FIPS 140-2 | SMPTE ST 2110 IP | 4K HDMI 2.0 | JPEG

Securing devices for KVM applications

Overview

Secura KVM operates using Ethernet IP switched networks and bi-directional USB encrypted serial signals for control of input devices, such as Human Interface Device (HID) mouse, keyboard and Common Access Card (CAC) and Token Key readers. Secura KVM is designed to deliver up to 4K/60 resolutions to every monitor in the users’ workspace. Authorized users directly access network resources from Virtual Desktop Interface (VDI) servers through Thin/Zero Clients.

In an Ethernet environment, Secura KVM transmitters convert HDMI signals to industry-standard IP transport using a media-class, enterprise, Arista, Commercial Off-The-Shelf (COTS) IP switch. Source media is secured using FIPS 140-2 encryption that can only be accessed via the corresponding Secura KVM receiver which can decrypt the specified IP flow.

Features

  • AES 256 encryption with static key
  • 1 GB/s payloads using JPEG light compression for extremely low latency (< 15ms)
  • PESA’s exclusive Secura Control Suite for IP configuration/control, endpoint management, and virtual matrix KVM routing
  • HDMI audio including Dolby, AES67, and others
  • KVM control using PESA’s suite of router control panels or most third-party controllers
  • Video scaling

TYPICAL KVM SYSTEM

For KVM applications, secure USB is added to connect a Human Interface Device (HID) such as a keyboard, mouse or USB CAC and Token readers.

Secura KVM modules are initially configured as paired transmitter/receiver sets, but any module can be configured as either a transmitter or receiver using Secura control software

  • Each transmitter encrypts KVM data from the host for secure, encoded broadcast over an Ethernet infrastructure.
  • Secura KVM receiver modules decrypt the data broadcast by the transmitter module and delivers the data as KVM outputs to the workstation components.
  • The encrypted data is routed between Secura KVM transmitter and receiver modules through an Arista COTS IP switch or matrix routing device.
  • Only a properly configured and identified Secura KVM receiver module can decrypt the IP data stream broadcast by a Secura KVM transmitter
Secure and reliable audio and video transmission

KVM data between the transmitter and receiver is protected with NSA compliant, AES256 encryption, to guaranteeing confidentiality of the streamed content.

Analog audio embedding/de-embedding

External analog audio may be embedded to replace original HDMI audio. Audio may also be output over HDMI video or HDMI audio may be de-embedded to a rear panel audio connector.

Power over Ethernet

Secura KVM features Power-Over-Ethernet (PoE+), providing operating power for networking communication over a single Cat_x Ethernet cable. Secura KVM is compliant with PoE+ standard IEEE 802.3at. An external power supply may be added for power redundancy.

Specs & Ordering Info

SPECS

Specs

AV Connectivity HDMI 2.0 compliant with HDCP 1.4/2.2
Video Format All resolutions and frame rates up to 4096 x 2160 at 60fps 8-bit, 10-bit and 12-bit, 4:4:4. 4:2:2, and 4:2:0, HDR10 and HLG
Max Video Format 4K60 4:4:4
Video Codec JPEG
Video Processing Upscaler / downscaler at receive side, cropping, padding logo and text insertion
Audio Up to 8 channels all sampling rates including High Bit Rate Audio (HBR) LPCM, DTS, and Dolby formats (including ATMOS) External analog audio embedding / de-embedding AES67
Latency 15 ms end-to-end (encoder + decoder)
Security FIPS 140-2
Reliability Forward Error Correction (FEC) and Quality of Service (QoS)
Clock Synchronization Precision Time Protocol (PTP) IEEE 1588-2008, slave/master
AV Transport Protocols IP (unicast/multicast), UDP, RTP, RTCP, SAP/SDP, SMPTE ST 2110
Network Protocols DHCP, mDNS, IGMP, TCP/IP, ARP

Configuration

Network Based Web-based configuration manager (GUI) JSON API over WebSocket, Secure Remote System console
COM Port Command line interface
Upgrade Firmware field upgradable

Interfaces

Audio/Video HDMI 2.0 Input (Encoder only) HDMI 2.0 Output (Decoder only) 3.5 mm jack (TRS) analog audio input (Encoder only) and output (decoder only)
Communication 1Gb Ethernet RJ45, Serial RS-232
Others I2C, SPI, GPIO for additional interfaces (LED, IR, button, display)

Other Specs

Temperature Operating 0℃ to +55℃
Dimensions 200 x 116 x 23 mm (7.9 x 4.6 x 0.9 in)
Power Supply 12V DC- Power Connector
Power Over Ethernet PoE+ (IEEE 802.3at)
Power Consumption 15W typical
ORDERING INFO
SECURA-IP-KVM-TX Secura Tx KVM Endpoint
SECURA-IP-KVM-RX Secura Rx KVM Endpoint

Additional Resources

Brochure: Secura System Overview

Brochure: Secura KVM

 

 

 

For additional information on Secura: