• The Black Box Store
  • Welcome
  • Talk to an Expert
    Close
    Get answers
    from an Expert any way you want.

    Helping our customers find exactly what they need is what makes Black Box different.

    Reach us any way you want.



    We'll call you

    A technical expert will call you in 30 seconds. It's live and it's free.



    () 

    (U.S. and Canada Only)

    Reach us by telephone
    724.746.5500
    Answered in 30 seconds or less!


    Send us a Fax
    800.321.0746
    Answered in 15 minutes or less!


    Send an e-mail
    Shoot us an email and we will answer in 60 minutes or less!


  • Account
  • View Cart

Search Tips...

Keyword Search
Our search engine uses any or all keywords typed in the text box to give you product search results.
For instance, typing in kvm will give you a broader set of results than kvm switch cables.

Note, however, that keywords in quotes are treated as a single phrase and will not be evaluated individually.

Booleans (AND, +, OR, NOT, -) are not supported.

Also, some keywords will not return results, and may automatically correct to a similar keyword.

Part Number Search Selection
Select this Search in the drop down box to search by part number instead of keywords.

Wild Card Search
The * character is only supported in a limited capacity. Using whole words is the best approach whenever possible.

"New Search" Radio Button
Search the entire section that you are currently in.

"Search Within Results" Radio Button
Enter keywords or a part number to limit your results within the previously searched results.


Other features

A list of all matching product categories or resources will appear in the upper left corner of the results page, when applicable, to help you further narrow your results, if you desire.

Use the "sort by" drop-down menu on the results page to sort by "most popular" and price (low to high or high to low)
in the store section.


Need technical advice? Call 1-877-877-2269 for an expert in less than 30 seconds.

KVM > Secure

click photo to enlarge

SW2009A-USB-EAL

Photo may show similar product

Other views

  • SW2009A-USB-EAL
  • SW2009A-USB-EAL

ServSwitch Secure KVM Switch with USB, EAL4+ Certified/TEMPEST Level I (Level A) Qualified, VGA, 2-Port with Card Reader Support   

Combat security threats with this hard-wired KVM VGA switch with CAC support.

SW2009A-USB-EAL

Extended Double Diamond™ Warranty Available
(Three years for two)

Product Highlights

  • Get a high level of port-to-port electrical isolation, which facilitates data separation (RED/BLACK).
  • Channel-to-channel 80-dB crosstalk isolation protects against signal snooping.
  • Permanently hard wired, preventing access from one CPU or network to the others.


    • NOTE: THIS ITEM IS CONTROLLED BY ITAR. EXPORT IS STRICTLY PROHIBITED WITHOUT AUTHORIZATION OR A LICENSE FROM THE US DEPT OF STATE.
    Tempest certified per SPIP27 Level A and NSTISSAM Level 1 Specifications. NSA has not confirmed product meets specific NSA Tempest Standards at this time.


    Description

    ServSwitch Secure KVM Switch with USB, EAL4+ Certified/TEMPEST Level I (Level A) Qualified, VGA, 2-Port with Card Reader Support


    Quick Facts

  • Get a high level of port-to-port electrical isolation, which facilitates data separation (RED/BLACK).
  • Channel-to-channel 80-dB crosstalk isolation protects against signal snooping.
  • Permanently hard wired, preventing access from one CPU or network to the others.

    • Further Details

  • The low radiated emissions profile meets the appropriate national requirements.
  • External tamper-evident seals.
  • Provides robust isolation between networks, so it’s ideal for government applications that access classified networks in addition to public networks such as the Internet.
  • Constructed with a solid metal case and a long-wearing switching mechanism.
  • USB host controller erases entire RAM to prevent residual data remaining on channel.
  • Dedicated DDC bus and EDID memory emulation at each port.
  • Features a Common Access Card (CAC) reader, meeting the requirements of the Department of Homeland Security Presidential Directive 12 (HSPD-12).
  • Clear, unmistakable channel selection.
  • Non-Flash-upgradable ROM.
  • To minimize electronic signaling, no common power supply.

    The ServSwitch™ Secure KVM Switch with USB, EAL4+ Certified/TEMPEST Level I (Level A) Qualified, VGA with Card Reader, surpasses the security profiles of most other KVM switches.

    In addition to its superior hardware-based data-isolation features, the switch has been certified for Common Criteria Evaluation Assurance to Level 4+ (EAL4+), augmented by ALC_FLR.2 and ATE_DPT.2.

    The Common Criteria is an international standardized process for information technology security evaluation, validation, and certification. The Common Criteria scheme is supported by the National Security Agency through the National Information Assurance Program (NIAP). EAL4+ itself defines a common set of tests to evaluate the security of an IT product relating to its supply chain, from design and engineering to manufacturing and distribution.

    The ServSwitch Secure KVM Switch with USB, EAL4+ Certified/TEMPEST Level I (Level A) Qualified, VGA provides control and separation of two PC CPUs/servers connected to secure and non-secure networks through just one keyboard, monitor, and mouse. Users can safely switch among the connected computers operating at different classification levels without worry.

    Plus, it is TEMPEST USA NSTISSAM Level I and NATO SDIP-27 Level A qualified. What this means is the low radiated emissions profile of the switch meets the appropriate requirements for conducted/radiated electromagnetic emissions.

    The TEMPEST designation is required by military organizations. As a security standard, it pertains to technical security countermeasures, standards, and instrumentation that prevent or minimize the exploitation of vulnerable data communications equipment by technical surveillance or eavesdropping.

    Also, the special Common Access Card (CAC) reader on this switch enhances its functions and gives you even more fail-safe security features.


    Threats/Solutions Scenarios

    1. Prevent data leaking between ports and to the outside world.

    Threat: Microprocessor malfunction or unanticipated software bugs cause data to flow between ports.
    Solution: Unidirectional keyboard and mouse data flow is enforced by hardware “data diodes” so data isolation doesn’t rely on software integrity. This makes it impossible for the computer to send data along the keyboard and mouse signaling channel. This advanced design also ensures data isolation through hardware and prevents the keyboard and mouse interfaces from becoming covert computer-to-computer signaling channels because of software holes or unanticipated bugs.

    In addition, keyboard and mouse devices can only be enumerated at the keyboard and mouse ports. Any other USB peripherals, such as a USB thumb drive, will be inhibited from operating, preventing any uploading or downloading of data.

    Threat: Physical proximity between ports enables data leakage.
    Solution: Isolation is improved by placing the red and black ports at the opposite edges of the switch.

    Threat: Accidental port switching.
    Solution: Locked-down operation disables all keyboard hotkey and mouse switching functions in both software and hardware so that data corruption can’t inadvertently cause an unanticipated channel change. The only way to change the channels is with the front-panel keys. There is only one button per channel, so channel selection is clear. Color-coded visual feedback confirms the channel selection.

    Threat: Signaling by shorting the power supply or loading the power.
    Solution: Each port is independently powered by its USB port. Shorting the power supply on one port will not cause the power on the other ports to be switched off. The shared keyboard, mouse, and monitor circuitry are powered by the power supply. The lack of a common power supply minimizes electronic signaling.

    Threat: Detection of signals on one computer by monitoring for crosstalk (leakage) signals on another computer.
    Solution: Minimum crosstalk separation of 80 dB provided between signals from one computer and input or I/O signals to another. There are no connections to sensitive analog inputs, such as computer microphone ports. Microphone circuitry enables sensitive recording of small analog signals. Even very low crosstalk levels could be recorded and act as a means by which a non-selected computer could read data being sent to another computer.

    Threat: Timing analysis attacks (looking at what happens on one port to determine data flow patterns on another).
    Solution: Only one computer is connected at a time to any shared circuitry. Links are unidirectional, preventing timing analysis.

    Threat: Electromagnetic emissions.
    Solution: Special low emissions cables are used to minimize radiated electromagnetic signal leakage. Filtered power connections minimize emissions down the power lines.

    2. Prevent data from being stored in the device.

    Threat: Data transfer by means of common storage or common RAM.
    Solution: Shared circuitry and the keyboard and mouse are powered down at each channel change to clear all volatile memory of any previous connections. This erases the entire RAM, preventing residual data from remaining in the channel and being transferred to another computer. In addition, the USB host controller and the shared USB peripherals are also powered down, reset, and re-enumerated. This ensures no residual data transfer.

    3. Prevent electronic snooping.

    Threat: Subversive snooping by detecting electromagnetic radiation emitted from the equipment.
    Solution: The shielded metal case features double shielding in critical areas and a low emissions profile to thwart eavesdropping.

    Threat: Physically tampering with the switch.
    Solution: The switch is designed with tamperproof seals to be fitted over the countersunk screws.

    NOTE: Supports CAC card reader. Card reader is not included.


    • Technical Specifications for ServSwitch Secure KVM Switch with USB, EAL4+ Certified/TEMPEST Level I (Level A) Qualified, VGA, 2-Port with Card Reader Support :

    Distance (Maximum) — Cable length: 6 ft. (1.8 m) or 12 ft. (3.6 m)
    Resolution (Maximum) — Digital: 165 MHz per DVI link, dual-link DVI supported;
    Analog: 1920 x 1280
    CE Approval — Yes
    RoHS — Yes
    Connectors — CPU: (2) HD26 F;
    User: (1) VGA F, (2) USB Type A F for keyboard and mouse only, (1) USB Type A F for smartcard reader, or combined card reader/keyboard device only;
    Power: (1) 2.5-mm barrel F
    Power — Input: 100–240 VAC, 50–60 Hz, external, 0.5 amps (maximum)
    Output: 5 VDC, 2.5 amps (maximum), 12.5 watts
    Size — 1.75"H (1U) x 9.25"W x 5.9"D (4.4 x 23.5 x 15 cm)
    Weight — 1 lb. (0.5 kg)

    This product works with:
  • VGA and PS/2 to HD26, 6-ft. (EHNSECURE1-0006)
  • VGA and USB to HD26, 6-ft. (EHNSECURE2-0006)
  • VGA, USB, and CAC USB to HD26, 6-ft. (EHNSECURE3-0006)
    Questions? Contact our FREE Tech Support.

    NOTE: Supports CAC card reader. Card reader is not included.

    NOTE: Technical specification weight is the unit weight. It is not the packaged shipping weight. For shipping weight, please contact Black Box customer service at 877-877-2269.


    • Resources for ServSwitch Secure KVM Switch with USB, EAL4+ Certified/TEMPEST Level I (Level A) Qualified, VGA, 2-Port with Card Reader Support :

    Product Data Sheets

    Visio Stencils

    • Visio Stencil
      Stencil Drawings
      httpftp

    Videos


    Connect your ServSwitch Secure KVM Switch with USB, EAL4+ Certified/TEMPEST Level I (Level A) Qualified, VGA, 2-Port with Card Reader Support with:

    Accessory: EHNSECURE2-0006

    ServSwitch Secure KVM Switch Cable, VGA and USB to HD26

    ServSwitch Secure KVM Switch Cable, VGA and USB to HD26

    » more info

    Accessory: EHNSECURE3-0006

    ServSwitch Secure KVM Switch Cable, VGA, USB, CAC USB to HD26

    ServSwitch Secure KVM Switch Cable, VGA, USB, CAC USB to HD26

    » more info

    Accessory: EHNSECURE1-0006

    ServSwitch Secure KVM Switch Cable, VGA and PS/2 to HD26

    ServSwitch Secure KVM Switch Cable, VGA and PS/2 to HD26

    » more info

    Double Diamond Warranty

    Standard Manufacturer's Warranty


    A Two year warranty is included.

    Extended Two years for one Warranty Available


    Protect your purchase with an additional Two years for oneDouble Diamond™ warranty!
    Cost: $59.60

    Extended Three years for two Warranty Available


    Protect your purchase with an additional Three years for twoDouble Diamond™ warranty!
    Cost: $119.19

    Diamond

    Double Diamond™ Warranty (Standard)

    Coverage:

    The most complete product warranty exclusively from Black Box

    The Double Diamond™ Warranty is our no-questions-asked warranty that protects your Black Box® brand products* from accidental damage, including drops, water, and power surges.

    Most products come with a one- or two-year warranty. Some products, such as copper cables, manual switches, cabinets, and racks, are guaranteed for life! Standard Warranty features are as follows:

    Worry-Free Purchases

    If your new Black Box® brand products are accidentally damaged, you're covered with this no-questions asked warranty. FREE

    Coverage

    Double Diamond™ is the standard warranty that comes with your new Black Box® brand product. Most products come with a one- or two-year warranty.

    Lifetime Guarantees

    Many products, such as copper cables, manual switches, cabinets, and racks, are guaranteed for life.

    Fast Service

    During the warranty period, Black Box® Network Services will repair or replace your damaged equipment within one week of receipt at NO CHARGE!

    Extra Coverage

    Extend your warranty or protect a previously purchased Black Box® brand product* for an additional year for only 10% of the current retail price! And when you do, we give you the second year of extended coverage free! FREE Tech Support Hotline. No cost. No contracts. No kidding!

    No-Risk 45-Day Return Policy

    If it's not right, send it back.
    (Excludes custom built products)

    * Certain products may not be eligible.

    Warranty Compared

    Black Box® Double Diamond™ Warranty The Competition
    Warranty Length One Year to Lifetime, Depending on the Product. Read the fine print.
    Guaranteed for Life! Black Box® Brand Copper Cables, Manual Switches and More! No.
    Accidental Damage 100% Covered! No.
    Water Damage 100% Covered! No.
    Power Surges 100% Covered! No.
    Warranty Replacements No Questions Asked! Forget It.
    Tech Support Hotline 100% FREE! $$$
    You can find this product in the following subcategory(s)
     

    Add to Cart

    Price: $595.95

    Quantity

    Warranty

    Total

    In Stock

    Shipping Info

    In Stock - orders received before 8PM ET ship same day


    45-day return policy


    Related Items

    Share It   
    delicious
    reddit


    Your shopping cart is empty

    Got Questions?


    ...or have us call you

    An expert will call you in 30 seconds. It's live and it's free.



    () 

    (U.S. and Canada Only)

         



    Print
    Black Box 1-877-877-2269
    Black Box Network Services