StarTech CK4-P104C 4-Port Secure DisplayPort KVM Switch

Overview

The StarTech CK4-P104C is a four-port, single-monitor KVM switch designed specifically for high-security environments where isolation between connected hosts is a compliance requirement, not just a preference. Built to NIAP Protection Profile for Peripheral Sharing Devices version 4.0 — one of the most demanding KVM security standards in government and defense procurement — the CK4-P104C is the right hardware when your security policy prohibits uncontrolled data paths between classified or sensitive workstations. If you're specifying KVM equipment for a SCIF, a cleared contractor facility, or any workspace subject to federal data handling requirements, NIAP PSD 4.0 compliance is the specification that separates this switch from commodity desktop KVMs. For broader context on KVM switches and how secure models differ from standard units, that category page is worth reviewing before finalizing your spec.

The unit ships in an all-metal enclosure (black, 12.6 in × 6.7 in × 1.8 in, 4.2 lb), which contributes to both EMI shielding and the physical robustness expected in rack-adjacent or desktop-deployed government hardware. StarTech's full product catalog includes a range of KVM and connectivity solutions, but the CK4-P104C occupies the secure-switch segment of that lineup.

Key Features

• NIAP PSD 4.0 Certification: This is the critical compliance differentiator. NIAP PSD 4.0 mandates strict unidirectional data filtering, keyboard/mouse anti-tampering controls, and video isolation between ports — meaning the switch actively prevents a compromised host from exfiltrating data through the shared console. If your contracting officer or ISSO requires NIAP PSD 4.0 on the equipment list, the CK4-P104C is on the approved products list (APL). Without this certification, a KVM cannot be approved for use in classified or sensitive compartmented environments.
• Four KVM Ports with DisplayPort Video: Connects up to four host computers to a single DisplayPort monitor, keyboard, and mouse console — eliminating the need for four separate workstations at the operator desk while maintaining strict port isolation. DisplayPort native support means no conversion adapters required for modern workstation GPUs, preserving signal integrity at 4K resolutions.
• DisplayPort Console Output (4K-capable): The single DisplayPort console output supports 4K video, so operators working with detailed imagery — satellite feeds, GIS mapping, forensic video review — get full-resolution output without the signal degradation introduced by HDMI-to-DP adapters in the display chain. Maximum cable length is rated at 19.7 ft (6 m), which covers most workstation-to-monitor runs in a secure operations environment.
• Eight USB 2.0 Type-B Host Connectors: Two USB connections per host (keyboard and mouse paths are handled separately at the host side), delivered over standard USB 2.0 Type-B ports. This wiring architecture is standard for secure KVMs — dedicated USB runs per host rather than shared hubs, which is part of how PSD 4.0 isolation is enforced at the hardware level.
• Three USB 2.0 Type-A Console Ports: The console side provides three USB 2.0 Type-A ports for keyboard, mouse, and one additional peripheral (such as a CAC reader, which is common in federal deployments). In environments requiring smart card authentication at login, the third USB port accommodates that reader without requiring a separate powered hub at the console.
• Four Stereo Audio Ports (Host Side) + One Console Audio Output: Each of the four host connections includes a dedicated 3.5mm stereo audio port, with a single 3.5mm stereo output at the console. Audio switching is handled alongside video and USB, keeping the console setup clean without separate audio switchers.
• Metal Enclosure Construction: The all-metal chassis does real work here — it provides the RF shielding that NIAP and TEMPEST-adjacent deployments expect, and it survives the kind of under-desk or on-desk handling that a busy operations center produces over years of use. Plastic-chassis KVMs are a non-starter in most cleared facility specs.
• Operating Temperature Range 0°C to 40°C (32°F to 104°F): Covers standard conditioned office and operations center environments. Not rated for industrial or outdoor enclosures — this is a controlled-environment device, which is consistent with its target deployment profile.
• 3-Year Manufacturer Warranty: Three years of coverage is standard for StarTech's commercial-grade switching hardware and appropriate for a device that, once installed and configured in a secure environment, is expected to run without replacement for its full service life.

Integration and Compatibility

The CK4-P104C (often searched as CK4 P104C) is designed for direct integration into secure desktop environments. The four DisplayPort host inputs connect to workstation GPU outputs; the USB Type-B host connectors wire to host USB ports. No software drivers are required for basic KVM switching — this is intentional in NIAP-compliant designs, as driver-based switching introduces software attack surfaces that PSD 4.0 prohibits. Switching between hosts is handled via the physical controls on the unit itself.

Because this switch targets secure KVM deployments in government and defense environments, CAC/smart card readers connected to the console USB Type-A port will enumerate correctly on the selected host, which is the standard authentication workflow in federal workstation environments. Verify your specific CAC reader compatibility against your agency's approved hardware list — the switch passes USB HID-class devices, but some proprietary reader implementations may require additional validation.

For environments where multiple operators need simultaneous access to different host sets, a multi-user KVM architecture using multiple CK4-P104C units assigned to individual operators is a common design pattern. Each switch is independently cabled and isolated — there is no cross-switch data path, which is the architecture your ISSO will want to see documented.

Power is drawn from the connected hosts via USB — no external power supply is required in standard configurations, simplifying the power planning at the workstation desk. Confirm your host USB ports can supply adequate current for the switch and console peripherals before finalizing the installation design.

Frequently Asked Questions

Q: What does NIAP PSD 4.0 certification mean for the CK4-P104C?

A: NIAP PSD 4.0 (National Information Assurance Partnership, Protection Profile for Peripheral Sharing Devices, version 4.0) is a U.S. government security certification that validates strict hardware-level isolation between connected hosts. Certified devices must prevent data leakage between ports, enforce unidirectional data paths for video, and implement anti-tamper controls on keyboard and mouse channels. The CK4-P104C's PSD 4.0 certification makes it eligible for use in classified and sensitive government environments where non-certified KVMs are prohibited.

Q: How many monitors can the CK4-P104C support?

A: The CK4-P104C supports a single DisplayPort monitor at the console. It is a single-head KVM switch — all four connected hosts share one monitor, one keyboard, and one mouse. If your operators require dual-monitor setups, you would need a multi-head secure KVM model.

Q: Does the CK4-P104C require software drivers to operate?

A: No. NIAP PSD 4.0-compliant KVM switches are designed to operate without software drivers on the connected hosts. Driver-free operation is a security requirement of the standard, as driver-based switching introduces software attack surfaces that PSD 4.0 prohibits. Switching between hosts is handled via the physical controls on the unit.

Q: Can I connect a CAC/smart card reader to the CK4-P104C?

A: The console side provides three USB 2.0 Type-A ports — one is typically used for keyboard, one for mouse, leaving a third available for a CAC reader or similar USB HID peripheral. The switch passes USB HID-class devices to the selected host, which is the standard workflow for smart card authentication in federal environments. Verify your specific reader model against your agency's approved hardware list.

Q: What is the maximum cable length supported by the CK4-P104C?

A: The rated maximum cable length is 19.7 ft (6 m) for DisplayPort connections. This covers standard workstation-to-monitor distances in most operations center desk configurations.

Q: What is the warranty on the CK4-P104C?

A: The CK4-P104C carries a 3-year manufacturer warranty.

Ted Perry

The spec that defines the CK4-P104C's entire reason for existing is NIAP PSD 4.0 — not the DisplayPort 4K output, not the four-port capacity, but the certification. I've seen integrators try to substitute uncertified KVMs in sensitive government environments to save cost, and it never clears the ISSO review. If the statement of work or the facility security officer's checklist calls out NIAP PSD 4.0, the CK4-P104C is what goes on the BOM. There is no workaround.

Technical Highlights:

• NIAP PSD 4.0: Hardware-enforced host isolation — video, keyboard, mouse, and audio paths are independently switched with no shared data bus between ports. This is what distinguishes a secure KVM from a standard desktop switch in a government procurement context.
• Eight USB 2.0 Type-B Host Ports: Two dedicated USB connections per host rather than a shared USB hub architecture — this is the physical implementation of how PSD 4.0 isolation is maintained on the keyboard and mouse channels. Each host has its own wired path, period.
• Single DisplayPort Console Output: Native DisplayPort at the console with a 6 m maximum cable run means you're not introducing HDMI adapters or active converters into the signal chain — both of which are common failure points and security review complications in cleared facilities.

Deployment Considerations:

• Plan your desk layout around the 19.7 ft (6 m) maximum cable length for DisplayPort runs — in large operations center configurations where the KVM sits further from the monitor than a standard desk, you'll need to confirm cable runs before installation, not after.
• The CK4-P104C operates in a 0°C to 40°C range, so it is rated for conditioned workspace only. It is not appropriate for server room hot aisles or any environment without active climate control — confirm your ops center HVAC can maintain that range at the workstation level.

This switch is the correct specification for a SCIF or cleared contractor facility where operators are switching between workstations of different classification levels and the facility security officer requires documented NIAP PSD 4.0 compliance on the peripheral sharing device. It is not the right tool for a standard IT help desk or a conference room AV switcher — that use case does not justify the cost or the cabling complexity.