IPGARD Secure KVM/KM Peripheral Sharing Switches provide a secure medium to connect one or more input peripherals to two or more computers. The TOE models support the following types of peripheral connectivity:
\r\n· KVM: connectivity between a single set of peripheral devices (keyboard/mouse, one or more displays depending on TOE model, audio, USB authentication device depending on TOE model) and two or more connected computers.
\r\n· KM: connectivity between a single set of peripheral devices (keyboard/mouse, audio, USB authentication device depending on TOE model) and two or more connected computers. Unlike KVM, KM models/configurations do not support switching of display peripherals.
","evaluation_configuration":"\r\nThe Target of Evaluation (TOE) is hardware and firmware components of the IPGARD Secure KVM/KM Peripheral Sharing Switches. The TOE model numbers, part numbers, descriptions, and software/firmware versions are provided in the tables below. The products range from 2-Port to 16-Ports to support up to 2 to 16 computers respectively.
\r\n| \r\n # \r\n | \r\n\r\n Model Name \r\n | \r\n\r\n P/N \r\n | \r\n\r\n Description and NIAP Certification Version \r\n | \r\n\r\n Version \r\n | \r\n
| \r\n 1 \r\n | \r\n\r\n SDVN-2S \r\n | \r\n\r\n 1872-IPG-1001 \r\n | \r\n\r\n 2-Port SH Secure DVI-I KVM w/audio, PP 3.0 \r\n | \r\n\r\n 111.111 \r\n | \r\n
| \r\n 2 \r\n | \r\n\r\n SDVN-2S-P \r\n | \r\n\r\n 1872-IPG-1002 \r\n | \r\n\r\n 2-Port SH Secure Pro DVI-I KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 111.111 \r\n | \r\n
| \r\n 3 \r\n | \r\n\r\n SDVN-2D \r\n | \r\n\r\n 1872-IPG-1003 \r\n | \r\n\r\n 2-Port DH Secure DVI-I KVM w/audio, PP 3.0 \r\n | \r\n\r\n 111.111 \r\n | \r\n
| \r\n 4 \r\n | \r\n\r\n SDVN-2D-P \r\n | \r\n\r\n 1872-IPG-1004 \r\n | \r\n\r\n 2-Port DH Secure Pro DVI-I KVM w/audio and CAC , PP 3.0 \r\n | \r\n\r\n 111.111 \r\n | \r\n
| \r\n 5 \r\n | \r\n\r\n SDPN-2S \r\n | \r\n\r\n 1872-IPG-1005 \r\n | \r\n\r\n 2-Port SH Secure DP KVM w/audio, PP 3.0 \r\n | \r\n\r\n 121.212 \r\n | \r\n
| \r\n 6 \r\n | \r\n\r\n SDPN-2S-P \r\n | \r\n\r\n 1872-IPG-1006 \r\n | \r\n\r\n 2-Port SH Secure Pro DP KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 121.212 \r\n | \r\n
| \r\n 7 \r\n | \r\n\r\n SDPN-2D \r\n | \r\n\r\n 1872-IPG-1007 \r\n | \r\n\r\n 2-Port DH Secure DP KVM w/audio, PP 3.0 \r\n | \r\n\r\n 121.212 \r\n | \r\n
| \r\n 8 \r\n | \r\n\r\n SDPN-2D-P \r\n | \r\n\r\n 1872-IPG-1008 \r\n | \r\n\r\n 2-Port DH Secure Pro DP KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 121.212 \r\n | \r\n
| \r\n 9 \r\n | \r\n\r\n SDHN-2S-P \r\n | \r\n\r\n 1872-IPG-1009 \r\n | \r\n\r\n 2-Port SH Secure Pro DP to HDMI KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 131.313 \r\n | \r\n
| \r\n 10 \r\n | \r\n\r\n SDHN-2D-P \r\n | \r\n\r\n 1872-IPG-1010 \r\n | \r\n\r\n 2-Port DH Secure Pro DP to HDMI KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 131.313 \r\n | \r\n
Table 1: IPGARD 2-Port Secure TOE Identification
\r\n\r\n
| \r\n | \r\n Model Name \r\n | \r\n\r\n P/N \r\n | \r\n\r\n Description and NIAP Certification Version \r\n | \r\n\r\n Version \r\n | \r\n
| \r\n 1 \r\n | \r\n\r\n SDVN-4S \r\n | \r\n\r\n 1872-IPG-1011 \r\n | \r\n\r\n 4-Port SH Secure DVI-I KVM w/audio, PP 3.0 \r\n | \r\n\r\n 242.414 \r\n | \r\n
| \r\n 2 \r\n | \r\n\r\n SDVN-4S-P \r\n | \r\n\r\n 1872-IPG-1012 \r\n | \r\n\r\n 4-Port SH Secure Pro DVI-I KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 242.414 \r\n | \r\n
| \r\n 3 \r\n | \r\n\r\n SDVN-4D \r\n | \r\n\r\n 1872-IPG-1013 \r\n | \r\n\r\n 4-Port DH Secure DVI-I KVM w/audio, PP 3.0 \r\n | \r\n\r\n 242.414 \r\n | \r\n
| \r\n 4 \r\n | \r\n\r\n SDVN-4D-P \r\n | \r\n\r\n 1872-IPG-1014 \r\n | \r\n\r\n 4-Port DH Secure Pro DVI-I KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 242.414 \r\n | \r\n
| \r\n 5 \r\n | \r\n\r\n SDPN-4S \r\n | \r\n\r\n 1872-IPG-1015 \r\n | \r\n\r\n 4-Port SH Secure DP KVM w/audio, PP 3.0 \r\n | \r\n\r\n 252.515 \r\n | \r\n
| \r\n 6 \r\n | \r\n\r\n SDPN-4S-P \r\n | \r\n\r\n 1872-IPG-1016 \r\n | \r\n\r\n 4-Port SH Secure Pro DP KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 252.515 \r\n | \r\n
| \r\n 7 \r\n | \r\n\r\n SDPN-4D \r\n | \r\n\r\n 1872-IPG-1017 \r\n | \r\n\r\n 4-Port DH Secure DP KVM w/audio, PP 3.0 \r\n | \r\n\r\n 252.515 \r\n | \r\n
| \r\n 8 \r\n | \r\n\r\n SDPN-4D-P \r\n | \r\n\r\n 1872-IPG-1018 \r\n | \r\n\r\n 4-Port DH Secure Pro DP KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 252.515 \r\n | \r\n
| \r\n 9 \r\n | \r\n\r\n SDHN-4S-P \r\n | \r\n\r\n 1872-IPG-1019 \r\n | \r\n\r\n 4-Port SH Secure Pro DP to HDMI KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 262.616 \r\n | \r\n
| \r\n 10 \r\n | \r\n\r\n SDHN-4D-P \r\n | \r\n\r\n 1872-IPG-1020 \r\n | \r\n\r\n 4-Port DH Secure Pro DP to HDMI KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 262.616 \r\n | \r\n
| \r\n 11 \r\n | \r\n\r\n SDVN-4Q-P \r\n | \r\n\r\n 1872-IPG-1021 \r\n | \r\n\r\n 4-Port QH Secure Pro DVI-I KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 242.414 \r\n | \r\n
| \r\n 12 \r\n | \r\n\r\n SDPN-4Q-P \r\n | \r\n\r\n 1872-IPG-1022 \r\n | \r\n\r\n 4-Port QH Secure Pro DP KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 252.515 \r\n | \r\n
| \r\n 13 \r\n | \r\n\r\n SDHN-4Q-P \r\n | \r\n\r\n 1872-IPG-1023 \r\n | \r\n\r\n 4-Port QH Secure Pro DP to HDMI KVM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 262.616 \r\n | \r\n
| \r\n 14 \r\n | \r\n\r\n SKMN-4S \r\n | \r\n\r\n 1872-IPG-1030 \r\n | \r\n\r\n 4-Port Secure KM w/audio, PP 3.0 \r\n | \r\n\r\n 202.410 \r\n | \r\n
| \r\n 15 \r\n | \r\n\r\n SKMN-4S-P \r\n | \r\n\r\n 1872-IPG-1031 \r\n | \r\n\r\n 4-Port Secure Pro KM w/audio and CAC, PP 3.0 \r\n | \r\n\r\n 202.410 \r\n | \r\n
Table 2: IPGARD 4-Port Secure TOE Identification
\r\n\r\n
| \r\n | \r\n Model Name \r\n | \r\n\r\n P/N \r\n | \r\n\r\n Description and NIAP Certification Version \r\n | \r\n\r\n Version \r\n | \r\n
| \r\n 1 \r\n | \r\n\r\n SDVN-8S \r\n | \r\n\r\n 1872-IPG-1024 \r\n | \r\n\r\n 8-Port SH Secure DVI-I KVM w/audio, PP 3.0 \r\n | \r\n\r\n 373.717 \r\n | \r\n
| \r\n 2 \r\n | \r\n\r\n SDVN-8S-P \r\n | \r\n\r\n 1872-IPG-1025 \r\n | \r\n\r\n 8-Port SH Secure Pro DVI-I KVM w/ audio and CAC, PP 3.0 \r\n | \r\n\r\n 373.717 \r\n | \r\n
| \r\n 3 \r\n | \r\n\r\n SDVN-8D \r\n | \r\n\r\n 1872-IPG-1026 \r\n | \r\n\r\n 8-Port DH Secure DVI-I KVM w/ audio, PP 3.0 \r\n | \r\n\r\n 373.717 \r\n | \r\n
| \r\n 4 \r\n | \r\n\r\n SDVN-8D-P \r\n | \r\n\r\n 1872-IPG-1027 \r\n | \r\n\r\n 8-Port DH Secure Pro DVI-I KVM w/ audio and CAC, PP 3.0 \r\n | \r\n\r\n 373.717 \r\n | \r\n
| \r\n 5 \r\n | \r\n\r\n SKMN-8S \r\n | \r\n\r\n 1872-IPG-1032 \r\n | \r\n\r\n 8-Port Secure KM w/ audio, PP 3.0 \r\n | \r\n\r\n 303.710 \r\n | \r\n
| \r\n 6 \r\n | \r\n\r\n SKMN-8S-P \r\n | \r\n\r\n 1872-IPG-1033 \r\n | \r\n\r\n 8-Port Secure Pro KM w/ audio and CAC, PP 3.0 \r\n | \r\n\r\n 303.710 \r\n | \r\n
| \r\n 7 \r\n | \r\n\r\n SDVN-16S \r\n | \r\n\r\n 1872-IPG-1028 \r\n | \r\n\r\n 16-Port SH Secure DVI-I KVM w/ audio, PP 3.0 \r\n | \r\n\r\n 484.818 \r\n | \r\n
| \r\n 8 \r\n | \r\n\r\n SDVN-16S-P \r\n | \r\n\r\n 1872-IPG-1029 \r\n | \r\n\r\n 16-Port SH Secure Pro DVI-I KVM w/ audio and CAC, PP 3.0 \r\n | \r\n\r\n 484.818 \r\n | \r\n
Table 3: IPGARD 8-Port and 16-Port Secure TOE Identification
\r\nThe IPGARD Secure KVM/KM switches are compatible with standard personal/portable computers, servers or thin-clients. Connected computers are assumed to run off-the-shelf general-purpose operating systems such as Windows or Linux. The PSS includes ports for the following interfaces:
\r\n· USB keyboard
\r\n\r\n
· USB mouse
\r\n\r\n
· DVI, HDMI 1.4 and DisplayPort 1.2 Video Input (computer ports) – specific port depends on model
\r\n\r\n
· DVI, HDMI 1.4 and DisplayPort 1.2 Video Output (peripheral port) – specific port depends on model
\r\n\r\n
· 3.5mm Audio Input (computer ports)
\r\n\r\n
· 3.5mm Audio Output (peripheral port)
\r\n\r\n
· USB Smart-card reader, PIV/CAC reader, Token or Biometric reader – supported models only
\r\nComputers of varying sensitivities can be connected to a single TOE that is intended to restrict peripheral connectivity to one computer at a time. Data leakage is prevented across the TOE to avoid severe compromise of the user's information.
","security_evaluation_summary":"\r\nThe evaluation was carried out in accordance with the National Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the IPGARD Secure KVM/KM Peripheral Sharing Switches were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 4. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 4. These materials were supplemented with the requirements of the NIAP Protection Profile for Peripheral Sharing Switch, Version 3.0, as well as any applicable supplemental guidance from NIAP, such as scheme policies, scheme publications, NIAP Technical Decisions, and official NIAP Technical Query responses. The product, when delivered and configured as identified in the IPGard Secure KVM Administration and Security Management Tool Guide (KVM/KM), Version 3.1, July 15, 2019 and the respective User Manuals, satisfies all of the security functional requirements stated in the IPGARD Secure KVM/KM Switch Security Target, Version 4.11, August 8, 2019. The project underwent CCEVS Validator review. The evaluation was completed in October 2019. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"\r\nThe TOE implements the User Data Protection and Data Isolation security function policies of the Protection Profile for Peripheral Sharing Switch. As specified in the ST,
\r\n“Secure KVM/KM devices allow an individual user to utilize a set of peripherals to operate in an environment with one or several isolated computers. KVM devices allow switching keyboard, mouse, display, audio, and USB/CAC (on -P models) from one isolated computer to another. KM devices allow switching keyboard, mouse, audio, and USB user authentication devices (only in -P models) from one isolated computer to another.”
\r\nKeyboard and Mouse
\r\nThe keyboard and mouse processor is programmed in firmware only to accept basic keyboard and mouse USB devices (standard 108-key keyboard and 3-button mouse). Wireless keyboard and mouse are not allowed by the TOE. Only USB host peripheral devices are allowed by TOE keyboard and mouse host emulators. A secure peripheral switch (multiplexer) is used to assure the selection of just one tied keyboard and mouse serial data stream during TOE operation. The secure multiplexer has a third position, isolation, which is activated when the TOE has been tampered with or self-test has failed to disable the keyboard and mouse stream.
\r\nTOE External Interfaces
\r\nThe TOE only supports AC/DC power, USB keyboard and mouse, video out (DVI in/DVI out, DP 1.2 in/DP 1.2 out, DP 1.2 in/HDMI 1.4 out, or VGA in/VGA out via adapter), analog audio output, and USB authentication devices on supported models. Docking protocols are not supported by the TOE. Analog microphone or audio line inputs are not supported by the TOE. Unidirectional audio diodes are placed in parallel on both right and left stereo channels to ensure unidirectional data flow from the connected computer to the user peripheral device. Audio data from the connected peripheral devices to the connected computer is blocked by the audio data diodes.
\r\nAudio Subsystem
\r\nElectrical isolation of the audio subsystem from all other TOE interfaces prevents data leakage to and from the audio paths. The use of microphones or audio line input devices is prohibited. All TOE devices support analog audio out switching and all TOE devices will prevent the use of microphone devices. These microphones are stopped through the use of unidirectional audio diodes on both left and right stereo channels (which force data flow from only the computer to the connected audio device) and the analog output amplifier which enforces unidirectional audio data flow. The TOE audio subsystem does not delay, store, or convert audio data flows. This prevents any audio overflow during switching between isolated audio channels.
\r\nVideo Subsystem
\r\nEach connected computer has its own TOE isolated channel with its own Extended Display Identification Data (EDID) emulator and video input port. Data flows from the input video source through its respective EDID emulator and out of the monitor display port. Each video input interface is isolated from one another using different EDID ICs, power planes, ground planes, and electronic components in each independent channel. The TOE supports DVI/DP 1.2 video input, and DVI/HDMI 1.4 video output (depending on the TOE model).
\r\nTOE Administration and Security Management
\r\nEach TOE is equipped with an Administration and Security Management Tool that can be initiated by running an executable file on a computer with keyboard connected to the same computer via the TOE. The tool requires administrator or a user to be successfully identified and authenticated by the TOE in order to gain access to any supported feature. Some features are restricted to the Administrator role only, while other features can be performed by either the Administrator or User role.
\r\nUser Authentication Device Subsystem
\r\nTOE models that support USB authentication devices are shipped with default Device Filtration for the CAC port. The filter is set at default to allow only standard smart-card reader, PIV/CAC USB 1.1/2.0 token, or biometric reader. All devices must be bus powered only (no external power source allowed). The TOE default settings accept standard smart-card reader, PIV/CAC USB 1.1/2.0 token or biometric reader. Authenticated users and administrator can register (whitelist) other USB devices. All other USB devices are prohibited (blacklisted).
\r\nUser Control and Monitoring Security
\r\nUser monitoring and control of the TOE is performed through the TOE front panel LED illuminated push-buttons. These buttons are tied to the TOE system controller functionality. All push-buttons for selecting computer channels are internally illuminated via LEDs. The current selected channel is indicated by the illumination of the current channel push-button LED (the other channel LEDs remain off). During operation, all front panel LED indications cannot be turned off or dimmed by the user in any way including after Restore Factory Default (reset).
\r\nAll features of the TOE front panel are tested during power up self-testing. From power up until the termination of the TOE self-test, no channel is selected.
\r\nKVM TOE models can also be configured to be in KM mode, which permits cursor control of selected channel. This identifies the selected computer by visual position of the mouse cursor. In the evaluated configuration, the TOE is configured to use “multi-head mode display switching” when this functionality is active. This configuration enforces a guard by requiring the administrator to press the middle mouse button (scroll wheel button) twice before the cursor control mechanism can be engaged.
\r\nTampering Protection
\r\nIn order to mitigate potential tampering and replacement, the TOE is devised to ensure that any replacement may be detected, any physical modification is evident, and any logical modification may be prevented. The TOE is designed so that access to the TOE firmware, software, or its memory via its accessible ports is prevented. The TOE is designed to prevent any physical or logical access its internal memory. There is a mechanical switch on the inside of the TOE that triggers the anti-tampering state when the enclosure is manually opened. Once the anti-tampering state is triggered, the TOE is permanently disabled.
\r\nSelf-Testing and Security Audit
\r\nThe TOE has a self-testing function that executes immediately after power is supplied including Restore Factory Default (reset) and power reset. Self-testing must complete successfully before normal operational access is granted to the TSF. The self-test function includes the following activities:
\r\n· Basic integrity test of the TOE hardware (no front panel push buttons are jammed).
\r\n· Basic integrity test of the TOE firmware.
\r\n· Integrity test of the anti-tampering system and control function.
\r\n· Test the data traffic isolation between ports.
\r\nThe TOE has a non-volatile memory event log which records all abnormal security events that occur within TOE operation. This log can be accessed by the identified and authorized administrator and dumped into a .txt file using a connected computer and the Administration and Security Management tool that is provided by the TOE vendor.
","features":[]}