StarTech CK4-D108C Secure 8 Port KVM Switch

• CK4-D102C 2-Port SH Secure Pro DVI KVM w/audio and CAC, PP 4.0
• CK4-D202C 2-Port DH Secure Pro DVI KVM w/audio and CAC, PP 4.0
• CK4-D104C 4-Port SH Secure Pro DVI KVM w/audio and CAC, PP 4.0
• CK4-D204C 4-Port DH Secure Pro DVI KVM w/audio and CAC, PP 4.0
• CK4-D404C 4-Port QH Secure Pro DVI KVM w/audio and CAC, PP 4.0
• CK4-D108C 8-Port SH Secure Pro DVI KVM w/audio and CAC, PP 4.0
• CK4-D208C 8-Port DH Secure Pro DVI KVM w/audio and CAC, PP 4.0
• CK4-D116C 16-Port SH Secure Pro DVI KVM w/audio and CAC, PP 4.0

PRODUCT USAGE INSTRUCTIONS

TECHNICAL SPECIFICATIONS

WHAT’S IN THE BOX?

SECURITY FEATURES

ANTI-TAMPER SWITCHES
Each model is equipped with internal Anti-Tamper switches, which sense attempts to open the device enclosure. Once the system identifies such an attempt, all the front panel LEDs will flash rapidly, the internal buzzers will beep, and the unit will become useless by shutting off connection with all attached PCs and peripherals, disabling any functionality.

TAMPER-EVIDENT SEAL
The enclosure of the unit is protected with a tamper-evident seal to provide visual evidence showing if the unit has been opened.

PROTECTED FIRMWARE
The controller of the unit has a special protection feature that prevents reprogramming or reading the firmware.

HIGH ISOLATION ON USB CHANNELS
Opto-isolators are used in the unit to keep USB data paths electrically isolated from each other, providing high isolation and preventing data leakage between ports.

SECURE EDID EMULATION
The unit prevents unwanted and insecure data from transmitting through the DDC lines by means of secure EDID learning and emulation.

SELF-TEST
A self-test is performed each time the KVM is powered on as part of its boot-up sequence. If the KVM starts up correctly and is functional, the self-test has passed. However, if all Front Panel LEDs are on and not flashing, the power-up self-test has failed, and all functions are disabled. Check if any of the front panel port selection buttons are jammed. In this case, release the jammed button and recycle the power.

INSTALLATION

SYSTEM REQUIREMENTS

1. StarTech.com Secure PSS is compatible with standard personal/portable computers, servers, or thin clients, running operating systems such as Windows or Linux.
2. The peripheral devices that are supported by the KVM are listed in the following table:

INSTALLATION (Continued)

SINGLE-HEAD UNITS:

1. Ensure that power is turned off or disconnected from the unit and the computers.
2. Use a DVI cable to connect the DVI output port from each computer to the corresponding DVI IN ports of the unit.
3. Use a USB cable (Type-A to Type-B) to connect a USB port on each computer to the respective USB ports of the unit.
4. Optionally connect a stereo audio cable (3.5mm to 3.5mm) to connect the audio output of the computers to the AUDIO IN ports of the unit.
5. Connect a monitor to the DVI OUT console port of the unit using a DVI cable.
6. Connect a USB keyboard and mouse to the two USB console ports.
7. Optionally connect stereo speakers to the AUDIO OUT port of the unit.
8. Optionally connect CAC (COMMON ACCESS CARD, SMART CARD READER) to the CAC port inthe user console interface.
9. Finally, power on the KVM by connecting a 12VDC power supply to the power connector, and then turn on all the computers.

Note: The computer connected to port 1 will always be selected by default after powering up.
Note: You can connect up to 2 computers to the 2-port KVM, up to 4 computers to the 4-port KVM, up to 8 computers to the 8-port KVM, and up to 16 computers to the 16-port KVM.

IMPORTANT WARNINGS – For security reasons:

• This product does not support wireless devices. Do not attempt to use a wireless keyboard or a wireless mouse with this product.
• This product does not support keyboards with integrated USB hubs or USB ports. Only use standard (HID) USB keyboards with this device.
• This product does not support microphone audio input or line input. Do not connect any microphones or headsets with microphones to this device.
• Connection of authentication devices (CAC) with external power sources is prohibited

INSTALLATION (Continued)

MULTI-HEAD UNITS:

1. Ensure that power is turned off or disconnected from the unit and the computers.
2. Use DVI cables to connect the DVI output ports of each computer to the corresponding DVI IN ports of the unit. For example, if using CK4-D404C, the four DVI ports of one computer must all be connected to one channel.
   • The DVI IN connectors that belong to the same channel are arranged vertically.
3. Use a USB cable (Type-A to Type-B) to connect a USB port on each computer to the respective USB ports of the unit.
4. Optionally connect a stereo audio cable (3.5mm on both ends) to connect the audio output of the computer to the AUDIO IN ports of the unit.
5. Connect the monitors to the DisplayPort OUT console ports of the unit using DisplayPort cables.
   • The DVI IN ports on one row will be switched to the DVI OUT of the same row.
6. Connect a USB keyboard and mouse in the two USB console ports.
7. Optionally connect stereo speakers to the AUDIO OUT port of the unit.
8. Optionally connect the CAC (smart card reader) to the CAC port in the user console interface.
9. Power on the KVM by connecting a 12VDC power supply to the power connector, and then turn on all the computers.
   • Note: The computer connected to port 1 will always be selected by default after powering up.

INSTALLATION (Continued)

INSTALLATION (Continued)

EDID LEARN:
The KVM is designed to learn the connected monitor’s EDID upon power-up. In the event of connecting a new monitor to the KVM, a power recycle is required. The KVM will indicate to the user the EDID learn process by flashing the front panel’s LEDs. Port one green and push button blue LEDs will both begin to flash for about 10 seconds. When the LEDs stop flashing, the EDID learn process is done. If the KVM has more than one video board (such as dual-head and quad-head models), then the unit will continue to learn the EDIDs of the connected monitors and indicate the progress of the process by flashing the next port selection green and push button blue LED,s respectively. The monitor must be connected to the video output connector located in the console space at the back of the KVM during the EDID learn process.  If the read EDID from the connected monitor is identical to the current stored EDID in the KVM, then the EDID learn function will be skipped.

CAC (COMMON ACCESS CARD, SMART CARD READER)
INSTALLATION
The following steps are intended for the system administrator or IT manager only. If you have the optional CAC ports, there will be 2 ports on a 2-host ports KVM, 4 ports on a 4-host ports KVM, 8 ports on an 8-host ports KVM, and 16 ports on a 16-host ports KVM. CAC connection to the computer requires a USB cable connection separate from the keyboard and mouse. This allows the CAC to be connected independently from the keyboard and mouse. It also allows the user to select whether CAC for a certain computer is supported or not.

1. Ensure that power is turned off or disconnected from the unit and the computer.
2. Use a USB cable (Type-A to Type-B) to connect a USB port on a computer to its respective CAC USB ports on the KVM. Do not connect the USB cable if CAC functionality is not needed for that computer.
3. Connect a CAC (smart card reader) to the CAC port in the user console interface.
4. Power on the KVM by connecting a 12VDC power supply to the power connector, and then turn on all the computers.
5. To disable CAC for any channel (all CAC ports are enabled as default), use the front panel buttons to switch the KVM to the channel whose CAC mode you wish to change. Once the channel is selected, the button LED for this specific channel should be on (CAC port enabled). Press and hold the button for 3 seconds until the button LED turns off. The CAC port is now disabled for this channel.
6. To enable CAC for any channel, use the front panel buttons to switch the KVM to the channel whose CAC  mode you wish to change. Once the channel is selected, the button LED for this specific channel should be off (CAC port disabled). Press and hold the button for 3 seconds until the button LED turns on. The CAC port is now enabled for this channel. An active session on a computer is terminated upon removal of the CAC device.

Note: The open session will be immediately terminated upon the removal of the registered CAC device

CAC PORT CONFIGURATION
The following steps are intended for the system administrator and operators (users).

Note: Only one computer connected to port 1 is required for this operation. CAC port Configuration is an optional feature, allowing registration of any USB peripheral to operate with the KVM. Only one peripheral can be registered, and only the registered peripheral will operate with the KVM. By default, when no peripheral is registered, the KVM will operate with any Smart Card Reader.

CONFIGURE THE CAC PORT VIA USER MENU OPTIONS

1. Open the Administration and Security Management Program.
2. Using the keyboard, press the Alt key twice and type “cnfg”.
3. At this stage, the mouse connected to the KVM will stop functioning.
4. Enter the default username “user” and press Enter.
5. Enter the default password “12345” andpress Enter.
6. Select option 2 from the menu on your screen and press Enter.
7. Connect the peripheral device to be registered to the CAC USB port in the console side of the KVM and wait until the KVM is reading the new peripheral information.
8. The KVM will list the information of the connected peripheral on the screen and buzz 3 times when registration is completed

AUDITING: Dumping the Event Log via User Menu Options

The following steps are intended for the system administrator.
Note: Only one computer connected to port 1 is required for this operation. The Event Log is a detailed report of critical activities stored in the KVM memory. A comprehensive feature list and guidance for Administration and Security Management Tools can be found in the Administrator’s Guide available for download from www.StarTech.com/support.

To view or dump the Event Log:

1. Open the Administration and Security Management Program.
2. Using the keyboard, press the Alt key twice and type “cnfg”.
3. Enter the default admin name “admin” and press Enter.
4. Enter the default password “12345” and press Enter.
5. Request a Log Dump by selecting option 5 in the menu. (Shown in Figure 12-1)

* See Administration and Security Management Tool Guidance for detailed information.

RESET: Restore Factory Defaults

The following steps are intended for the system administrator.
Note: Only one computer connected to port 1 is required for this operation. Restore Factory Defaults will reset all settings on the KVM to their original state.

• CAC port registration will be removed.
• KVM settings will be reset to factory defaults.

To Restore Factory Defaults via User Menu Options:

1. Open the Administration and Security Management Program.
2. Using the keyboard, press the Alt key twice and type “cnfg”.
3. Enter the default admin name “admin” and press Enter.
4. Enter the default password “12345” and press Enter.
5. Select option 7 from the menu on your screen and press Enter. (Menu shown in Figure 12-1)

* See Administration and Security Management Tool Guidance for detailed information.

LED’s BEHAVIOR

EDID Learn – Front Panel LEDs:
All LEDs are turned on for 1 second. Then:

• Port 1 LEDs will flash until the end of the process.
• Port 2 LEDs will flash until the end of the process if a second video board exists (Dual-head KVM).
• Port 3 LEDs will flash until the end of the process if a third video board exists (Quad-head KVM).
• Port 4 LEDs will flash until the end of the process if a fourth video board exists (Quad-head KVM).

IMPORTANT!

• If all the Front Panel LEDs are flashing and the buzzer is beeping, the KVM has been TAMPERED with, and all functions are permanently disabled.
• Please contact StarTech.com technical support at  www.StarTech.com/Contact.
• If all Front Panel LEDs are on and not flashing, the POWER UP SELF TEST has failedand all functions are disabled.
• Check if any of the front panel port selection buttons are jammed. In this case, release the jammed button and recycle the power.
• If pthe power-up self-test is still failing, please contact StarTech.com technical support at   www.StarTech.com/Contact.

SYSTEM OPERATION

FRONT PANEL CONTROL
To switch to an input port, simply push the desired input button on the front panel of the KVM. If an input port is selected, the LED of that port will turn on. An open session is terminated upon switching to a different computer.

TROUBLESHOOTING

NO POWER

• Make sure that the power adapter is securely connected to the power connector of the unit.
• Check the output voltage of the power supply and make sure that the voltage value is around 12VDC.
• Replace the power supply.

NO VIDEO

• Check if all the video cables are connected properly.
• Connect the computer directly to the monitor to verify that your monitor and computer are functioning properly.
• Restart the computers.+

KEYBOARD IS NOT WORKING

• Check if the keyboard is properly connected to the unit.
• Check if the USB cables connecting the unit and the computers are properly connected.
• Try connecting the USB to the computer to a different port.
• Make sure that the keyboard works when directly connected to the computer.
• Replace the keyboard.

Note: The NUM, CAPS, and SCROLL Lock LED indicators on the keyboard are not supposed to light up if connected to the KVM.

MOUSE IS NOT WORKING

• Check if the mouse is properly connected to the unit.
• Try connecting the USB to the computer to a different port.
• Make sure that the mouse works when directly connected to the computer.
• Replace the mouse.

NO AUDIO

• Check if all the audio cables are connected properly.
• Connect the speakers directly to the computer to verify that the speakers and the computer audio are functioning properly.
• Check the audio settings of the computer and verify that the audio output is through the speakers. NO CAC (COMMON ACCESS CARD, SMART CARD READER)
• Check if the USB cables connecting the unit and the computers are properly connected.
• Make sure the CAC port is enabled.

Warranty Information
For information regarding the warranty of this product, please visit: www.StarTech.com/Warranty

NOTICE
The information contained in this document is subject to change without notice. StarTech.com makes no warranty of any kind about this material, including but not limited to, implied warranties of merchantability and fitness for a particular purpose. StarTech.com will not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. No part of this document may be photocopied, reproduced, or translated into another language without prior written consent from StarTech.com, Ltd.

FAQ

What Is EDID Learn And How Is It Triggered?

The EDID Learn process is triggered only during the KVM’s startup sequence. This behavior aligns with the NIAP 4.0 Protection Profile requirements, which restrict continuous EDID communication. Under this standard, the KVM may only receive EDID data from the monitor during initialization to minimize active data exchange between the monitor and the KVM, thereby enhancing isolation and overall device security. Ultimate fix: KVM reset.

Why Do Different Ports Have Different LED Colors?

The color-coded LEDs serve a security purpose by allowing users to clearly and visually confirm which computer is active before entering sensitive data. This feature reduces the risk of accidental data entry on the wrong system. (First: green, last: red, middle: orange.)

Does The KVM Work With Converters Or Adapters?

No, the use of converters or adapters is not recommended.

What Issues Does A KVM Reset Fix?

A reset can resolve video or EDID issues, CAC reader drops, or detection issues caused by a power outage.

Is The Software Utility Required?

No, but it is recommended to update the username and password during initial setup

Does The Software Utility Work On Operating Systems Other Than Windows?

No.

How Big Is The Log File Buffer?

FIFO – 100 entries.

Can The Time Zone Be Changed?

No, the default time zone is Pacific Time (USA).

Is There A Battery Internally?

Yes.

Does the KVM Have Anti-Tamper Features?

Yes

Can The Onboard Buzzer Be Disabled?

No.

Do Special Keys (Media Shortcut Keys) Work?

No, using them may cause unexpected behavior.

Documents / Resources

StarTech CK4-D108C Secure 8 Port Kvm Switch [pdf] Instruction Manual CK4-D108C Secure 8 Port Kvm Switch, CK4-D108C, Secure 8 Port Kvm Switch, Secure 8 Port Kvm Switch, Secure 8 Port, Kvm Switch

References

• User Manual