FIPS 140-2 | IP | 4K HDMI 2.0 | JPEG

Securing devices for KVM applications

Overview

Secura KVM operates using Ethernet IP switched networks and bi-directional USB encrypted serial signals for control of input devices, such as Human Interface Device (HID) mouse, keyboard and Common Access Card (CAC) and Token Key readers. Secura KVM is designed to deliver up to 4K/60 resolutions to every monitor in the users’ workspace. Authorized users directly access network resources from Virtual Desktop Interface (VDI) servers through Thin/Zero Clients.

In an Ethernet environment, Secura KVM transmitters convert HDMI signals to industry-standard IP transport using a media-class, enterprise, Arista, Commercial Off-The-Shelf (COTS) IP switch. Source media is secured using FIPS 140-2 AES 256 encryption that can only be accessed via the corresponding Secura KVM receiver which can decrypt the specified IP flow.

Features

  • AES 256 encryption with static key
  • 1 GB/s payloads using JPEG light compression for extremely low latency (< 15ms)
  • PESA’s exclusive Secura Control Suite for IP configuration/control, endpoint management, and virtual matrix KVM routing
  • HDMI audio including Dolby, AES67, and others
  • KVM control using PESA’s suite of router control panels or most third-party controllers
  • Video scaling

TYPICAL KVM SYSTEM

For KVM applications, secure USB is added to connect a Human Interface Device (HID) such as a keyboard, mouse or USB CAC and Token readers.

Secura KVM modules are initially configured as paired transmitter/receiver sets, but any module can be configured as either a transmitter or receiver using Secura control software

  • Each transmitter encrypts KVM data from the host for secure, encoded broadcast over an Ethernet infrastructure.
  • Secura KVM receiver modules decrypt the data broadcast by the transmitter module and delivers the data as KVM outputs to the workstation components.
  • The encrypted data is routed between Secura KVM transmitter and receiver modules through an Arista COTS IP switch or matrix routing device.
  • Only a properly configured and identified Secura KVM receiver module can decrypt the IP data stream broadcast by a Secura KVM transmitter
Secure and reliable audio and video transmission

KVM data between the transmitter and receiver is protected with NSA compliant, AES256 encryption, to guaranteeing confidentiality of the streamed content.

Analog audio embedding/de-embedding

External analog audio may be embedded to replace original HDMI audio. Audio may also be output over HDMI video or HDMI audio may be de-embedded to a rear panel audio connector.

Power over Ethernet

Secura KVM features Power-Over-Ethernet (PoE+), providing operating power for networking communication over a single Cat_x Ethernet cable. Secura KVM is compliant with PoE+ standard IEEE 802.3at. An external power supply may be added for power redundancy.

Specs & Ordering Info

SPECS

Specs

AV ConnectivityHDMI 2.0 compliant with HDCP 1.4/2.2
Video FormatAll resolutions and frame rates up to 4096 x 2160 at 60fps 8-bit, 10-bit and 12-bit, 4:4:4. 4:2:2, and 4:2:0, HDR10 and HLG
Max Video Format4K60 4:4:4
Video CodecJPEG 2000
Video ProcessingUpscaler / downscaler at receive side
AudioHDMI audio or front panel analog audio via 3.5 mm jack
USBUSB 2.0 and higher
Latency15ms end-to-end (encoder + decoder)
SecurityAES-256 fixed-key encryption
Clock SynchronizationPrecision Time Protocol (PTP) IEEE 1588-2008, slave/master (not required)
Network ProtocolsNMOS, mDNS, IGMP, TCP/IP, ARP

 

Configuration

Network BasedWeb-based configuration management (GUI) JSON API over WebSocket, Secura Command Center software

 

Interfaces

Audio/VideoHDMI 2.0 Input (Encoder only)
HDMI 2.0 Output (Decoder only)
3.5 mm jack (TRS) analog audio input (Encoder only) and output (decoder only)
Communication1Gb Ethernet RJ45 and 10G Ethernet SFP+

 

Other Specs

TemperatureOperating 0℃ to +55℃
Dimensions200 x 116 x 23 mm
(7.9 x 4.6 x 0.9 in)
Power Supply12V DC- Power Connector
Power Over EthernetPoE+ (IEEE 802.3at)
Power Consumption15W typical
ORDERING INFO

 

SEC-IP-KVM-TXSecura Endpoint, AV TX, w/USB Support for KM HID Devices, Hardware Only
SEC-IP-KVM-RXSecura Endpoint, AV RX, w/USB Support for KM HID Devices, Hardware Only
SEC-IP-CAC-TXSecura Endpoint, AV TX, w/USB Support for CAC Reader Device, Hardware Only
SEC-IP-CAC-RXSecura Endpoint, AV RX, w/USB Support for CAC Reader Device, Hardware Only
SEPS-KVM-TXSoftware for Secura TX Endpoint, w/AV & USB Support for KVM, Per Endpoint
SEPS-KVM-RXSoftware for Secura RX Endpoint, w/AV & USB Support for KVM, Per Endpoint
SEPS-CAC-TXSoftware for Secura TX Endpoint, w/AV & USB Support for CAC Reader, Per Endpoint
SEPS-CAC-RXSoftware for Secura RX Endpoint, w/AV & USB Support for CAC Reader, Per Endpoint

 

Additional Resources

Brochure: Secura Command Center

Brochure: Secura KVM

Brochure: Secura Touch Panel

Please contact support@pesa.com or sales@pesa.com for additional user guides or product manuals.

For additional information on Secura: