StarTech CK4-D116C 16-Port Secure DVI KVM Switch with NIAP 4.0 and CAC

Overview

The StarTech CK4-D116C is a 16-port, dual-monitor secure KVM switch built for classified and sensitive compartmented information facilities (SCIFs), defense contractor workstations, and any environment where USB peripheral isolation and NIAP Protection Profile 4.0 compliance are non-negotiable. With a fully metal enclosure, USB 2.0 host connectivity, DVI-I video on all 16 ports, and a dedicated CAC (Common Access Card) reader port at the console, the CK4-D116C (often searched as CK4 D116C) handles the rigorous peripheral control requirements of government and intelligence networks without requiring workarounds or waivers.

Manufactured in the USA and carrying a 3-year manufacturer warranty, this switch targets environments where domestic origin and a verifiable certification chain matter as much as the hardware specs themselves.

Key Features

• NIAP Common Criteria PP 4.0 Certification: NIAP PP 4.0 is the current benchmark for secure KVM switches used on classified U.S. government networks. This is not a marketing claim — it is a certification that must be achieved through independent laboratory evaluation. Deploying a PP 4.0-certified switch means your peripheral-switching solution satisfies the specific security requirements mandated by the NSA, DoD, and IC procurement rules. If your program office requires a NIAP-listed KVM, this is the spec that matters.
• 16 DVI-I Host Ports with Dual-Monitor Console Support: All 16 computer connections use DVI-I, giving you compatibility with both digital (DVI-D) and analog (DVI-A) sources through a single connector type. The dual-monitor console output means operators can run two displays from a single keyboard and mouse without a second switch — reducing rack footprint and cable runs on an already dense secure workstation setup.
• 32 USB 2.0 Type-B Host Ports (2 per channel): Each of the 16 connected computers sees two USB 2.0 Type-B ports for keyboard and mouse — full electrically isolated switching, not a software-level hub. This matters in a NIAP context because the USB path isolation is part of what the PP 4.0 evaluation certifies. No data can ride back from the console to an unintended host.
• Dedicated CAC Port at Console: A single console-side CAC reader port lets the operator authenticate with a smart card without physically moving the card reader between machines. The switch controls which host the CAC is presented to, keeping the authentication path clean and auditable — a requirement in PKI-enforced DoD environments.
• 3.5mm Stereo Audio on All 16 Channels: Each host port includes a 3.5mm stereo female audio connection (16 total), with a matching stereo jack at the console. Audio follows the active channel, so operators don't need a separate audio matrix for voice comms or alerting systems on each connected workstation.
• All-Metal Enclosure, Made in the USA: The steel chassis is not incidental — in secure environments, physical tamper evidence and domestic manufacturing origin are often procurement requirements. The metal housing also provides shielding against radiated emissions, relevant in TEMPEST-sensitive installations. Manufactured in the USA means no foreign supply chain exposure in the hardware itself.
• 19.7 ft Maximum Cable Length: Console cables can run up to 19.7 feet (approximately 6 meters), giving you enough reach to position the operator console away from the rack — useful in a SCIF where the processing hardware is behind a cage or in an adjacent rack bay.
• 0°C to 40°C Operating Range: The CK4-D116C is rated for standard office and data center environments — 0 to 40 degrees Celsius operating, -20 to 60 degrees Celsius storage. This is a controlled-environment device; do not plan deployments in unheated server rooms or industrial spaces that drop below freezing during operation.

Integration and Compatibility

The CK4-D116C connects to host computers via USB 2.0 Type-B (keyboard and mouse) and DVI-I (video) — standard interfaces that are present on most workstation-class hardware produced in the last decade. The console side presents three USB 2.0 Type-A ports for peripherals, one DVI-I output for the primary display, and one 3.5mm stereo jack for audio. The dedicated CAC port handles smart card authentication without consuming one of the three general USB console ports.

Because this switch operates at the hardware level with isolated USB paths, it does not require drivers or software agents on connected hosts — an important consideration in locked-down classified OS environments where software installation is tightly controlled. Compatibility with KVM switches in multi-domain workstation configurations is a common use case; consult your program security officer for any specific approval requirements in your accreditation boundary. For facilities planning structured cabling alongside KVM deployments, review guidance in our KVM selection guide.

The StarTech secure KVM line — including the CK4-D116C — is purpose-built for multi-level security (MLS) workstations where two or more networks of different classification levels must be accessed from the same desk without cross-contamination. Pair with secure KVM cables to maintain the integrity of the isolated signal path from switch to host. For broader StarTech peripheral and connectivity hardware, see the full StarTech catalog.

Frequently Asked Questions

Q: What NIAP certification level does the CK4-D116C hold?

A: The CK4-D116C is certified to NIAP Common Criteria Protection Profile for Peripheral Sharing Switches version 4.0 — the current required level for secure KVM switches used on U.S. classified government networks.

Q: Can the CK4-D116C support two monitors per operator simultaneously?

A: Yes. The CK4-D116C supports two monitors at the console, so a single operator can run dual displays while switching between up to 16 connected computers.

Q: Does the CK4-D116C require drivers or software on connected hosts?

A: No. The switch operates at the hardware level using standard USB HID (keyboard/mouse) and DVI video interfaces. No drivers or software agents are required on host computers, which is particularly important in classified OS environments with strict software controls.

Q: What is the warranty on the CK4-D116C?

A: The CK4-D116C carries a 3-year manufacturer warranty.

Q: Is the CK4-D116C manufactured in the United States?

A: Yes. The CK4-D116C is manufactured in the USA, which satisfies domestic origin requirements common in U.S. federal and defense procurement contracts.

Q: How many USB console ports are available for peripherals on the CK4-D116C?

A: The console side provides three USB 2.0 Type-A ports for general peripherals (keyboard, mouse, and one additional device), plus a dedicated CAC port for smart card authentication — keeping the CAC reader separate from the general USB console allocation.

Eden Phillips

The CK4-D116C is one of the few 16-port desktop KVMs that ships with a current NIAP PP 4.0 listing — and that distinction is what drives every procurement decision in the classified space. If your facility operates under a DoD accreditation boundary or IC ATO, the NIAP listing is not optional, and PP 4.0 is the version that matters today. The 3.0-listed switches that are still floating around the market won't satisfy current requirements at most program offices.

Technical Highlights:

• NIAP PP 4.0: Current Protection Profile version required for classified U.S. government KVM deployments — independently evaluated, not self-declared. This is the certification your ISSO or AO will ask for by name.
• 32 Isolated USB 2.0 Type-B Host Ports: Two USB paths per channel means keyboard and mouse are handled on separate, electrically isolated circuits — the isolation architecture that the PP 4.0 evaluation actually tests and validates.
• Dedicated CAC Port: Console-side smart card port keeps PKI authentication separated from the three general USB Type-A ports, so a user doesn't accidentally present a credential to the wrong domain during a port switch.

Deployment Considerations:

• The 19.7 ft maximum cable run gives you flexibility in SCIF rack layouts, but confirm cable lengths before installation — exceeding the spec on DVI runs can degrade signal integrity even if the physical connection holds.
• Operating temperature ceiling is 40°C — standard for a controlled server room, but if your comms room runs hot during peak load, factor in airflow before mounting. This is a desktop-form-factor unit (17 x 8.7 x 2.7 in, 6.9 lbs) and is not designed for open-frame rack installation without a shelf.

The CK4-D116C is the right pick for a 16-seat multi-level security workstation environment — specifically DoD, IC, or cleared contractor facilities where the procurement package requires a NIAP PP 4.0-listed switch, a CAC port, dual-monitor console support, and domestic manufacturing origin in a single unit.