Each device in the ATEN Secure KVM Switch series is a peripheral sharing switch that allows for securely sharing one set of peripherals between multiple computers. A user may connect a mouse, keyboard, user authentication device (for example, CAC reader), speaker, and one or two video displays to a Secure KVM Switch. The user may switch the set of peripherals between connected computers. The maximum number of connected computers is two, four, or eight depending on model. The user can switch the peripherals between any of the connected computers while preventing unauthorized data flows or leakage between computers.
\r\nThe TOE is the following models of the ATEN Secure KVM Switch Series.
\r\nTable 1 ATEN Secure KVM Switch Series TOE Models
\r\n| \r\n Configuration \r\n | \r\n\r\n 2-Port \r\n | \r\n\r\n 4-Port \r\n | \r\n\r\n 8-Port \r\n | \r\n|
| \r\n DisplayPort \r\n | \r\n\r\n Single Head \r\n | \r\n\r\n CS1182DP \r\n | \r\n\r\n CS1184DP \r\n | \r\n\r\n CS1188DP \r\n | \r\n
| \r\n Dual Head \r\n | \r\n\r\n CS1142DP \r\n | \r\n\r\n CS1144DP \r\n | \r\n\r\n CS1148DP \r\n | \r\n|
| \r\n HDMI \r\n | \r\n\r\n Single Head \r\n | \r\n\r\n CS1182H \r\n | \r\n\r\n CS1184H \r\n | \r\n\r\n CS1188H \r\n | \r\n
| \r\n Dual Head \r\n | \r\n\r\n CS1142H \r\n | \r\n\r\n CS1144H \r\n | \r\n\r\n CS1148H \r\n | \r\n|
| \r\n DVI \r\n | \r\n\r\n Single Head \r\n | \r\n\r\n CS1182D \r\n | \r\n\r\n CS1184D \r\n | \r\n\r\n CS1188D \r\n | \r\n
| \r\n Dual Head \r\n | \r\n\r\n CS1142D \r\n | \r\n\r\n CS1144D \r\n | \r\n\r\n CS1148D \r\n | \r\n
In Table 1, DisplayPort and HDMI configurations support HDMI monitor peripherals. DVI configurations support DVI monitors. All TOE devices support both USB and PS/2 keyboards and mice.
","evaluation_configuration":"","security_evaluation_summary":"\r\n\r\nThe evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the ATEN Secure KVM Switch Series devices were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 4. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 4. The product satisfies all of the security functional requirements stated in the ATEN Secure KVM Switch Series Security Target, version 1.0, January 19, 2018, when delivered and configured as identified in the product documentation listed in the aforementioned security target.
\r\nThe evaluation underwent CCEVS Validator review. The evaluation was completed in January 2018. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"\r\n\r\nATEN Secure KVM Switch series devices enforce the following TOE security functional policies as specified in the ST.
\r\n\r\nThe TOE generates audit records for the authorized administrator actions. Each audit record records a standard set of information such as date and time of the event, type of event, and the outcome (success or failure) of the event.
\r\n\r\nThe TOE controls and isolates information flowing between the peripheral device interfaces and a computer interface. The peripheral devices supported include:
\r\n· USB keyboard,
\r\n· USB mouse,
\r\n· PS/2 keyboard,
\r\n· PS/2 mouse,
\r\n· USB authentication device (CAC reader or smart card reader),
\r\n· Audio output, and
\r\n· DVI or HDMI video (depending on device type).
\r\nSome TOE models accept DisplayPort signals at the computer interface and convert the signals to HDMI signals at the peripheral interface.
\r\nThe TOE authorizes peripheral device connections with the TOE console ports based on the peripheral device type.
\r\nThe TOE ensures that any previous information content of a resource is made unavailable upon the deallocation of the resource from a TOE computer interface immediately after the TOE switch to another selected computer and on start-up of the TOE.
\r\nIdentification and Authentication
\r\nThe TOE provides an identification and authentication function for the administrative user to perform administrative functions such as configuring the user authentication device filtering whitelist and blacklist (configurable device filtration). The authorized administrator must logon by providing a valid password.
\r\n\r\nThe TOE supports configurable device filtration (CDF). This function is restricted to the authorized administrator and allows the TOE to be configured to accept or reject specific USB devices using CDF whitelist and blacklist parameters. Additionally, the TOE provides security management functions to reset to factory default and to change the administrator password.
\r\n\r\nThe TOE runs a suite of self-tests during initial startup and after activating the reset button. The suite includes:
\r\n· Test of the basic TOE hardware and firmware integrity,
\r\n· Test of the basic computer-to-computer isolation, and
\r\n· Test of critical security functions (i.e., user control and anti-tampering).
\r\nThe TOE provides users with the capability to verify the integrity of the TSF and the TSF functionality.
\r\nThe TOE resists physical attacks on the TOE enclosure for the purpose of gaining access to the internal components or to damage the anti-tampering battery by becoming permanently disabled when tampering is detected. The TOE preserves a secure state by disabling the TOE when there is a failure of the power on self-test or a failure of the anti-tampering function.
\r\nThe TOE provides unambiguous detection of physical tampering that might compromise the TSF. The TSF provides the capability to determine whether physical tampering with the TSF's devices or TSF's elements has occurred.
\r\n\r\nThe TOE displays a continuous visual indication of the computer to which the user is currently connected, including on power up, and on reset.
","features":[]}