DP-Vision-IP-AR-CPU (A1110197)

Features

Security features

• Permanent encryption of all communication and data transmissions, as well as sensitive information such as login credentials and passwords, guarantees a high level of security in critical environments
  • AES256-GCM for keyboard/mouse and control data
  • AES128-CTR for video, audio, GenericUSB and RS232

• Bootloader, operating system, and firmware form a “Trusted Computing Platform” with automatic integrity checks during system startup

• Integrated Trusted Platform Module (TPM) protects all access and configuration data from being spied on or tampered with by third parties

• Console modules do not store security-relevant information such as login credentials, which could be extracted in the event of device loss

• Early detection of security incidents or unusual activities through continuous monitoring via Syslog, monitoring, and SNMP

• Comprehensive rights management and user administration, allowing precise control over which user can access which resources
• Option for activatable access protection (default operating mode in matrix systems), in which authentication is required before accessing computer sources

• Support for external directory services (Active Directory, Radius, LDAP) to meet company security policies

• To comply with individual password policies and improve security, password complexity can be configured system-wide

• Configurable login options, such as displaying terms of use or setting the maximum acceptable number of failed login attempts, can enhance system security

• The optional UID-Locking restricts the usable end devices, ensuring that no additional devices can be added or replaced after activation

• Auto Backup Function: Automates backups at user-defined intervals and replaces manual intervention – ensuring reliable, timely data protection without the need for continuous monitoring

• Freeze function: If the video signal is lost, the last displayed image is frozen and highlighted with a colored frame and timer

• 2-Factor-Authentication (2FA) – is integrated by default in KVM extenders and enhances security by requiring a second, possession-based factor during user authentication:
  • The traditional password authentication is combined with a time-limited, single-use code (Time-Based-One-Time-Password – TOTP)
  • You can choose between using the internal authentication server provided in the device or an external directory service
  • Authenticator apps or hardware token can be used
  • This additional layer of protection prevents unauthorized access and ensures the highest level of security, particularly in sensitive IT environments

Operation features

• Ready for operation out of the box, no additional configuration required in direct connection. IP address configuration and pairing are required when using multiple modules in a network setup

• Permanent keyboard/mouse emulation ensures a stable system

• Compatibility with special USB-HID input devices

• Operation via multilingual on-screen display (OSD) and hotkeys

• Configuration and update via the multilingual HTML5 web interface “Config Panel 21” (Java-free)

• Support of DDC/CI (Display Data Channel / Command Interface) to enable centralized software-side control of monitor settings such as brightness

• additional, independent management network interface for configuration

• manual bandwidth management to adjust the required bandwidth

• Local console at the computer module allows on-site operation, including all video channels
• Exclusive or concurrent operation: The KVM extender allows computer control both remotely and locally. When an input is detected, the extender automatically locks the competing console. The lock is lifted after a preset timeout if no further input is detected. A key combination can activate exclusive operation, immediately disabling the competing console. Another key combination restores shared control.

• With the integrated IP-MUX functionality the console modules offer the possibility to access different computer modules (one after the other). To use this function, you can connect a maximum of 20 computers to separate computer modules. The computer modules are configurated as targets in the console module and can be connected via the local on-screen display.