background image















19













Further information

Troubleshooting

If you experience problems when installing or using the AdderView Secure unit, 
please check through this section for a possible solution. If your problem is not 
listed here and you cannot resolve the issue, then please refer to the ‘Getting 
assistance’ section.

No video from computer

•  This is most likely to be associated with a mismatch between the host 

computer’s video output and the DDC data held within the AdderView 
Secure. Computers often need read the correct DDC data before they will 
output a video signal.  

  Depending on your DDC connection policy (see 

Video display (EDID) 

information

 for details), remember that the AdderView Secure will only 

attempt to read the DDC data from your monitor when the AdderView 
Secure is first powered on. To ensure that your monitor’s DDC data is read 
and stored correctly, ensure that it is attached and powered on when you 
switch on the AdderView Secure.

SECT 5

Summary of threats and solutions

This section provides a list of potential security threats that the AdderView 
Secure might face during operation and the special steps that have been taken 
to counteract them. 

Threat

Solution

Microprocessor 
malfunction or 
unanticipated software 
bugs causing data to flow 
between ports.

Unidirectional data flow is enforced by 
hardware “data diodes” so data isolation 
doesn’t rely on software integrity.

Subversive snooping 
by means of detecting 
electromagnetic radiation 
emitted from the 
equipment.

Carefully shielded metal case with dual 
shielding in critical areas.

Detection of signals 
on one computer by 
monitoring for crosstalk 

(leakage) signals on 

another computer.

No connection to sensitive analogue inputs 

(such as computer microphone ports) are 

provided. A very high level of crosstalk 
separation is provided between signals 
from different computers.

Malicious modification of 
microprocessor software 
causing data to leak 
between ports.

Data isolation is assured by hardware and so 
is not compromised by any changes to the 
microprocessor software. Microprocessors 
use one time programmable memory so 
flash upgrades are not possible. Case uses 
counter-sunk screws which can be protected 
by tamper-evident seals.

Buffered data within a 
keyboard or mouse is sent 
to the wrong computer 
after switchover. 

Keyboard and mouse are powered down 
and reset between each switchover to 
ensure that all buffers are cleared out.

Data leakage by means 
of monitoring conducted 
emissions on mains power.

The power circuitry provides strong 
protection against signal leakage via the 
power cable.

Summary of Contents for AdderView Secure AVSC1102

Page 1: ...AVSV1002 2 port AVSV1004 4 port AVSC1102 2 port AVSC1104 4 port AdderView Secure User Guide www adder com SECURE ADDERVIEW ...

Page 2: ...dations 10 Tamper evident seals 10 Links overview 10 Mounting 11 Making connections 12 Connections to computer systems 12 Connections to user console peripherals 12 Video display EDID information 14 Connection to power supply 15 Operation Important security features 16 Tamper evident seals 16 The security indicators 16 Anti subversion monitoring enhanced models only 16 Authentication checking enha...

Page 3: ...erational procedures must e g re staff vetting and training ensure that as far as is reasonably possible the product is received installed and managed in accordance with the manufacturer s directions This should also ensure that users are not malicious or hostile The product should be installed in an environment that is physically secure Additionally the security office in the organisation purchas...

Page 4: ...ccess Shielding extends also to the internal circuitry with strong levels of electrical crosstalk isolation between ports to protect against signals from one computer becoming detectable on another AdderView Secure units are available in two port and four port sizes Each size can be ordered in standard and enhanced versions The enhanced versions allow you to attach a smart card reader that can be ...

Page 5: ...04 XX Uni directional keyboard mouse data paths ü ü ü ü High port to port crosstalk isolation ü ü ü ü Heavy shielding for low emissions ü ü ü ü Single key per port for selection ü ü ü ü USB or PS 2 computer connections ü ü ü ü Tamper protection ü ü ü ü Secure DDC EDID strategy ü ü ü ü Smartcard reader support ü ü Combined keyboard smartcard reader support ü ü Advanced tamper protection reporting ü...

Page 6: ...er An optional smart card reader can be connected and used in conjunction with user authentication schemes Secure and shielded casing The casing is shielded to reduce electromagnetic emissions to an absolute minimum access apertures are minimized and vital access screws have tamper evident seals Clear and simple connections All connections are clearly marked to avoid any ambiguity Specially design...

Page 7: ...keyboard port The keyboard is powered down and reset at every switchover to clear stored states Mouse devices Although pointing devices don t generally process confidential data and are therefore considered to pose a lower risk you should ensure that the mouse used with the switch is approved against the security policy of your organization and plugged directly into the switch s USB mouse port wit...

Page 8: ...er hardware device As an additional precaution against theoretical leakage threats the circuitry associated with providing the generic card reader function is powered down and its memory is actively cleared at every channel switchover The switch does not decode or store the smartcard data flowing between the computer and the smartcard itself CO NS OL E IND OO R US E ON LY 5V 2 5 A CONSOLE When usi...

Page 9: ...yboard smartcard reader remains directly connected into the switch s USB smartcard port The combined keyboard smartcard reader is powered down and reset at every switchover to clear stored states The keyboard data and smartcard data are separated from each other as soon as they enter the switch The keyboard data is then sent uni directionally through the switch in the same way that data from a sim...

Page 10: ...k brackets Including four screws Shielded link cable VGA PS 2 keyboard PS 2 mouse Part code VSCD5 length 1 8m 6ft Shielded link cable VGA USB keyboard mouse USB card reader Part code VSCD6 length 1 8m 6ft Shielded link cable VGA USB keyboard mouse Part code VSCD7 length 1 8m 6ft Shielded link cable VGA only Part code VSCD9 length 1 8m 6ft Four self adhesive rubber feet ...

Page 11: ...ly seals could be added between each connection and the unit to highlight any connections that have been altered IMPORTANT Do not use the unit if the tamper evident seals are damaged Do not use if there are any signs of damage to the unit or its power supply Links overview The rear panel of the unit is well marked however the diagram below offers additional clarity on how best to arrange your conn...

Page 12: ... 11 Mounting The AdderView Secure unit offers two main mounting methods Supplied four self adhesive rubber feet Optional rack brackets CONS INDOOR USE ONLY 3 ...

Page 13: ...e appropriate link cable to the 26 way connector of the appropriate channel Connections to user console peripherals To connect a keyboard and mouse IMPORTANT To reduce the risk of radiated snooping do not use wireless keyboard or mouse devices See also Devices used with the AdderView Secure for advice about linking devices to the AdderView Secure unit 1 Wherever possible ensure that power is disco...

Page 14: ...e rear panel Ensure that the securing screws are used to maintain reliable links Note We strongly recommend that you use a video cable that has been correctly screened against signal emissions such as the VSCD9 cable CONSOLE Note The use of EDID information automatically provided by the video display could cause issues in certain high security installations please see the Video display EDID inform...

Page 15: ...oad a set of default data to the EDID memories and no data will be made available to the computers This provides a means of clearing information about previously attached monitors Note Most analog video cards will output a video signal without EDID information In such installations it may be acceptable to disconnect the DDC connections from the AdderView Secure so that no EDID information is made ...

Page 16: ...lar do not use an unearthed power socket or extension cable To connect the power supply 1 Attach the output connector of the power supply country specific power supplies are available to the socket located in the centre of the rear panel 2 When all other connections have been made connect the main body of the power supply to a nearby earthed mains socket NSOLE 5V 2 5A ...

Page 17: ...lock down state where the following will take place The computer channels become isolated and will not respond to the front panel buttons The green authentication channel indicator will illuminate The four red security will continually show the following flashing alert sequence Anti subversion monitoring enhanced models only The enhanced models AVSC1102 XX and AVSC1104 XX continually monitor their...

Page 18: ...deo display is not used during this process take care to enter characters correctly The first of the four red indicators will begin to flash 3 Enter the 8 digit Unit ID code and press Enter If the code is correct the first red indicator will illuminate and the second will begin to flash 4 Enter the 16 digit Query Code code from the Authentication Certificate do not enter the dashes and press Enter...

Page 19: ...uter network whereas channel 4 or channel 2 on two port versions has a red indicator and is generally configured to link with the highest security computer network Note If a keyboard key is held down during a channel change then the key will be sent to the selected computer upon release of the channel change button Do not hold down keys during a channel change Smart card reader Your AdderView Secu...

Page 20: ...or malfunction or unanticipated software bugs causing data to flow between ports Unidirectional data flow is enforced by hardware data diodes so data isolation doesn t rely on software integrity Subversive snooping by means of detecting electromagnetic radiation emitted from the equipment Carefully shielded metal case with dual shielding in critical areas Detection of signals on one computer by mo...

Page 21: ...rity computers should be arranged to look visibly different in general appearance Threat Solution Forced malfunctions due to overloaded signalling It is potentially possible to create forced malfunctions by constantly and quickly sending a stream of valid requests such as the request to update the keyboard lights A well known example of an undesirable KVM malfunction is a crazy mouse which was qui...

Page 22: ...eshooting section then we provide a number of other solutions Adder Technology website www adder com Check the Support section of our website for the latest solutions and driver files Email support adder com Fax in the UK 01954 780081 in the US 1 888 275 1117 Phone in the UK 01954 780044 in the US 1 888 932 3337 ...

Page 23: ...t exceed the cable s ampere rating Also make sure that the total ampere rating of all the devices plugged into the wall outlet does not exceed the wall outlet s ampere rating The power adapter can get warm in operation do not situate it in an enclosed space without any ventilation Warranty Adder Technology Ltd warrants that this product shall be free from defects in workmanship and materials for a...

Page 24: ... is connected d Consult the supplier or an experienced radio TV technician for help FCC Compliance Statement United States This equipment generates uses and can radiate radio frequency energy and if not installed and used properly that is in strict accordance with the manufacturer s instructions may cause interference to radio communication It has been tested and found to comply with the limits fo...

Page 25: ...Way Bar Hill Cambridge CB23 8SQ United Kingdom Tel 44 0 1954 780044 Fax 44 0 1954 780081 Adder Corporation 350R Merrimac Street Newburyport MA 01950 United States of America Tel 1 888 932 3337 Fax 1 888 275 1117 www ctxd com Documentation by Adder Asia Pacific 6 New Industrial Road Hoe Huat Industrial Building 07 01 Singapore 536199 Tel 65 6288 5767 Fax 65 6284 1150 ...

Reviews: