StarTech CK4-HP104C 4-Port NIAP 4.0 Secure Desktop KVM Switch

Overview

The StarTech CK4-HP104C is a four-port secure KVM switch built to NIAP Protection Profile 4.0 — the current federal standard for desktop KVM devices handling classified or sensitive compartmented information. It supports both HDMI and DisplayPort video outputs at the console, drives a single monitor at 4K 60Hz, and handles up to four connected hosts simultaneously, with each port maintaining hardware-enforced isolation between them. If you're deploying workstations in government, defense, intelligence, or any regulated environment where cross-domain contamination is a real concern, the CK4-HP104C is engineered to that specific threat model — not just a standard KVM with a certification sticker.

At 4.2 lb and 12.6 in × 6.7 in × 1.7 in, this is a desktop-footprint unit in a metal enclosure, color black. Rated for 0°C to 40°C operating and -20°C to 60°C storage, it fits standard conditioned office and data center environments without special accommodation.

Key Features

• NIAP Protection Profile 4.0 Certification: NIAP PP 4.0 is not a marketing claim — it is a government-evaluated assurance level that mandates hardware data path isolation between ports, tamper-evident design, and anti-spoofing controls for keyboard and mouse. If your deployment requires Common Criteria-validated KVMs for classified processing, this certification is the requirement, not a bonus. Units without it simply cannot be used in those environments.
• Dual Video Format Support — HDMI and DisplayPort at Console: The console side provides both a DisplayPort and an HDMI output simultaneously, so your monitor connects via whichever interface it has — no adapters needed in mixed workstation environments. The host side carries four HDMI and four DisplayPort inputs (20-pin), giving flexibility across the full range of workstation GPU outputs at 4K 60Hz.
• 4K 60Hz Video Resolution: At full 4K 60Hz, the switch preserves the full resolution of modern medical imaging, GIS, or intelligence analyst workstations — no downscaling to 1080p that would degrade fine detail in charts, maps, or high-resolution image sets.
• Eight USB 2.0 Type-B Host Ports (Two per Host): Each of the four host machines connects two USB Type-B cables, covering keyboard and mouse independently. The console side provides three USB 2.0 Type-A ports — enough for a full keyboard/mouse setup plus a peripheral like a CAC reader, which is common in government deployments.
• Audio Switching — 3.5mm Stereo on All Ports: Every host port includes a 3.5mm stereo female jack, mirrored on the console side. Audio follows the active host — useful for voice communications or media review workstations without a separate audio matrix.
• Up to 19.7 ft (6 m) Cable Runs: The 6-meter maximum cable length means the KVM can sit on a desk while hosts are in a nearby rack or secure cabinet — separation that's often required in physically controlled workspaces where servers must be locked away from the operator position.
• All-Metal Enclosure: The metal chassis contributes to EMI shielding, which matters in sensitive compartmented information facility (SCIF) environments where RF emissions from computing equipment are a secondary concern alongside data security.
• 3-Year Warranty: StarTech backs the CK4-HP104C with a 3-year manufacturer warranty — appropriate for infrastructure-class hardware deployed in long-lifecycle government programs.

Integration & Compatibility

The CK4-HP104C (often searched as CK4 HP104C) connects to any host workstation with available DisplayPort or HDMI video and USB 2.0 Type-B ports — which covers virtually every modern workstation platform. The console interface accepts a standard USB keyboard and mouse, plus a third USB 2.0 device such as a CAC/PIV smart card reader, biometric token, or encrypted storage device — peripheral types that appear consistently in government and defense operator setups.

Because NIAP PP 4.0 enforces strict hardware-level isolation, this switch does not support USB device emulation, hub pass-through, or clipboard sharing between hosts. That is by design — any of those features would violate the isolation requirements the certification demands. Buyers coming from commercial KVMs expecting file transfer or clipboard functionality between hosts should understand that this unit deliberately prevents those operations.

Audio routing follows the active video channel; there is no independent audio switching. Each host gets its own dedicated 3.5mm stereo connection that switches with the video selection, keeping audio and video state synchronized.

Frequently Asked Questions

Q: What does NIAP Protection Profile 4.0 certification mean for the CK4-HP104C?

A: NIAP PP 4.0 is a Common Criteria-based government security evaluation standard specifically for desktop KVM switches. It requires hardware-enforced isolation between ports — meaning data cannot cross between connected hosts through the switch. The CK4-HP104C has been evaluated and certified to that standard, making it eligible for use in environments where classified or sensitive data is processed across multiple security domains.

Q: Can the CK4-HP104C share files or clipboard content between connected computers?

A: No. NIAP PP 4.0 certification explicitly prohibits cross-domain data transfer through the switch. There is no clipboard sharing, USB device pass-through, or file transfer capability between hosts. This is a security requirement, not a missing feature — these functions are blocked by design to maintain isolation.

Q: Does the CK4-HP104C support dual monitors?

A: No. The CK4-HP104C supports a single monitor at the console. It provides both an HDMI and a DisplayPort output at the console so you can use whichever interface your monitor requires, but it does not extend across two displays.

Q: What is the maximum video resolution supported?

A: The CK4-HP104C supports 4K at 60Hz, delivering the full resolution of current-generation monitors without downscaling.

Q: What is the maximum cable length between the KVM and connected hosts?

A: StarTech specifies a maximum cable length of 19.7 ft (6 m) between the KVM and connected host machines.

Q: What is the warranty on the CK4-HP104C?

A: The CK4-HP104C carries a 3-year manufacturer warranty.

Ted Perry

The CK4-HP104C is one of the few desktop KVM switches you can actually deploy in a SCIF or multi-domain workstation setup without a waiver conversation — NIAP PP 4.0 is the current evaluated assurance level, and this unit carries it. What that certification enforces matters operationally: hardware-level port isolation means the switch itself cannot be a lateral movement vector between a classified host and an unclassified one, which is the core threat the PP 4.0 evaluation targets.

Technical Highlights:

• NIAP PP 4.0: Government-evaluated hardware isolation standard — not a self-declared compliance claim. Required (not optional) for classified multi-domain desktop environments under most federal security policies.
• Dual Console Video (HDMI + DisplayPort): Console accepts either interface natively, matching the full range of 4K 60Hz monitor inputs without adapters — important when monitor procurement and KVM procurement are on separate timelines.
• 3-Year Warranty: Matches the support lifecycle expectations for government program hardware, reducing re-procurement cycles during a typical 3–5 year contract period.

Deployment Considerations:

• Plan cable runs carefully — the 6-meter maximum means hosts in a locked rack can be positioned up to about 20 feet from the operator console, which covers most standard office-to-adjacent-closet layouts but won't reach across a large server room floor.
• No clipboard sharing, no USB hub pass-through, no KVM-level file transfer — this will frustrate users migrating from a commercial KVM who expect those conveniences. Brief operators in advance: the restrictions are the security model, not a deficiency.

The CK4-HP104C is the right fit for intelligence analyst workstations, defense contractor multi-classification desktops, or any operator position where NIAP PP 4.0 is listed as a procurement requirement rather than a nice-to-have. It is not the right pick for a standard corporate IT environment where USB sharing and clipboard pass-through are part of the daily workflow.