Media Flexibility | FIPS 140-2

Controls IP, SDI/Baseband/HDMI or Hybrid systems for complete design flexibility


The PESA Secura family of secure video distribution products, designed with security in mind, rely on the power and flexibility of Secura Command Center for configuration, control and management of the Secura workflow from source to glass. PESA’s A/V and KVM over IP solutions encompass multiple video, audio and control formats across multiple levels of authorization and access, with the Secura Command Center managing it all, seamlessly, within one system and simplifying the workflow and maintenance of the solution. 

Secura Command Center utilizes Arista enterprise COTS (Commercial Off-The-Shelf) network switches for network scalability, reliability and security. The PESA Secura A/V and KVM over IP distribution system and endpoints or nodes uses fixed-key AES-256 encryption to ensure that only the intended recipients can decrypt and access the media. With Security being our primary objective, it is no wonder why more military, government and corporations choose PESA for critical command and control (C2) environments.


Media Flexibility

  • HDMI
  • SDI
  • IP
  • KVM
  • USB
  • HDR

Military Grade Security

  • FIPS 140-2
  • Common Access Card (CAC) compliant
  • AES256 Encryption
  • Multiple Independent Levels of Security (MILS)
  • CNSA (Suite-B) Compliant
  • Mutual Authentication
  • Multifactor Authentication
  • JITC IO Certification*

Central Control Interface

  • Video and audio devices
  • IP Ethernet Switches
  • KVM and USB
  • SDI / HDMI Baseband routers
  • Control Surfaces


  • Provides an IP based central control manager for defining, configuring and managing video, audio and metadata as well as the inherent security classifications.
  • Works in small, physically-limited environments as well as large, distributed, network environments for complete system design elasticity.
  • Supports client - server architectures for enhanced physical security.
  • Uses servers in physically secure rack rooms, with secure thin/zero clients and endpoints providing authenticated and restricted access based on individual access authority.​
  • Open-Source Container architecture based on Docker and Kubernetes

 Secura Command Center defines, configures and manages all audio, video and USB signals as well as their inherent security classifications within one system, even as it scales. Common Access Card (CAC) authorization can be extended to CAC readers at locations where users needed to authenticate while secure PC or Thin Client assets remain in physically protected areas.

This Secura video, audio and KVM over IP distribution system can scale to thousands of endpoints utilizing the agile IP network fabric from Arista. Combining PESA Secura software with Arista network switches provides a robust IP architecture to deliver critical media signals when and where they are needed the most. The PESA Secura system was designed for demanding security requirements in order to protect sensitive assets from security breaches, insider threats and unauthorized use.  Each source and destination can be assigned a security level with fixed keys, along with transmit and receive endpoints according to their authorization assignment.

Typically housed in a secure and protected rack room environment, access to the physical device(s) is limited to authorized personnel and senior administration. The Secura Command Center is comprised of IP network services that include NMOS (Networked Media Open Specifications) registration and discovery, virtual matrix, and touch panel service combined with the legendary Cattrax / CattraxIP configuration tools. Collectively they manage and control the KVM or A/V over IP transmitters, receivers and HID/CAC USB devices.  Combined with a properly architected ethernet network the process is simple and extremely flexible.

  • NMOS – Networked Media Open Specification (NMOS) IS-04/05, from the Advanced Media Workflow Association (AMWA) is used for Registration and Discovery, identifying senders and receivers in the connected network. The Registration and Discovery Server (RDS) is additionally responsible for network names and addresses.
  • FIPS 140-2 – FIPS 140-2 encryption brings military-grade encryption audio, video and metadata essence flows. Secura A/V over IP and KVM endpoints support FIPS 140-2 encryption in accordance with the standards published by the National Institute of Standards and Technology (NIST).

Secura Command Center provides interfaces to control options, while PESA’s case-hardened encryption and FIPS 140-2 protects your content.

PESA can provide several options for authorized, physical control of media.

  • Hardware button panels
  • Software touch panels/surfaces may be incorporated into a system

Authorization examples for individuals to view and control media:

  • CAC (Conditional Access Card) or
  • Token Key device

Specs & Ordering Info



Inputup to 4Kp60 4:4:4 (single cable) HD, Full HD, 4K UHD (4:4:4) plus HDR
Outputup to 4Kp60 4:4:4 (single cable) HD, Full HD, 4K UHD (4:4:4) plus HDR
Video Resolution Display FormatsMixed (Dynamic) EDID
Low latency ~1ms
AudioDolby, Mono, Stereo,5.1



RJ451 Gb/s Copper Ethernet
RJ45 SFP10 Gbe Copper Ethernet
SFP/SFP+SFP+ 10Gb Fiber Ethernet (TRX)
HDMIHDMI 2.0 / HDCP 2.2 / HDMI 1.4 / HDMI 1.3
POEYes (RJ45)
Display Port Yes, with converter



Max Endpoints~1 Million plus+
mDNSYes – Registration and Discovery (NMOS)
IGMPv3 Yes
ARP No (Not Secure)
Open Architecture – Cloud Native Design 



Multi Factor AuthenticationYes
Number of Security Levelsunlimited
MILS LevelsYes
Video EncryptedYes (AES256)
Audio EncryptedYes (AES256)
USB Encrypted YES (PESA Crypto Module- FIPS Validated)
DoD APL and NIAP Secure SwitchYES (Arista with SDN and TPM)
NIST Certified FIPS 140-2 Encryption – YES!



PESA Crypto ModuleYes
NIST FIPS 140-2 Validation (CMVP)Yes (Cert 4021)
DoDIN APL SwitchesYes 
NIAP SwitchesYes
TAA Compliant Yes
Do Not Sell to US Adversaries YES


Environmental Specifications:

Operating Temperature0 – 40 °C
Humidity5% to 95%, non-condensing

Secura Command Center Software

SEC-IP-SCSW-3 Annual Term License for SECURA® Crypto System Control Software, per each PESA IP secure device
SEC-IP-SCSW-3RDP Annual Term License for SECURA® Crypto System Control Software (includes Software Maintenance)


Secura Command Center Hardware

SEC-IP-SCH-250 SECURA® Server, System Controller Hardware, 2RU, for systems with greater than 96 up to 250 Endpoints
SEC-IP-SCH-250-RD Redundant SECURA® Server, Hardware, 2RU, for systems with greater than 96 up to 250 Endpoints


Validated IP Switches and Accessories

DCS-7050QX2-32S-F+A Arista 7050X2 Switch, 32x40GbE, QSFP+, 4xSFP+, with 12 Month A-care Coverage
DCS-7050SX2-128-F+A Arista 7050X2, 96x10GbE, SFP+, 8xQSFP, with 12 Month A-care Coverage
DCS-7060CX2-32S-F+A Arista 7060X2, 32x100GbE, QSFP, 2xSFP+, with 12 Month A-care Coverage
Arista 7060X2, 32x100GbE, QSFP, 2xSFP+, with 12 Month A-care Coverage
Arista 7060X2, 48x25GbE, 6x100GbE, QSFP, with 12 Month A-care Coverage
Arista 7300X 32-port 40GbE QSFP+ linecard (Ships in chassis)
DCS-7300X-32Q-LC# Arista 7300X3 32-port 40GbE QSFP linecard for 7300X3 Series (Ships in chassis)


Secura Services and Extended Maintenance Options

OSC-DOM-DY1 Domestic On-site Commissioning Day 1 (per 8 hour day)(North America only)
OSC-DOM-ADDLDYS Domestic On-site Commissioning Additional Days (per 8 hour day)(North America only)
IPEXW Extension of warranty for hardware items (year 2-4)

For Endpoint and Panel parts please see respective pages.

Please contact us at for more information.

Additional Resources

Brochure: Secura Command Center

Brochure: Secura Navigator Touch Panel

Please contact or for additional user guides or product manuals.