dots or the text “VOID”...
Section 2 - Overview Product Specifications Part No. K304 - CGA05516 Maximum total number K304E - CGA05517 of transitions K308 – CGA06410 Console Keyboard Input USB Type-A female connector or Enclosure Steel metal enclosure PS/2 Mini-DIN female connector Power Requirements...
Page 18
Section 2 - Overview User Channel Selection Methods Dimensions K304x Front panel push-buttons 80 (W) x 158 (D) x 34 (H) mm / 3.15 (W) x 6.22 (D) x 1.34 (H) inches Keyboard shortcut keys K308 RDC (Optional) 80 (D) x 470 (W) x 34 (H) mm / Administrator Settings - Display physical size 3.15 (D) x 18.5 (W) x 1.34 (H) inches...
Section 3 - Installation on display and cables quality and must be tested prior to Before Installation fixed installation). The location of the computers in relation to the switch and • Unpacking the Product the length of available KM cables (typically 1.8 m) Before opening the product sealed packaging inspect the seal condition to assure that product was not accessed or tampered Warning: Avoid placing cables near fluorescent lights, air-...
Section 3 - Installation Note: If the number of computers used is less than the number of Installation KM channels (4 / 8) connect the computers in proper order 1, 2 and then 3. Step 1 Connecting the Console devices to the Switch Note: Note: The USB cable must be connected directly to a free USB See figure in page 11 above for connector locations.
Page 21
Section 3 - Installation DPP Installation (Optional, K304E only) Use other devices instead. If the device is detected but does not match DPP qualification specification – device will be rejected as indicated by status LED Notice: The DPP functionality was not certified by Common illuminating steady red.
Page 22
Section 3 - Installation Typical system installation diagram (four single-head computers) K304x-K308 Secure KM Switch User Manual...
Page 23
Section 3 - Installation Typical system installation diagram (four dual-head computers) K304x-K308 Secure KM Switch User Manual...
Page 24
Section 3 - Installation Typical system installation diagram (four quad-head computers) K304x-K308 Secure KM Switch User Manual...
Section 3 - Installation For example: typing Control + Control + F11 + F5 will set the left Administrator Setup display to computer #1 (single-head), second display to computer Now that the Secure KM Switch is connected and powered on it is #2 (single-head), third display to computer connected to port #3 good opportunity to setup some essential operational settings.
Page 26
Section 3 - Installation K304x-K308 Secure KM Switch User Manual...
Page 27
Section 3 - Installation Example 1: To select a configuration with two displays 1 above the other. Please type: CTRL | CTRL | F11 | 2 | 5 The KM will start “blinking” between channels. Reboot device disconnecting power and the device will boot with the new configuration.
Section 3 - Installation Other Settings Key Combination Name Description CTRL | CTRL | F11 | r Reset Factory Device will reset to factory Mouse Speed Setting defaults defaults with all settings and configuration deleted Constant mouse cursor speed is essential for system usability. completely.
Keyboard and audio will follow selected channel. security@highseclabs.com RDC Operation For Remote Desktop Controller operation – refer to the RDC User Manual supplied with the product. Note that when RDC is connected – the Secure KM Switch front panel push-buttons are deactivated.
Section 4 - Operation DPP Operation (Optional, K304E only) Once the device connected to the DPP console port is qualified – Notice: The DPP functionality was not certified by Common the DPP status LED should illuminate steady green. Criteria. Currently, Common Criteria does not offer any guidelines If switch just completed power up it will be switched to channel #1 for DPP peripheral support in the Peripheral Sharing Protection (default computer) and channel select LED #1 will be illuminated.
Page 31
Section 4 - Operation If DPP status LED is not illuminated green – call technical support. The set of rules that applies to the DPP switching are: Once the user presses again the DPP freeze push-button, freeze Note: It is assumed here that connected channel is channel that mode will be deactivated and DPP will switch to same channel as connected to the computer with DPP USB cable and that the KM Switch selected channel #3 in this case.
• (i.e. computer #1 video connected to KVM port #1 while security@highseclabs.com USB cable is connected to KVM port #2). security@highseclabs.com email address is not intended to reach technical support on HSL products or services. Any support...
Page 33
Section 5 - Troubleshooting Problem: Mouse is not working (all channels), keyboard is working. If the computer is coming out of standby mode, allow up to • one minute to regain mouse function. Solutions: Try a different keyboard. • Check that keyboard is not plugged into mouse port (and •...
Page 34
Section 5 - Troubleshooting Problem: DPP is not working (all channels) Solutions: Check that device is properly plugged into the DPP port. • Check that the DPP status LED indicating steady green. If not • illuminated at all the device is not recognized by the switch. Problem: DPP is not working (one channel only) Solutions: Check that device is working properly when connected...
High Sec Labs Warranty Programs High Sec Labs Limited Warranty Terms and Conditions Hardware Service Coverage All HSL hardware comes with a two-year, return-to-depot warranty High Sec Labs warrants that the product you have purchased from High Sec Labs or from an authorized High Sec Labs reseller is free at no extra charge.
Page 36
distributor's or dealer's name from whom you purchased the THIS LIMITED WARRANTY IS IN LIEU OF ALL OTHER WARRANTIES, product, and both the model and serial number of the product. REMEDIES OR CONDITIONS, WHETHER ORAL OR WRITTEN, High Sec Labs will pay the return ground shipping charge within EXPRESSED OR IMPLIED.
Product before it is mailed in for service. High following email address: security@highseclabs.com or fill out a Sec Labs shall not be responsible for items that are not removed.
1. All users who registered their product and provided a valid on the part of High Sec Labs, and High Sec Labs cannot guarantee email address. the accuracy of any information presented after the date of 2. All users who registered for Premium product warranty publication.