7
Smartcard devices (supported only on enhanced models)
The smartcard reader and smartcards, used with enhanced models of the switch
(AVSC1102-XX and AVSC1104-XX), must be approved against the security
policy of your organization. The smartcard reader must be plugged directly into
the switch’s USB card reader port with no adapters or converters. The smartcard
reader is powered down and reset at every switchover to clear stored states.
Smartcards may contain memory that can be both readable and writable. Care
must therefore be taken when configuring a system using smartcards.
The smartcard system inside the switch is designed to introduce no greater risk
than would be present if each computer had a separate card reader and the
card was moved between them. To achieve this, the switch provides a layer
of isolation between the computers and the shared card reader. This protects
against threats involving sharing a physical card reader hardware device. As
an additional precaution against theoretical leakage threats, the circuitry
associated with providing the generic card reader function is powered down
and its memory is actively cleared at every channel switchover. The switch does
not decode or store the smartcard data flowing between the computer and the
smartcard itself.
CO
NS
OL
E
IN
DO
OR
US
E
ON
LY
5V
2.5
A
CO
NS
OL
E
When using enhanced models, if smartcard capabilities are not required for
a particular computer, then use a non-smartcard cable (without the yellow
smartcard connector). This will ensure that the computer does not see any
smartcard reader function as all the smartcard functionality is presented to the
computer on the yellow USB connector only. Any computers that would not
normally have card readers connected should not be connected to the switch
using the yellow USB connector.
Smartcard access required?:
ü
Use cable set:
VSCD6
Smartcard access required?:
û
Use cable set:
VSCD7
Note: Standard models of the switch (AVSV1002-XX and AVSV1004-XX) also
have a smartcard USB socket at the rear panel (labeled
), however, it is not
functional on these models.
