A KVM switch enables you to control multiple servers and other equipment from one keyboard, monitor, and mouse workstation. KVM switches give you the flexibility to access servers that are down the hall or across “the pond.” How you access your servers depends on a number of things. Before you choose a KVM switching solution, you need to consider some important issues…

What type of connection does the controlling keyboard, video display, and mouse have?

Depending on whether they are PS/2®, USB, or some combination of both, your connections determine what type of cabling you need.

If you are using USB devices, like keyboards and mice, make sure to purchase a KVM switch with USB support. Older KVMs usually only support PS/2 connections.

Do your CPUs require keyboard or keyboard and mouse emulation?

Keyboard emulation and keyboard and mouse emulation are enhanced features of most KVM switches. They enable each CPU to communicate with the switch as if it were directly attached to the controlling keyboard or mouse.

What operating system (OS) software do your computers use?

Are all your computers running the same OS? Or, like many organizations, do you have multiple CPUs running different OSs? With the right KVM switch, interconnecting multiple CPUs running different OSs is easy.

How close are your users to your servers?

If servers and users are physically close to each other, an analog KVM system will meet your needs. On the other hand, if users require access from remote locations because they travel, or if an IT manager needs to manage a distant data center, a KVM over IP (KVMoIP) system is going to be the best fit for your organization.

How many ports do you need? What will your future needs be?

It is advisable to purchase a KVM switch with more ports than you currently need. This way, when you expand your server room or add users, you don’t need to completely replace a small KVM switch with a larger one with more ports. Also, although many KVM switches are cascadable, a KVMoIP system simplifies configuration, usually requiring the addition of IP addresses and updating the authentication database. KVMoIP makes adding servers fast and free of complications (to learn how to do more with less, listen to our recorded webinar on KVMoIP).

What are your security needs?

Network security must never be compromised, yet authorized personnel need access. KVM switches use a combination of user authentication, an operating system’s internal security, and Secure Socket Layer (SSL) encryption—among other security features—to ensure that users receive access to those devices to which they are allowed.

We have KVM switches that support both USB and PS/2, as well as USB-only models. We also provide multiplatform KVM switches so you can interconnect multiple CPUs that are running on various OSs.  Pick and choose what you need/want with our KVM Selector. Or, call our 24/78/365 Tech Support.

It should come as no surprise that the federal government is concerned about signal leakage. In fact, its interest goes back to the days of World War II when the Army was trying to exploit weaknesses of enemy combat phones and radio transmitters. Since then, the scope of the government’s interest has broadened beyond the battlefield. In the last 40 years, the National Security Agency (NSA) has taken several industry measurement standards for signal protection and greatly enhanced them.

These enhanced criteria are commonly referred to as the TEMPEST standards (although the NSA also calls them EMSEC standards, short for “emissions security”). TEMPEST pertains to technical security countermeasures, standards, and instrumentation that prevent or minimize the exploitation of vulnerable data communications equipment by technical surveillance (AKA eavesdropping!). It involves designing circuits to minimize emanations. Another set of testing standards is called Common Criteria (EAL4+). Both standards are important, but they test for different things.

TEMPEST

Many things put your data communications at risk. Any device with a microchip generates an electromagnetic field, often called a “compromising emanation” by security experts. With the proper surveillance equipment, these emanations can be intercepted and the signal reconstructed and analyzed. Unprotected equipment can, in fact, emit a signal into the air like a radio station—and nobody wants to risk his or her job and a whole lot more by broadcasting national security or trade secrets to the wrong people.

Some of the most vulnerable equipment includes speakerphones, printers, fax machines, scanners, external disc drives, and other high-speed, high-bandwidth peripherals. And if the snoop is using a high-quality interception devices, your equipment’s signals can be acquired up to several hundred feet away.

TEMPEST testing, while classified, is regarded as a process that assesses the threat of data linking by various covert electromagnetic eavesdropping mechanisms. TEMPEST testing and certification is often required by military organizations, and ensures that equipment is designed to minimize emanation.

The TEMPEST standards require red/black separation. In military and government IT setups, that is the most common segregation between secure and non-secure networks. “Red” circuits are normal, unsecured circuits and equipment. Separation is ensured by maintaining physical distance or installing shielding between “red” and “black” circuits and equipment.

TEMPEST is vital for areas where physical security is either not possible or limited. When equipment is on a vehicle or deployed in an active zone, use of TEMPEST-rated equipment is a must when sensitive data is involved. It can be a user’s only line of protection.

Common Criteria (EAL4+)

Common Criteria is an international standardized process for information technology security evaluation, validation, and certification. The Common Criteria scheme is supported by the National Security Agency through the National Information Assurance Program (NIAP).

Common Criteria defines a common set of tests regarding the process of design, testing, verification, and shipping of new security products. Common Criteria enables customers to assess a level of trust in how a product has been designed, tested, built, and shipped.

When shopping, be sure to get secure KVM switching for networks with multiple security classifications. For more information, visit the Secure KVM section of blackbox.com.