Adder AVSC1104-US – Secure 4-Port VGA USB KVM Switch

Product Overview

The Adder AVSC1104-US is a secure 4-port KVM switch that allows one keyboard, VGA monitor, and mouse to be shared between high- and low-security systems — classic red and black network separation — with secure smartcard reader sharing. Part of the ADDERView Secure Analogue Enhanced range, this EAL4+ certified KVM switch with TEMPEST qualified design is built for government, defense, and other classified environments where data isolation between networks is mandatory. Agencies evaluating a secure KVM switch with card reader support will find hardwired port isolation, unidirectional data paths, and tamper-evident construction throughout.

Product Description

Security in the AVSC1104 begins at the hardware level. Data diodes implemented in hard-wired electronic circuitry enforce unidirectional flow on critical data paths, so a compromised peripheral cannot read information from, or transfer data to, another connected system. Peripherals are powered down and re-initialized on every channel change, adding a further layer of protection against hidden peripheral malware.

Channel switching is controlled exclusively from the front-panel buttons — no keyboard or mouse switching commands are accepted — eliminating an entire class of subversion attacks. The Enhanced variant adds secure smartcard reader sharing between connected systems, allowing an operator to authenticate across up to four isolated computers, along with anti-subversion features and authentication that verifies the unit is genuine. Use of software inside the unit is minimized, and one-time programmable storage replaces flash memory in all security-critical areas, removing the possibility of subversive reprogramming.

The design is TEMPEST qualified (USA NSTISSAM Level I and NATO SDIP-27 Level A) and certified to Common Criteria EAL4+ (augmented by ALC_FLR.2 and ATE_DPT.2). Extensive shielding of the outer casing and internal circuitry reduces electromagnetic emissions and prevents electrical crosstalk between channels, while the physical enclosure minimizes apertures to deter probing. Adder's shielded link cables (VSCD5, VSCD6, VSCD7, VSCD9) with braid, foil, and fitted ferrites complete the emission-controlled signal path. Video is analog VGA up to 1920 x 1200 at 60Hz, compatible with all known platforms featuring VGA and USB HID or PS/2 connectivity. Pair it with other secure switching products in our Adder Technology collection.

Key Features

• EAL4+ Certified, TEMPEST Qualified Design — Common Criteria EAL4+ (ALC_FLR.2, ATE_DPT.2) with TEMPEST qualification to NSTISSAM Level I / NATO SDIP-27 Level A for classified deployments.
• Hardwired Port Isolation — Data diodes in fixed circuitry enforce unidirectional data flow, preventing cross-domain leakage between the four connected systems.
• Secure Smartcard Reader Sharing — A CAC/smartcard reader can be securely shared across the connected systems with anti-subversion protection.
• Front-Panel-Only Switching — Channel changes are accepted only from physical buttons; keyboard and mouse switching commands are blocked.
• Peripheral Re-Initialization — Peripherals power down and re-initialize at every channel change to neutralize hidden peripheral malware.
• No Critical Software Reliance — One-time programmable storage replaces flash memory in all security-critical areas.
• Emission-Controlled Construction — Robust shielded metal casing with minimal apertures suppresses emissions and resists tampering.
• Broad Platform Support — Works with all known hardware featuring VGA and USB HID or PS/2, across Windows, Linux, Unix, macOS, Solaris, and more.

Typical Applications

• Government space — switch a single console between classified and unclassified networks.
• Commercial meeting space — secure facilities where multiple isolated networks reach one operator desk.
• Training room — secure instruction environments requiring strict network segregation at each console.

Technical Specifications

Frequently Asked Questions

What certifications does the AVSC1104 hold?
It is designed to meet Common Criteria EAL4+ (augmented by ALC_FLR.2 and ATE_DPT.2, certificate available) and carries a TEMPEST qualified design meeting USA NSTISSAM Level I and NATO SDIP-27 Level A.

How does smartcard sharing work?
A USB smartcard/CAC reader attaches to the switch and is securely shared between the connected systems, letting the operator stay authenticated while switching channels. No card or user data passes between computers.

Can I switch channels from the keyboard?
No, by design. Switching is only possible from the front-panel buttons, which prevents peripheral-borne switching attacks.

What cables should I use?
Adder's shielded link cables are recommended: VSCD5 (VGA + PS/2), VSCD6 (VGA + USB + card reader), VSCD7 (VGA + USB), and VSCD9 (VGA monitor cable). Each is constructed with braid, foil, and ferrite cores for emission suppression.

Are there export restrictions?
Yes, export restrictions apply to specific countries for secure KVM products. Contact Creation Networks before ordering for export.

Which operating systems are supported?
All known software and operating systems including Windows, DOS, Linux, Unix, BSD, Sun OS, Solaris, macOS, and NetWare; no drivers are required.