Belkin Universal 2nd Gen Secure KVM — 4 Port, Single Head, No CAC
4 computers1 displayDP + HDMI 4K 60HzNIAP PSD 4.0No CAC port
The Belkin F1DN104KVM-UNN4 is a NIAP-certified secure KVM switch: it lets one keyboard, mouse, display and headset drive 4 separate computers, while physically preventing data from ever crossing between them. That is the whole point of a secure KVM — it is not a convenience switch, it is an isolation device for desks that touch networks of different classifications.
Isolation is enforced in hardware, not software. Optical data diodes force USB traffic one way only, the video path is kept separate from everything else, each port has its own processor and power domain, and the firmware physically cannot be read back or rewritten. There is no configuration that can accidentally weaken it.
Compatibility — check before buying:
Console side takes a USB Type-A keyboard and USB Type-A mouse — standard HID only. Wireless keyboards and mice are prohibited by design, and USB storage or composite devices are rejected outright. Video is a DisplayPort / HDMI combo connector on the console and on every computer port: DP 1.2 and HDMI 2.0 are auto-detected and converted internally, up to 3840 x 2160 at 60 Hz. DVI-D works through the recommended cables; there is no native VGA. Audio is a 3.5 mm output only, with ultrasonic filtering — there is deliberately no microphone input. This SKU has no CAC port. If you need a smart-card or CAC reader shared across the connected machines, the F1DN104KVM-UN-4 is the version to order.
Best For
✓Desks that must reach two or more networks of different classification from one set of peripherals
✓Government, defence and critical-infrastructure environments with a NIAP or Common Criteria requirement
✓Security operations centres and control rooms where an ordinary KVM would be an unacceptable data path
Key Features
Hardware isolation, not software
Optical data diodes give unidirectional, HID-filtered USB flow with more than 60 dB of channel isolation. The video path is kept separate from all other traffic and each port sits in its own power domain to block signalling attacks.
Always-on anti-tamper
Holographic tamper-evident labels plus an active anti-tamper system that stays armed in transit and after deployment. Belkin is explicit: any attempt to open the enclosure triggers it, renders the unit inoperable and voids the warranty.
Firmware that cannot be rewritten
All microcontrollers are protected against firmware read, modification and rewrite. There is no update path, which is the point — nothing can be flashed onto it in the field.
Audio-only, no CAC path
This model carries the audio channel but no user-authentication path at all. Fewer connected peripherals means a smaller attack surface — choose it when nobody at the desk uses a smart card.
Technical Specifications
| Switching |
| Belkin Part Number |
F1DN104KVM-UNN4 |
| Official Name |
Universal 2nd Gen Secure KVM Switch, 4-Port Single Head No CAC |
| Computers Supported |
4 |
| Displays (Heads) |
1 |
| Local Users |
1 |
| Form Factor |
Desktop; under-counter mountable |
| Video |
| Console Connector |
DisplayPort / HDMI combo |
| Computer Connectors |
DisplayPort / HDMI combo, one per port |
| Standards |
DisplayPort 1.2, HDMI 2.0, auto-detected with internal conversion |
| Maximum Resolution |
3840 x 2160 at 60 Hz |
| DVI-D |
Supported via recommended cables |
| VGA |
Not supported natively |
| EDID |
Secure EDID emulation performed at power-up; all EDID and MCCS writes blocked; DisplayPort AUX channel filtered |
| Peripherals & Audio |
| Keyboard |
USB Type-A, HID only |
| Mouse |
USB Type-A, HID only |
| Wireless Keyboard / Mouse |
Prohibited by design |
| USB Storage |
Rejected |
| Computer Port |
USB Type-B per computer |
| Audio Output |
3.5 mm analogue on console and per computer, 8th-order elliptic ultrasonic filtering |
| Microphone Input |
None — deliberately omitted |
| CAC / Smart Card |
Not present on this SKU |
| Security & Certification |
| Protection Profile |
NIAP PSD v4.0 PP-Configuration |
| Modules Claimed |
PSD 4.0 plus Keyboard/Mouse, Video/Display and Analogue Audio Output — no User Authentication module, consistent with having no CAC |
| Certificate on Record |
Common Criteria 702-EWA, valid 2 July 2026 to 2 July 2031, firmware 44404-E7E7 (supersedes the archived 533-EWA) |
| Certification Note |
Recertified in 2026 and currently active. |
| Tamper Protection |
Holographic tamper-evident labels; always-on active anti-tamper that disables the unit if the enclosure is opened |
| Data Path |
Optical data diodes, unidirectional HID-filtered USB, more than 60 dB channel isolation, isolated video path, per-port power-domain isolation |
| Firmware |
Non-reprogrammable; protected against read, modification and rewrite |
| TAA Compliance |
Yes |
| Power & In the Box |
| Power Supply |
12 V / 1.5 A universal, worldwide adaptors (Belkin’s shared range manual quotes 2.5 A; the product page for this SKU says 1.5 A) |
| Included |
Switch, power supply with worldwide adaptors, port naming labels, quick start guide and compliance documents |
| Not Included |
KVM cables are not supplied |
| Optional |
F1DN008KBD secure keyboard / remote port selector |
| Warranty |
| Warranty |
1-Year Warranty (Singular) |
| Manufacturer Term |
Belkin publishes a 3-year limited warranty on the Secure KVM range, upgradeable to 4 or 5 years. Opening the enclosure voids it. |
Frequently Asked Questions
What does the -UNN4 / -UN-4 suffix actually mean?
It is the CAC question and nothing else. -UN-4 has a CAC / smart-card reader port; -UNN4 does not. It is not a TAA difference and not a different Protection Profile — both are TAA compliant and both are certified against NIAP PSD 4.0. Belkin’s own datasheet, quick installation guide, product-page names and Security Targets all agree on this.
Are KVM cables included?
No. The box has the switch, the power supply, port labels and documentation. KVM cables are ordered separately, which is normal for this range because the cable set depends on what your machines expose.
Can I use my wireless keyboard and mouse?
No. Wireless keyboards and mice are prohibited by design on a secure KVM, and the switch only accepts standard USB HID keyboards and mice. USB storage and composite devices are rejected outright.
Is it TAA compliant?
Yes. Belkin documents the whole Universal 2nd Gen range as TAA compliant. Note that some distributor feeds mark only part of the range as TAA — that is a feed error, not a real difference between the SKUs.
Can I open it to service it?
No, and you should not try. The anti-tamper system is always armed, including in transit. Opening the enclosure disables the unit permanently and voids the warranty. That is a security feature, not a design flaw.
What resolution does it support?
Up to 3840 x 2160 at 60 Hz over DisplayPort 1.2 or HDMI 2.0. Do not confuse this with Belkin’s Modular secure KVM range, which tops out at 4K 30 Hz.
Singular Expert Insight
Two things decide which SKU you want. First, CAC: if anyone at the desk authenticates with a smart card, you need the -UN-4 version, and retrofitting is not possible. Second, heads: a dual-head unit switches two displays as one desktop, and buying single-head to save money means re-cabling later. Everything else in this range — certification, isolation, TAA status, resolution — is identical across the SKUs, so those two choices are the whole decision.
Buyer's Guide
Buy it if
Buy this if you need one desk to reach 4 isolated machines with hardware-enforced separation and a NIAP PSD 4.0 certificate and no smart-card requirement.
Skip it if
Skip it if you just want to share peripherals between two PCs — an ordinary KVM is a fraction of the price — or if your users authenticate with CAC or smart cards, in which case take the -UN-4 version.
Also consider
Also worth a look: the matching F1DN104KVM-UN-4 with a CAC reader port, the dual-head and higher port-count models in the same range, and our wider
networking and desktop hardware lineup.