CC Certificate 

Security Target 

Validation Report 

Assurance Activity 

Administrative Guide 

Administrative Guide 

Administrative Guide 

Administrative Guide 

Each device in the IOGEAR Secure KVM Switch series is a peripheral sharing device that allows for securely sharing one set of peripherals between multiple computers. Each of the sixteen models is a Peripheral Sharing Device that include console ports and computer ports. The console ports are used to connect a single set of peripherals, including a mouse, keyboard, speaker, and one or two video displays (depending on specific device type) to the TOE. The TOE’s computer ports are connected to up to 2, 4, or 8 separate computers (again depending on specific device type). The user can then securely switch the connected console peripherals between any of the connected computers while preventing unauthorized data flows or leakage between computers. The TOE supports manual port switching using a press and release a port selection push button (on the switch, or on the Remote Port Selector (RPS) if connected and aligned) to bring the KVM focus to the computer attached to its corresponding port.

The TOE is the following models of the IOGEAR Secure KVM Switch Series.

Table 1 IOGEAR Secure KVM Switch Series TOE Models

In Table 1, DisplayPort configurations support DisplayPort monitors, HDMI configurations support HDMI monitors, and DVI configurations support DVI monitors. All TOE devices support USB keyboards and mice.

All TOE devices support USB peripheral keyboards and mice. The TOE includes a wired remote controller: Remote Port Selector (RPS) that is available to customers as an additional purchase.  This device has the same firmware version as the models above.

The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the IOGEAR Secure KVM Switch Series devices were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 5. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 5. The product satisfies all of the security functional requirements stated in the IOGEAR Secure KVM Switch Series (Non-CAC Models) Security Target, version 1.0, January 12, 2022, when delivered and configured as identified in the product documentation listed in the aforementioned security target.

The evaluation underwent CCEVS Validator review. The evaluation was completed in March 2022. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.

IOGEAR Secure KVM Switch series devices enforce the following TOE security functional policies as specified in the ST.

Security Audit

The TOE generates audit records for the authorized administrator actions. Each audit record records a standard set of information such as date and time of the event, type of event, and the outcome (success or failure) of the event.

User Data Protection

The TOE controls and isolates information flowing between the peripheral device interfaces and a computer interface. The peripheral devices supported include USB keyboard; USB mouse; audio output; and (depending on device type) DisplayPort, DVI-I, or HDMI video. Some TOE models accept DisplayPort signals at the computer interface and internally convert the signals to HDMI signals and then convert back to DisplayPort for output to the console interface.

The TOE authorizes peripheral device connections with the TOE console ports based on the peripheral device type.

The TOE ensures that any previous information content of a resource is made unavailable upon the deallocation of the resource from a TOE computer interface immediately after the TOE switches to another selected computer and on start-up of the TOE.

The TOE provides a Reset to Factory Default function allowing authenticated authorized Administrators to remove all settings previously configured by the Administrator (such as HID blacklist). Once the Reset to Factory Default function has been completed, the Secure KVM will terminate the Administrator Logon mode, purge keyboard/mouse buffer, and power cycle the Secure KVM automatically.

Identification and Authentication

The TOE provides an identification and authentication function for the administrative user to perform administrative functions such as configuring the keyboard/mouse device filtering blacklist. The authorized administrator must logon by providing a valid password.

Security Management

The management functions are restricted to the authorized administrator and allow the TOE to be configured to reject specific USB keyboard/mouse devices using CDF blacklist parameters. Additionally, the TOE provides security management functions to Reset to Factory Default and to change the administrator password.

Protection of the TSF

The TOE runs a suite of self-tests during initial startup and after activating the reset button that includes a test of the basic TOE hardware and firmware integrity; a test of the basic computer-to-computer isolation; and a test of critical security functions (i.e., user control and anti-tampering). The TOE provides users with the capability to verify the integrity of the TSF and the TSF functionality.

The TOE resists physical attacks on the main TOE enclosure as well as the RPS enclosure for the purpose of gaining access to the internal components or to damage the anti-tampering battery by becoming permanently disabled. The TOE preserves a secure state by disabling the TOE when there is a failure of the power on self-test, or a failure of the anti-tampering function.

The TOE provides unambiguous detection of physical tampering that might compromise the TSF. The TSF provides the capability to determine whether physical tampering with the TSF's devices or TSF's elements has occurred. 

TOE Access

The TOE displays a continuous visual indication of the computer to which the user is currently connected, including on power up, and on reset.

Vendor Information