Security Target
Version 1.1
2022-03-08
33
All Keyboard and Mouse connections are filtered first, and only the authorized devices pre-defined in the
TOE’s whitelist
will be allowed. The data input by the authorized USB Keyboard and Mouse will be
emulated by TOE to USB data for computer sources.
No data or electrical signals flow between connected computers at any time. Each connected computer
has its own independent Device Controller, power circuit, and EEPROM.
No data transits the TOE when the TOE is powered off or when the TOE is in a failure state.
6.2.3
FDP_CDS_EXT.1
–
Connected Displays Supported
The TOE supports connected displays from a single source video feed (either single-head or multi-head).
Because of this, the single selected source video feed is always the same channel and indication of the
selected channel is through the channel selection LEDs on the TOE chassis.
The DisplayPort models CS1182DP4, CS1184DP4, and CS1188DP4 each support one connected display.
While CS1142DP4, CS1144DP4, and CS1148DP4 each support two connected displays at a time.
The HDMI models CS1182H4 and CS1184H4 each support one connected display. While CS1142H4 and
CS1144H4 each support two connected displays at a time.
The DVI models CS1182D4, CS1184D4, and CS1188D4 each support one connected display. While
CS1142D4, CS1144D4, and CS1148D4 each support two connected displays at a time.
6.2.4
FDP_FIL_EXT.1/KM
–
Device Filtering (Keyboard/Mouse); FDP_PDC_EXT.3/KM
–
Authorized Connection Protocols (Keyboard/Mouse)
The TOE supports authorized USB keyboard and mouse peripherals as defined in
below. Keyboard/mouse peripherals are filtered and emulated. Device filtering for
keyboard/mouse interfaces is configurable. Keyboard/mouse blacklisted devices are unauthorized
devices. Whitelisted devices are authorized devices for the keyboard/mouse interfaces in peripheral
device connections. The TOE does not define any whitelisted devices that are also blacklisted devices. The
KVM includes a built in allowed list (whitelist) for the USB Keyboard/ Mouse Ports. Only the default-
authorized devices can be blacklisted by the administrator for the USB Keyboard/Mouse Ports. The USB
Keyboard/Mouse Ports do not
support a “whitelist” function.
The configurable HID device function enables authorized administrators to assign a blacklist for HID
devices. To blacklist a keyboard/mouse device, the admin connects the HID device that they want
blacklisted directly to the Mouse Port (do not connect it to the KVM via a USB hub), and performs the
configuration via administrator functions. After configuration, the blacklisted HID device will be rejected
by both Keyboard/ Mouse Ports. The Reset KVM to Default function will clear the blacklist created by the
Secure KVM administrator functions.
The TOE emulates data from authorized USB Keyboard and Mouse protocol interfaces to USB connected
computers.
