FIPS 140-2 | IP | 4K HDMI 2.0 | JPEG | USB | CAC | HID| KVM
Ultra – Secure high efficiency AV over IP plus USB for CAC, HID and KVM signal extension for mission critical solutions

Overview
Secura KVM operates using Ethernet IP switched networks and bi-directional USB encrypted serial signals for control of input devices, such as Human Interface Device (HID) mouse, keyboard and Common Access Card (CAC) and Token Key readers. Secura KVM is designed to deliver up to 4K/60 resolutions to every monitor in the users’ workspace. Authorized users directly access network resources from Virtual Desktop Interface (VDI) servers through Thin/Zero Clients.
In an Ethernet environment, Secura KVM transmitters convert HDMI signals to industry-standard IP transport using a media-class, enterprise, Arista, Commercial Off-The-Shelf (COTS) IP switch. Source media is secured using FIPS 140-2 AES 256 encryption that can only be accessed via the corresponding Secura KVM receiver which can decrypt the specified IP flow.
Features
- AES 256 encryption with static key
- 1 GB/s payloads using JPEG light compression for extremely low latency (< 15ms)
- PESA’s exclusive Secura Command Center for IP configuration/control, endpoint management, and virtual matrix KVM routing
- HDMI audio including Dolby, AES67, and others
- KVM control using PESA’s suite of router control panels or most third-party controllers
- Video scaling
For KVM applications, secure USB is added to connect a Human Interface Device (HID) such as a keyboard, mouse or USB CAC and Token readers.
Secura KVM modules are initially configured as paired transmitter/receiver sets, but any module can be configured as either a transmitter or receiver using Secura control software
- Each transmitter encrypts KVM data from the host for secure, encoded broadcast over an Ethernet infrastructure.
- Secura KVM receiver modules decrypt the data broadcast by the transmitter module and delivers the data as KVM outputs to the workstation components.
- The encrypted data is routed between Secura KVM transmitter and receiver modules through an Arista COTS IP switch or matrix routing device.
- Only a properly configured and identified Secura KVM receiver module can decrypt the IP data stream broadcast by a Secura KVM transmitter

Secure and reliable audio and video transmission
KVM data between the transmitter and receiver is protected with NSA compliant, AES256 encryption, to guaranteeing confidentiality of the streamed content.

Analog audio embedding/de-embedding
External analog audio may be embedded to replace original HDMI audio. Audio may also be output over HDMI video or HDMI audio may be de-embedded to a rear panel audio connector.

Power over Ethernet
Secura KVM features Power-Over-Ethernet (PoE+), providing operating power for networking communication over a single Cat_x Ethernet cable. Secura KVM is compliant with PoE+ standard IEEE 802.3at. An external power supply may be added for power redundancy.
Specs & Ordering Info
Specs
AV Connectivity | HDMI 2.0 compliant with HDCP 1.4/2.2 |
Video Format | All resolutions and frame rates up to 4096 x 2160 at 60fps 8-bit, 10-bit and 12-bit, 4:4:4. 4:2:2, and 4:2:0, HDR10 and HLG |
Max Video Format | UHD 4K60 4:4:4 |
Video Codec | JPEG 2000 |
Video Processing | Upscaler / downscaler at receive side |
Audio | HDMI audio or front panel analog audio via 3.5 mm jack |
USB | USB 2.0 and higher |
Latency | 15ms end-to-end (encoder + decoder) |
Security | AES-256 fixed-key encryption |
Clock Synchronization | Precision Time Protocol (PTP) IEEE 1588-2008, slave/master (not required) |
Network Protocols | NMOS, mDNS, IGMP, TCP/IP, ARP |
Configuration
Network Based | Web-based configuration management (GUI) JSON API over WebSocket, Secura Command Center software |
Interfaces
Audio/Video | HDMI 2.0 Input (Encoder only) HDMI 2.0 Output (Decoder only) 3.5 mm jack (TRS) analog audio input (Encoder only) and output (decoder only) |
Communication | 1Gb Ethernet RJ45 and 10G Ethernet SFP+ |
Other Specs
Temperature | Operating 0℃ to +55℃ |
Dimensions | 200 x 116 x 23 mm (7.9 x 4.6 x 0.9 in) |
Power Supply | 12V DC- Power Connector |
Power Over Ethernet | PoE+ (IEEE 802.3at) |
Power Consumption | 15W typical |
SEC-IP-3000-TX | SECURA® Encoder Model 3000, AV over IP TX, HDMI In / IP Out, Secure |
SEC-IP-3000-RX | SECURA® Decoder Model 3000, AV over IP RX, IP In / HDMI Out, Secure |
SEC-IP-4000-TX | SECURA® Encoder Model 4000, AV over IP TX, HDMI In / IP Out, Secure |
SEC-IP-4000-RX | SECURA® Decoder Model 4000, AV over IP RX, IP In / HDMI Out, Secure |
SEC-IP-2000-TX | SECURA® IP/KVM Encoder Model 2000 TX, w/5 USB ports |
SEC-IP-4000-RX | SECURA® IP/KVM Decoder Model 2000 RX, w/5 USB ports |
SEC-IP-RKMNT | 2RU Rackmount Chassis, holds up to ten (10) SECURA® Bare Board Endpoints |
Additional Resources
Brochure: Secura Command Center
Brochure: Secura KVM
Brochure: Secura Touch Panel
Brochure: Secura C2 Use Case
Brochure: Secura Distributed C2 Use Case
Please contact sales@pesa.com for Data Sheets
Please contact support@pesa.com or sales@pesa.com for additional user guides or product manuals.
For additional information on Secura KVM:
Secura Videos: YouTube Channel
Press Release: PESA Releases Secura LION
Press Release: PESA Secura Complies with CNSA Cybersecurity Requirements
Press Release: PESA Releases Secura VDS-IP
Related Product Pages:
Secura Navigator Control Panel
Arista Switch Information- 750 Series
Related Applications Pages: