User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme...

30
Advanced Secure USB Switch User Manual F1DN104S – Advanced Secure 4-Port USB Switch Document Number 8820-01349 Rev. B

Transcript of User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme...

Page 1: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

Advanced Secure USB Switch

User ManualF1DN104S – Advanced Secure 4-Port USB Switch

Document Number 8820-01349 Rev. B

Page 2: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

1Belkin® Advanced Secure USB Switch User Manual

Table of ConTenTs

SECTIONS 1 2 3 4 5 6 7Table of Contents

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2What is a Secure USB Switch? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2Package Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2Safety Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4Security Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4Operational Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Equipment Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6Computers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7Belkin Advanced Secure USB Switch Features . . . . . . . . . . . . . . . . 10Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12Before Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12Connecting the Secure USB Switch . . . . . . . . . . . . . . . . . . . . . . . . . 12Defining the USB Device Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

additional options and settings . . . . . . . . . . . . . . . . . . . . . . . . . . . 18Viewing USB Switch Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18Viewing Connection Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18Saving, Opening and Loading Preset Configurations. . . . . . . . . . . . 19Set/Change Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20Lock Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20DCU Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20USB Switch Configuration Samples . . . . . . . . . . . . . . . . . . . . . . . . . 22

Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Page 3: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

2Belkin® Advanced Secure USB Switch User Manual

InTroduCTIon

SECTIONSTable of Contents 2 3 4 5 6 71

Thank you for purchasing this Advanced Secure USB Switch.

This Switch is a unique product that enables users to securely share any USB device between up to four different computers.

You can apply your organization’s policy of security and operational regulations regarding USB devices and their uses, including share guidelines for USB devices between the different organization networks.

The Advanced Secure USB Switch is designed for use in secure defense and intelligence environments across wide security gaps. It provides the highest security safeguards and features, meeting current and future cyber prevention requirements.

This User Manual provides all of the information you will need to install and operate your new Switch. In addition, there is troubleshooting guidance—in the unlikely event of a problem.

What is a secure usb switch?

There are cases where one user needs to work with a USB device on more than one computer. The Switch enables setting rules stating which USB devices are allowed or not allowed for each of one of the computers.

Package Contents

• Advanced Secure USB Switch

• 12V 1A DC Power Supply

• Interchangeable Port Color Chips

• Port-Naming Labels

• CD Configuration Software

• 6ft Mini USB to USB programming cable (F3U138b06)

• 4 USB Cables (F3U133b06)

• User Manual

• Quick Start Guide

Important security note: If you are aware of potential security vulnerability while installing or operating this product, we encourage you to contact us immediately at the following email address: gov_security@belkin .com

Important: This product is equipped with an always-on active anti-tamper system. Any attempt to open the enclosure may activate the anti-tamper system and render the unit permanently inoperable. If the unit’s enclosure appears disrupted or if all the channel LEDs are on (RED), please call Belkin Technical Support at (800) 282-2355.

baCK To Table of ConTenTs >

Page 4: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

3Belkin® Advanced Secure USB Switch User Manual

InTroduCTIon

SECTIONSTable of Contents 2 3 4 5 6 71

safety Precautions

• Please read the following safety precautions carefully before using the Secure USB Switch:

• Before cleaning, disconnect the product from DC power.

• Be sure not to expose the product to excessive humidity.

• Be sure to install the product on a clean secure surface.

• Do not place the DC power cord in a path of foot traffic.

• If the product is not used for a long period of time, remove the product’s wall-mount power supply from the mains jack.

• If one of the following situations occurs, get the product checked by a qualified service technician:

– The product’s power supply is overheated, damaged, broken, causes smoke or shortens the mains power socket.

– Liquid penetrates the product’s case.

– The product is exposed to excessive moisture or water.

– The product is not working well even after carefully following the instructions in this user’s manual.

– The product has been dropped or is physically damaged.

– The product has obvious signs of breakage or loose internal parts.

• The wall-mount power supply used with this product should be the model supplied by the manufacturer or an approved equivalent provided by Belkin or an authorized service provider. The use of improper power source will void product warranty.

• The product should be stored and used only in temperature- and humidity-controlled environments as defined in the product’s environmental specifications.

baCK To Table of ConTenTs >

Page 5: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

4Belkin® Advanced Secure USB Switch User Manual

overvIeW

SECTIONSTable of Contents 1 3 4 5 6 72

security features

The Advanced Secure USB Switch is the only commercially available Secure USB Switch. This product is a derivative of high-security product used in the latest NATO nuclear submarines. Below is a summary of some of the security features incorporated into the product.

usb device filtering

The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class, Subclass, Protocol, Serial number, VID and PID, and more.

no shared resources

The Belkin Secure USB Switch is designed to securely operate even when peripheral devices are vulnerable to signaling attacks. The Switch does not allow computer access to any shared resource and does not share controllable power sources, preventing data leakages between channels altogether.

assign usb devices to specific Computers

The Belkin Secure USB Switch provides the ability to assign a specific type of USB device only to some of the computers connected to it, providing a more exact and secure USB device policy.

non-reprogrammable firmware

The Switch features custom firmware that is not reprogrammable, preventing the ability to remotely attack the USB Switch control logic.

solid-aluminum, uni-body enclosure

The one-piece aluminum enclosure reduces the entry points into the product’s electronics and minimizes radiated signals that can be snooped or intercepted.

active always-on anti-Tamper

An active chassis anti-tamper system prevents electronic circuitry from being accessed and tampered with by permanently disabling the product once tampering is detected.

Holographic Tamper-evident labels

Four serially numbered holographic security tamper-evident labels are placed on the enclosure surface to provide a visual indication if the Switch has been opened or compromised.

secure Packaging

“Tear away” packaging ensures secure delivery of the Switch as it is routed to the end user.

Password Protect switch settings

To prevent unauthorized users from changing the applied USB device policy the Belkin Advanced Secure USB Switch is protected by a password that can be changed only by an authorized administrator.

Please note: Belkin Secure products cannot be upgraded, serviced or fixed.

baCK To Table of ConTenTs >

Page 6: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

5Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 3 4 5 6 7

overvIeW

2

operational features

The Belkin Advanced Secure USB Switch was designed for today’s IT environment with the user in mind. A summary of some of the features incorporated into the product is listed below:

Wide variety of usb devices are supported

This Switch was designed and tested to support the widest variety of USB devices.

Hot swap usb devices

Allows hot-swapping of USB devices while still connected to the target computers. This enables organizations to create multiple USB device rules, allowing the users to share devices in a single configuration.

easy-to-use, Password Protected Programing software (for administrators)

Administrators can program the Switch using its easy-to-use, built-in application.

Password Protected software

Only authorized users have access to defined settings through password protection.

baCK To Table of ConTenTs >

Page 7: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

6Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 3 4 5 6 7

overvIeW

2

equipment requirements

Cables

Belkin highly recommends the use of Belkin Cable Kits for your product to help ensure superior security and performance. These cables offer the highest quality possible and optimal data transmission.

One cable is required per connected computer.

Please note: The use of cables other than those provided by Belkin is not recommended. The use of other cables may affect system security and may permanently damage the product. This may void product warranty.

note: Due to USB signal limitations, the cable length cannot exceed 15 feet (4.6m).

belkin usb Cables:F3U133-06 – 6 ft. (1.8m)F3U133-10 – 10 ft. (3m)

baCK To Table of ConTenTs >

Page 8: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

7Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 3 4 5 6 7

overvIeW

2

Computers

The Belkin Advanced Secure USB Switch is compatible with computers, thin-clients, servers and laptops running on, but not limited to, the following OS platforms:

• Windows® 2000

• Windows XP (Home/Professional)

• Windows 2003 Server

• Windows 7

• Windows 8

• Windows Vista®

• Mac OS® X v10.3 and higher

Laptop docking stations having USB ports are supported.

For the latest compatibility list, see the Belkin website or contact Belkin support.

note: USB Hubs are not supported by the Belkin Secure USB switch in any way. Any device connected to a USB hub will be blocked by the Secure USB switch. Any other USB device will work given the correct USB policy.

desktop Controller unit (dCu) support

It is possible to chain the USB Switch to Belkin Advance Secure KVM Switch via Belkin Desktop Controller Unit.

Once Chained the USB switch will be synchronized with the Belkin Advance Secure KVM Switch. A USB device connected to the Secure USB Switch will be mapped to the active port of the KVM. This set-up will allow Secure KVM users to use devices such as: touch screens and web cameras.

AUX Port

KVM Port

dCu

DCU Portusb switch back

DCU PortKvM switch back

P/N F1D9036-10Optional - Not included with the Secure USB Switch

RJ14 6 ft. DCU CableIncluded in the DCU Kit

baCK To Table of ConTenTs >

Page 9: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

8Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 3 4 5 6 7

overvIeW

2

active anti-Tampering system

Belkin Advanced Secure USB Switch is equipped with an always-on active anti-tampering system. If mechanical intrusion is detected by this system, the product will be permanently disabled and the LEDs will flash continuously. If a DCU is used, the DCU will indicate that the product has been tampered with.

If the product indicates a tampered state (all leds flashing continuously), please call belkin Technical support and avoid using the product .

e-lock usb Cable / e-lock usb brackets

In many organizations the use of USB devices and even the use of the USB ports of the computers is highly sensitive and monitored carefully.

Users who are using the Secure USB switch can easily bypass the security mechanism by disconnecting the USB cables either from the switch or PC. The user can then connect unauthorized\unsupervised USB devices.

The Optional USB e-locks cables combined with the USB switch will form an electronic lock for the PC USB ports preventing unauthorized use of USB peripheral. The user will have to use the supervised Secure USB switch for that. The USB e-lock is an optional accessory that can be purchased separately and used in conjunction with the secure USB switch.

The USB e-lock is a USB cable with a normal USB – B connector that connects to the Secure USB Switch and locks using a locking bracket.

E-Lock USB Brackets

DCU

USB

USB Device

USB

USB

USB Admin43

21

USB4USB3

USB2USB1

USB

USB

USB

USB

The other side of the cable is a special USB Type A plug with electromechanical lock mechanism, which secures the plug inside any standard USB jack.

Once the USB e-lock cable is inserted, it can only be removed with special command from the Secure USB Switch.

It is locked by default, even when power is off.

The cable is 6 ft. long (1.9 m).

E-Locks are an optional kit that can be bought separately. sKu: F1DN105Edescription: ADVANCED SECURE USB SWITCH E-LOCK KIT

E-Lock USB Cable

baCK To Table of ConTenTs >

Page 10: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

9Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 3 4 5 6 7

overvIeW

2

f1dn104s front Panel features

21

3 6

4 5

1 Port Selector 3 Color Chip 5 Lock LED2 LED Indicator 4 Tamper-Evident Label 6 Lock Button

IMPorTanT noTICe:

If for any reason the tamper-evident seal is missing, appears disrupted, or looks different than the example shown here, please call Belkin Technical Support at: (800) 282-2355

12345678

baCK To Table of ConTenTs >

Page 11: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

10Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 3 4 5 6 7

overvIeW

2

f1dn104s back Panel features

32 41

5 6

1 DCU Port 3 Device USB Jack 5 Admin Configuration Port2 Device Status LED 4 Host DPP USB Cable Jack 6 DC Power Jack

baCK To Table of ConTenTs >

Page 12: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

11Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 3 4 5 6 7

overvIeW

2

specifications

Part no . F1DN104S

enclosure Heavy-duty extruded aluminum enclosure with metal faceplate

Power requirements 12V DC, 1A (maximum) power adapter with center-pin-positive polarity

aC Input 100 to 240VAC

no . of secure Channels 4

operating Temp 32° to 104° F (0° to 40° C)

storage Temp -4° to 140° F (-20° to 60° C)

Humidity 0-80% RH, non-condensing

dimensions 272 (W) x 82 (D) x 30 (H) mm / 10.7 (W) x 3.2 (D) x 1.18 (H) inches

Weight 1 kg. (2.2 lbs.)

Made in USA

Product design life-cycle 15 years

Warranty 3 years

baCK To Table of ConTenTs >

Page 13: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

12Belkin® Advanced Secure USB Switch User Manual

InsTallaTIon

SECTIONSTable of Contents 1 2 4 5 6 73

before Installation

unpacking the Product

Before opening the Belkin Advanced Secure USB Switch packaging, inspect the packaging seal condition to assure that product was not accessed or tampered with during delivery. If the packaging seal looks suspicious, contact Belkin Technical Support and do not use the product.

After removing the packaging seal, please inspect packaging contents to verify that required components included match the list in the Package Contents section of this manual.

After the Belkin Advanced Secure USB Switch is removed from its packaging materials, inspect the tampering-evident label to assure that product is properly sealed. If the label is damaged or missing, contact Belkin Tech Support and do not use the product.

Warning: Avoid placing cables near f luorescent lights, air-conditioning equipment, or machines that create electrical noise (e.g., vacuum cleaners).

Consider the following when deciding where to place the Switch:

The location of your computers in relation to your console.

The length of the cables used to connect the computers to the Switch.

Connecting the secure usb switch

step 1 – Connecting the Computers

Connect up to four computers to the Secure USB Switch using the following steps:

Connect each computer with a USB cable (Belkin F3U133 series cable, sold separately). For additional details on cables see page 6. The USB cable can be connected to any free USB port on the computer.

note: If the number of computers used is less than the number of USB channels (4) connect the computers in proper order 1, 2 and then 3. The USB cable must be connected directly to a free USB port on the computer, with no USB hubs or other devices in between.

step 2 – Power up

1. Power up the Secure USB Switch by connecting the DC power plug.

2. Power up the connected computers.

If you encounter an error, check your cable connections for that computer and reboot. If the problem persists, please refer to the Troubleshooting section on page 23.

baCK To Table of ConTenTs >

Page 14: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

13Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 4 5 6 7

InsTallaTIon

3

Important: By default the USB Switch is loaded with a configuration to allow only USB authentication devices. All other USB devices will be blocked on all ports.

administrator setup

After install ing the Secure USB Switch, use the USB Device Configuration Utility (UCU) to set USB device policies.

defining the usb device Policies

The USB device policies are configured using the USB Device Configuration Utility, which lists allowed and blocked devices.

Allowed devices are listed in the white list, and blocked devices are listed in the black list.

note: Devices on the black list will always supersede devices on the white list.

Specific devices can be assigned to certain computers but not to others.

Device policy rules can be created based on:

• Class

• Sub-class

• Protocol

• VID, PID

• Serial Number

Once configured, the policy is loaded onto the Belkin Advanced Secure USB Switch.

You can save a USB device policy on one Secure USB Switch and load it on another.

note: For examples on how to configure the Secure USB Switch, please refer to Appendix A on page 22

baCK To Table of ConTenTs >

Page 15: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

14Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 4 5 6 7

InsTallaTIon

3

The USB Device Configuration Utility supports the following operating systems:

• WinXP or greater

step 1 – Installing the usb device Configuration utility

Install the USB Device Configuration Utility by following the installation wizard instructions.

step 2 – Connect the belkin advanced secure usb switch to the management PC

The management PC can be any external laptop or desktop running WinXP or greater. Connect a USB Cable (F3U138b06) from the computer being used to configure the policies to the Belkin Advanced Secure USB Switch Admin Port on the back side of the Switch.

baCK To Table of ConTenTs >

Page 16: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

15Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 4 5 6 7

InsTallaTIon

3

step 3 – open the usb device Configuration utility (uCu)The UCU GUI includes the following areas:

status bar – Shows the status of the USB Switch and UCU.

Command bar – Performs certain commands.

White list rules – Lists allowed devices using “or” relationship rules.

black list rules – Lists the blocked devices using “or” relationship rules.

read bar – Upon request, displays the attributes of the currently connected device.

note: The black list rules will always supersede the white list rules.

note: For examples on how to configure the Secure USB Switch, please refer to Appendix A on page 22

baCK To Table of ConTenTs >

Page 17: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

16Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 4 5 6 7

InsTallaTIon

3

step 4 – Check the Connection and secure uCu

Check the status bar to make sure a connection is established.

There are several status options:

• Not Connected – UCU is not communicating with Advanced Secure USB Switch

• Connected/Access Granted – UCU is communicating with Advanced Secure USB Switch

step 5 – Create usb device rules

Once the Advanced Secure USB Switch is powered up and connected to the UCU, create your first rule.

The mechanisms to create white list and black list rules are very similar and can be done in two ways:

Method 1: read attributes from usb device

You can read the attributes of a connected USB device to create the white list and black list rules.

1. Connect the USB device to the “USB Device” jack at the back of the Advanced Secure USB Switch.

2. In SCT, select device > read.

The USB device attributes will appear in the Currently Connected Device pane.

3. Right-click attributes and select from the drop-down list if you want to add to the white list or black list.

4. Repeat the above steps for every USB device.

baCK To Table of ConTenTs >

Page 18: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

17Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 4 5 6 7

InsTallaTIon

3

Method 2: Manually define usb devices

1. Go to the white or black list areas and select the attributes by which you would like to define your products.

2. Double-click on a field to open a complete list of all possible attributes. Alternatively just type the value you want.

note: • For the white list rules, you can also define a host to which you

would like to allow the device.• All fields must be entered. • Use “*” to define an “any” attribute in a field. * can also be used

within the field to define a wild card, for example: • 4765* will allow 47653, 476598, 47650.• You can create up to 16 white list rules and 16 black list rules in

every configuration.• To delete a rule or move it to the opposite list, right click it, and

select the desired action..

note: For examples on how to configure the Secure USB Switch, please refer to Appendix A on page 22

step 6 – load the Configuration

Once you have defined the configuration, load it to the Advanced Secure USB Switch.

1. Go to Configuration > load:

2. When the load command is received on the Advanced Secure USB Switch, the device status LED will turn off.

3. Restart the Advance Secure USB Switch to apply the new configuration by disconnecting and reconnecting the power supply.

note: It is impossible to view the configuration currently loaded on the Secure USB Switch. You can Open a previously saved configuration, edit it and load it to the switch.

baCK To Table of ConTenTs >

Page 19: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

18Belkin® Advanced Secure USB Switch User Manual

addITIonal oPTIons and seTTIngs

SECTIONSTable of Contents 1 2 3 5 6 74

viewing usb switch Information

You can view information required for troubleshooting by accessing the device information dialog: device > Information

viewing Connection status

You can get information regarding the USB connection status by clicking Connection Status at the bottom left corner of the application window.

baCK To Table of ConTenTs >

Page 20: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

19Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 3 5 6 7

addITIonal oPTIons and seTTIngs

4

saving, opening and loading Preset Configurations

You can save defined configurations to a file and later open or load the saved configuration.

To save the configuration:

1. In he menu bar, click Configuration > save as . . .

2. Navigate to the directory where you want to save the configuration file, name the file and click Save.

To open and load a saved file:

1. In he menu bar, click Configuration > open.

2. Navigate to the directory where the configuration file is saved, select it and click Open.

3. Connect an Advanced Secure USB Switch to the administrator PC, as described in Step 2- Connect the Belkin Advanced Secure USB Switch to the Management PC on page 14.

4. Load the configuration into the device, as described in Step 6 - Load the Configuration, on page 17.

A saved configuration can be opened by selecting Open from the Configuration Menu. Once the saved file is opened, it can be edited as needed and then loaded to the Switch.

set/Change Password

To prevent the UCU from being used by unauthorized users, you can set a password. By default, no password is required, but protecting the Switch settings with a password is highly recommended.

To change a password:

5. From the Command Bar, select Device, then select Change Password.

6. In the Change Password window, enter the old password (if applicable), then enter the new password twice, and click on OK.

note: If the UCU is password-protected, on startup, Enter Password will appear in the status bar. This indicates that a password has been set and is needed to allow configuration of the Advanced Secure USB Switch.

baCK To Table of ConTenTs >

Page 21: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

20Belkin® Advanced Secure USB Switch User Manual

oPeraTIon

SECTIONSTable of Contents 1 2 3 4 6 75

Now that you have connected your computers to the Advanced Secure USB Switch, it is ready for use.

Connect the USB device you wish to share between the computers, to the usb device port on the back of the Belkin Advanced Secure USB Switch.

The default channel after power up is the first active channel for the specific USB device which is connected as indicated by channel select LED illumination. For example, if a certain USB device is enabled for ports 1, 3 and 4, the Switch will default to channel 1. In case the USB device is enabled for ports 3 and 4, the Switch will default to channel 3.

lock function

It is possible to lock the device on a specific channel preventing the user from accidentally moving the device to a different channel.

Lock the device by pressing the Lock Button on the front panel of the Advanced Secure USB Switch.

Locking the device supersedes pressing the channel buttons or selecting an active channel on the DCU. To exit lock mode, press the Lock button again.

dCu Port

The Advanced Secure USB Switch has a DCU port, designed to connect Belkin Secure Desktop Controller Unit (DCU) to control the Advanced Secure USB Switch remotely. The DCU also synchronizes the selected channel on the USB switch with the same channel on a Belkin Secure KVM.

See the Belkin Secure DCU User Manual for details how to connect the Advanced Secure USB Switch with a Belkin Secure DCU.

Important security note: If you are aware of potential security vulnerability while installing or operating this product, we encourage you to contact us immediately at the following email address: gov_security@belkin .com .

baCK To Table of ConTenTs >

Page 22: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

21Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 3 4 6 7

oPeraTIon

5

The following table describes the LED status indication of the USB Switch:

Product state red Channel led White Channel led device led locked led

Idle – switch is powered, no device is connected . Off Off Slow Blinking Red Off

self-test failed Off Off Fast Blinking Red Off

Product tampered All Channels – On (Red) Off Fast Blinking Red Off

device being enumerated Off Off Slow Blinking Red (continue from Idle state)

Short blink when enumeration is finished

device rejected Off Off Solid Red Off

device connected and oK Off Selected Channel ON Solid Green Off

device connected to PC and in program mode Channel 1 and 2 LED ON Normal Red – Rejected

Green – OK Off

attempt to map device to invalid port Off No Change Solid Green Off

In freeze mode Off Blinking White Red – Rejected Green – OK Blinking Red

remote disconnected during operation All Solid Red Off

Red – Rejected Green – OK Off

note: Device Connected and in Program mode LED behavior will supersede all other normal working modes (except tampering and self test fail)

baCK To Table of ConTenTs >

Page 23: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

22Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 3 4 6 7

oPeraTIon

5

usb switch Configuration samples

Prior to starting the examples below make sure the USB switch is connected to the management PC and UCU is communicating with the switch.

Creating White rule: allow using usb flash drive on PC #2

The purpose of this example is to create a simple ‘White’ Rule in UCU to allow mapping of a USB Flash device to PC#2.

1. Connect the USB Flash Drive to the unit’s USB Jack. The USB status LED will illuminate red as at this point USB mapping is prohibited.

2. In UCU, select Device -> Read. The USB device attributes will appear in the ‘Currently Connected Device’ pane.

3. Right-click the attributes to add them to the White list pane. Select to map the USB Drive to channel 2 only.

4. In UCU, select Configuration -> Load. The USB status LED will blink and turn off indicating the new settings are stored.

5. Disconnect the Mini ‘B’ USB cable from the USB switch.

6. Plug OFF and ON the Unit’s DC power plug.

Testing White rule: allow using usb flash drive on PC #2

As a result of the previous configuration, the USB status LED will illuminate green indicating the connected USB Flash Drive is approved. The LED indicator on channel #2 will flash solid White indicating that USB mapping is allowed.

Use the Switch channel port selector to navigate between the channels. The attached USB Flash drive will be mapped to PC #2 only.

Other USB Flash Drives would not work in the current configuration as they were not approved in the UCU.

baCK To Table of ConTenTs >

Page 24: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

23Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 3 4 6 7

oPeraTIon

5

Creating White rule: allow using usb flash drive on PC #1

The purpose of this test is to create a second ‘White’ Rule for the same USB Flash Drive. It will enable the usage of the same USB Flash Drive, but this time on PC #1. This Rule will be added to the previously configured Rule.

1. Connect the USB Flash Drive to the unit’s USB Jack. The USB status LED will illuminate green as at this point the connected USB Flash Drive is approved.

2. Connect the Mini ‘B’ USB to the Management Port

3. Follow steps 2– 6 with an exception that in this case, map the USB Flash Drive to PC #1 only.

Testing White rule: allow using usb flash drive on PC #1

The USB status LED will illuminate green indicating the connected USB Flash device is approved. The LED indicator on channel #1 will flash solid White indicating that USB mapping is allowed.

Use the Switch channel port selector to navigate between the channels. The USB Flash drive will be mapped to PC #1 and PC #2 as the 2nd Rule will be added to the initial ‘White’ Rule.

Please test the Lock\Freeze factuality by pressing the Lock Button on the front panel of the USB Switch. The mapped USB device will be locked to channel #1 until you will it release by pressing the Lock\Freeze mode again.

Creating ‘black’ rule: block mapping of usb flash drive .

The purpose of this test is to create a ‘Black’ Rule in UCU that overrides the previous ‘White’ Rules.

1. Repeat the steps as in both above sections.

2. Repeat the process by adding the rule to the Black list rules.

Testing black rule: block mapping of usb flash drive .

The USB status LED will illuminate red indicating the connected USB Flash Drive is blocked. The channel LED indicators is turned OFF indicating the connected USB Flash Drive is prohibited.

Use the Switch channel port selector to navigate between the channels. The USB Flash drive will be blocked as the ‘Black’ Rule overrides the previously configured White Rules.

Other USB Flash Drives would not work in the current configuration as they were not approved.

baCK To Table of ConTenTs >

Page 25: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

24Belkin® Advanced Secure USB Switch User Manual

TroublesHooTIng

SECTIONSTable of Contents 1 2 3 4 5 76

general

There is no power, and none of the front-panel leds are illuminating .

• Check that the power cord is properly connected to the power supply.

• Check that the DC plug is fully inserted into the DC jack on the Switch.

• Connect an optical mouse to the device’s USB Device port, and check that the red light indicates that it is receiving power. If power is not available, try another Belkin Advanced Secure USB Switch power supply, or contact Belkin for a replacement.

The Channel select leds are blinking but the advanced secure usb switch does not work .

• The device anti-tampering system was triggered. Change unit and call Belkin technical support.

The advanced secure usb switch does not respond to channel select push buttons . The device led is solid green .

• The connected USB device is allowed but not mapped to any of the computer ports. Load a new configuration.

The advanced secure usb switch does not respond to channel select push buttons . The device led is solid red .

• The connected USB device is blocked. Load a new configuration.

Important note:

If you are aware of potential security vulnerability while installing or operating this product, we encourage you to contact us immediately at the following email address: gov_security@belkin .com .

The gov_security@belkin .com email address is not intended to reach Belkin technical support.

Any support inquiries should be directed to our technical support line at: 1-800-282-2355

baCK To Table of ConTenTs >

Page 26: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

25Belkin® Advanced Secure USB Switch User Manual

InforMaTIon

SECTIONSTable of Contents 1 2 3 4 5 6 7

fCC statement

deClaraTIon of ConforMITY WITH fCC rules for eleCTroMagneTIC CoMPaTIbIlITY

We, Belkin International, Inc., of 12045 E. Waterfront Drive, Playa Vista, CA 90094, declare under our sole responsibility that the product: f1dn104s to which this declaration relates:

Complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

Ce declaration of Conformity

We, Belkin International, Inc., declare under our sole responsibility that the F1DN104S, to which this declaration relates, is in conformity with Emissions Standard EN55022 and with Immunity Standard EN55024, LVP EN61000-3-2, and EN61000-3-3.

ICes

This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numérique de la classe B est conforme á la norme NMB-003 du Canada.

belkin International, Inc ., limited 3-Year Product Warranty

What this warranty covers?

Belkin International, Inc. (“Belkin”) warrants to the original purchaser of this Belkin product that the product shall be free of defects in design, assembly, material, or workmanship.

What the period of coverage is?

Belkin warrants the Belkin product for three years.

What will we do to correct problems?

Product Warranty.

Belkin will repair or replace, at its option, any defective product free of charge (except for shipping charges for the product). Belkin reserves the right to discontinue any of its products without notice, and disclaims any limited warranty to repair or replace any such discontinued products. In the event that Belkin is unable to repair or replace the product (for example, because it has been discontinued), Belkin will offer either a refund or a credit toward the purchase of another product from Belkin.com in an amount equal to the purchase price of the product as evidenced on the original purchase receipt as discounted by its natural use.

baCK To Table of ConTenTs >

Page 27: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

26Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 3 4 5 6

InforMaTIon

7

What is not covered by this warranty?

All above warranties are null and void if the Belkin product is not provided to Belkin for inspection upon Belkin’s request at the sole expense of the purchaser, or if Belkin determines that the Belkin product has been improperly installed, altered in any way, or tampered with. The Belkin Product Warranty does not protect against acts of God such as flood, lightning, earthquake, war, vandalism, theft, normal-use wear and tear, erosion, depletion, obsolescence, abuse, damage due to low voltage disturbances (i.e. brownouts or sags), non-authorized program, or system equipment modification or alteration.

How to get service .

To get service for your Belkin product you must take the following steps:

1. Contact Belkin International, Inc., at 12045 E. Waterfront Drive, Playa Vista, CA 90094, Attn: Customer Service, or call (800)-282-2355, within 15 days of the Occurrence. Be prepared to provide the following information:

a. The part number of the Belkin product.

b. Where you purchased the product.

c. When you purchased the product.

d. Copy of original receipt.

2. Your Belkin Customer Service Representative will then instruct you on how to forward your receipt and Belkin product and how to proceed with your claim.

Belkin reserves the right to review the damaged Belkin product. All costs of shipping the Belkin product to Belkin for inspection shall be borne solely by the purchaser.

If Belkin determines, in its sole discretion, that it is impractical to ship the damaged equipment to Belkin, Belkin may designate, in its sole discretion, an equipment repair facility to inspect and estimate the cost to repair such equipment. The cost, if any, of shipping the equipment to and from such repair facility and of such estimate shall be borne solely by the purchaser. Damaged equipment must remain available for inspection until the claim is finalized. Whenever claims are settled, Belkin reserves the right to be subrogated under any existing insurance policies the purchaser may have.

baCK To Table of ConTenTs >

Page 28: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

27Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 3 4 5 6

InforMaTIon

7

How state law relates to the warranty .

THIS WARRANTY CONTAINS THE SOLE WARRANTY OF BELKIN. THERE ARE NO OTHER WARRANTIES, EXPRESSED OR, EXCEPT AS REQUIRED BY LAW, IMPLIED, INCLUDING THE IMPLIED WARRANTY OR CONDITION OF QUALITY, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, AND SUCH IMPLIED WARRANTIES, IF ANY, ARE LIMITED IN DURATION TO THE TERM OF THIS WARRANTY.

Some states do not allow limitations on how long an implied warranty lasts, so the above limitations may not apply to you.

IN NO EVENT SHALL BELKIN BE LIABLE FOR INCIDENTAL, SPECIAL, DIRECT, INDIRECT, CONSEQUENTIAL OR MULTIPLE DAMAGES SUCH AS, BUT NOT LIMITED TO, LOST BUSINESS OR PROFITS ARISING OUT OF THE SALE OR USE OF ANY BELKIN PRODUCT, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

This warranty gives you specific legal rights, and you may also have other rights, which may vary from state to state. Some states do not allow the exclusion or limitation of incidental, consequential, or other damages, so the above limitations may not apply to you.

baCK To Table of ConTenTs >

Page 29: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

28Belkin® Advanced Secure USB Switch User Manual

SECTIONSTable of Contents 1 2 3 4 5 6

InforMaTIon

7

reporting belkin Product security vulnerability

If you are aware of potential security vulnerability with any Belkin Government product, we encourage you to contact us immediately at the following email address: gov_security@belkin .com or our technical support line at: 1-800-282-2355

After your communication is received, Belkin Government personnel will contact you to follow up. To ensure confidentiality, Belkin encourages you to use PGP encryption key for secure communications.

The gov_security@belkin .com email address is not intended to reach technical support on Belkin Government products or services.

baCK To Table of ConTenTs >

Page 30: User Manual - Belkin...usb device filtering The USB device filtering is based on a detailed scheme with ability to create up to 32 rules to allow or block USB devices based on Class,

© 2014 Belkin International, Inc. All rights reserved. All trade names are registered trademarks of respective manufacturers listed. Windows and Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Mac OS is a trademark of Apple Inc., registered in the U.S. and other countries.

belkinbusiness.com