BlackBox SW4009A-USB-EAL ServSwitch Secure VGA/USB EAL with card reader, 4-Port

ServSwitch Secure VGA USB KVM Switch EAL4+/TEMPEST

Combat security threats with this hard-wired VGA KVM switch with CAC support.

- High electrical isolation between ports for complete data separation.
- 60-dB channel-to-channel crosstalk isolation to protect against signal snooping.
- Permanent hard-wired isolation prevents network access from one CPU to another.
- Low electromagnetic emissions.
- External tamper-evident seals.
- Durable metal housing and long-lasting switch mechanism.
- USB host controller erases entire RAM—no residual data remain on the channel.
- Dedicated DDC bus and EDID memory emulation at each port.
- Options for CAC card reader support available.
- Clear, unmistakable channel selection.
- Non-Flash-upgradable ROM.
- No common power supply to minimize electronic signaling.
- Warranty: 2 Years Double Diamond™ (Standard).

The ServSwitch™ Secure VGA USB KVM Switch EAL4+/TEMPEST outperforms the security profiles of most other KVM switches and is certified for Common Criteria Evaluation Assurance Level 4+ (EAL4+).

The Common Criteria is an international security evaluation process supported by the National Security Agency and NIAP, defining EAL4+ standards as a benchmark for product security from design to distribution.

The Secure VGA USB KVM Switch allows secure management of up to four computers across networks with different security levels without the risk of data leaks.

### TEMPEST Qualification
TEMPEST USA NSTISSAM Level I and NATO SDIP-27 Level A certification ensures the switch meets standards for electromagnetic emissions, a designation required by military organizations.

### Threat Scenarios and Solutions

1. Preventing data leaks between ports and to the outside world:

Threat 1.1: Processor or software issues allow data exchange between ports.
Solution: One-way data flow is enforced via hardware data diodes, ensuring no reliance on software for data isolation. USB peripherals that are not keyboard or mouse are blocked.

Threat 1.2: Proximity of ports could allow data transfer.
Solution: Isolation is enhanced by placing ports on opposite sides of the switch.

Threat 1.3: Accidental channel switching.
Solution: Switching is only possible via front-panel buttons, with all hotkeys disabled. Clear, color-coded feedback shows active channel.

Threat 1.4: Short circuits or current surges signal transmission.
Solution: Each port is independently powered, preventing short circuits from affecting other ports.

Threat 1.5: Crosstalk signals allow monitoring on another computer.
Solution: Minimum 80 dB isolation prevents crosstalk signal transfer between computers.

2. Preventing data from being stored in the device:

Solution: Shared circuits and RAM are cleared on each channel change to prevent residual data transfer.

3. Preventing electronic snooping:

Solution: The metal housing with double shielding minimizes electromagnetic emissions to prevent eavesdropping.

### Technical Specifications

Maximum Distance: Cable length 1.8 m or 3.6 m
Maximum Resolution: Digital 165 MHz (Dual-Link DVI), Analog up to 1920 x 1280
Connectors:
- CPU: (2) or (4) HD26 Female
- User: (1) VGA Female, (2) USB Type A for keyboard and mouse, with CAC reader option
- Power: 2.5-mm barrel connector
Power: Input 100–240 VAC, 50–60 Hz, external, max. 0.5 A; Output 5 VDC, max. 2.5 A
Dimensions: (1U) 4.4 H x 23.5 W x 15 D cm
Weight: 0.5 kg
TAA compliant: Yes