StarTech CK4-D108C 8-Port Secure DVI KVM Switch with NIAP 4.0 and CAC

Overview

The StarTech CK4-D108C is an 8-port secure desktop KVM switch built to NIAP Protection Profile for Peripheral Sharing Devices version 4.0 — the current compliance baseline required for classified and sensitive compartmented information (SCI) environments across U.S. federal, DoD, and intelligence community deployments. If your organization handles multiple security domains on a single operator workstation and needs a switch that has passed independent third-party evaluation under the NIAP scheme, the CK4-D108C is purpose-built for that requirement. It manages up to eight DVI-connected computers from one console, maintains strict data path isolation between hosts, and includes a CAC (Common Access Card) port for smart card authentication — eliminating the need for a separate CAC reader on secure workstations. The metal housing keeps it ruggged enough for permanent installation in operator-dense environments.

For integrators speccing cross-domain solutions (CDS) or multi-level security (MLS) workstations, the CK4 D108C (often searched as CK4 D108C) belongs on the short list before you evaluate topology. NIAP 4.0 compliance is not retroactively applied — it requires factory-level design and independent lab testing, and StarTech carries that certification on this model.

Key Features

• NIAP PSD 4.0 Certified: This is the operative certification for secure KVM deployments in U.S. government and DoD environments. NIAP 4.0 mandates anti-tamper protections, isolated data paths, and verified unidirectional filtering between ports — meaning keyboard/mouse data cannot bleed from one host to another. Without this certification, a KVM is not acceptable for classified workstation consolidation regardless of physical build quality.
• 8 DVI-I Host Ports with Dual-Link Support: All eight host connections use DVI-I dual-link, supporting resolutions up to 2560x1600 at the console — relevant for analysts and operators running high-resolution imagery, GIS, or signals intelligence displays where a single-link 1920x1200 ceiling would be a problem. Each host port is isolated; the switch does not create a shared video bus.
• CAC Port Integrated: The built-in CAC reader means operators can authenticate to any connected host using their PIV or CAC smart card without removing and reinserting a separate USB reader on each switch. For multi-domain workstations, this eliminates a common physical security gap and simplifies desk layout in tight operator positions.
• Console Interface: 3x USB 2.0 Type-A + 1x DVI-I + 3.5mm Stereo: Three USB Type-A console ports accommodate a keyboard, mouse, and a third peripheral (CAC reader, USB headset, or additional input device) simultaneously. The 3.5mm stereo console port handles audio switching alongside video — useful when operators need headset audio per-host without running a separate audio switch.
• 16x USB 2.0 Type-B Host Connections: Two USB Type-B ports per host (16 total) allow each connected computer to present both keyboard/mouse and an additional USB device — supporting hosts that require dual USB HID inputs or separate CAC connections per host side.
• 8x 3.5mm Stereo Audio per Host: Dedicated stereo audio jacks on all eight host ports enable per-host audio switching. When you switch to a host, audio follows — no manual audio patching required at the operator desk.
• Metal Housing, 17.0 x 8.7 x 1.7 in, 6.3 lb: The all-metal enclosure resists physical tampering and provides RF shielding appropriate for sensitive compartmented areas. At 1.7 inches tall, it sits flat on a desktop without consuming rack space — though its 17-inch footprint occupies meaningful desk width. Factor that into operator workstation layout planning.
• Maximum Cable Length 19.7 ft (6m): The supported DVI cable run of up to 19.7 feet gives you enough reach to place tower workstations under or behind a desk while keeping the KVM at the operator position — standard for most operator station footprints. Runs beyond this distance risk signal degradation on DVI at high resolutions.
• Operating Temperature 0°C to 40°C: Designed for standard climate-controlled indoor environments. This is not hardened for field or industrial deployment — it belongs in a conditioned operator room or SCIF, not a vehicle or outdoor enclosure.
• 3-Year Manufacturer Warranty: StarTech backs the CK4-D108C with a 3-year warranty, which aligns with typical government procurement cycles and reduces total cost of ownership on a device that may be in continuous operation across multiple shifts.

Integration and Compatibility

The CK4-D108C connects to any DVI-I equipped workstation or server via the 16 USB Type-B host connections for HID and the 8 DVI-I host video ports. The console side presents a single DVI-I output — connect your monitor directly. USB keyboard and mouse attach to the three Type-A console USB ports. Audio is managed through the 3.5mm stereo ports on both console and host sides. There is no IP-based or virtual media capability on this unit — it is a local, physically present KVM switch, which is a design requirement for NIAP 4.0 certification (remote access paths are excluded by the protection profile). If your architecture requires IP-based KVM access, a NIAP 4.0 secure switch is incompatible with that topology by definition.

Confirm your connected monitors support DVI dual-link input if you intend to run resolutions above 1920x1200. Single-link DVI monitors will operate but will cap out at single-link bandwidth. For integrators building KVM switch solutions in federal or defense environments, verify host DVI output types — DVI-D, DVI-I, and DVI-A are not all equivalent in every configuration.

Frequently Asked Questions

Q: What NIAP certification level does the CK4-D108C carry?

A: The CK4-D108C is certified to NIAP Protection Profile for Peripheral Sharing Devices (PSD) version 4.0, which is the current version required for secure government and DoD deployments.

Q: Does the CK4-D108C support CAC smart card authentication?

A: Yes. The CK4-D108C includes an integrated CAC port, allowing operators to use a single PIV or CAC smart card reader at the console without needing a separate USB reader per host.

Q: What is the maximum display resolution supported?

A: The CK4-D108C supports DVI dual-link on all host and console ports, which enables resolutions up to 2560x1600. If your monitor only supports DVI single-link, you will be capped at single-link resolution limits (1920x1200).

Q: Can the CK4-D108C be accessed remotely over IP?

A: No. The CK4-D108C is a local desktop KVM switch with no IP or remote access capability. This is by design — NIAP PSD 4.0 certification requires physical isolation and excludes remote access paths.

Q: What is the warranty period on the CK4-D108C?

A: StarTech provides a 3-year manufacturer warranty on the CK4-D108C.

Q: How many USB console ports are available for peripherals?

A: The console side provides 3 USB 2.0 Type-A ports, accommodating a keyboard, mouse, and one additional peripheral (such as a headset adapter or supplementary input device) simultaneously.

James Everett

The spec that matters most when evaluating the CK4-D108C is the NIAP PSD 4.0 certification — not because it's a checkbox, but because it defines what the hardware is physically allowed to do. Isolated data paths, anti-tamper design, and unidirectional filtering are verification requirements under that profile, not marketing claims. If you're building a multi-domain workstation for a cleared facility and the switch on your BOM doesn't carry current NIAP PSD 4.0, you're either replacing it during ATO review or operating outside your system security plan. The CK4-D108C holds that certification as a factory-level design attribute.

Technical Highlights:

• DVI Dual-Link on All 8 Ports: All host and console DVI-I connections are dual-link capable — supports up to 2560x1600, which matters for imagery analysts and operators running high-resolution multi-source displays where single-link's 1920x1200 ceiling is insufficient.
• Integrated CAC Port: Eliminates the need for a separate smart card reader at each workstation position. For an operator switching between 8 hosts with individual CAC authentication requirements, this is a meaningful reduction in desk clutter and a reduction in the USB surface area exposed per host.
• Metal Housing at 6.3 lb: The all-metal enclosure provides RF shielding and physical resistance to tampering — both relevant in SCIF and sensitive compartmented environments. The 1.7-inch profile keeps it flat on the desk without rack mounting.

Deployment Considerations:

• The 19.7-foot maximum DVI cable length is workable for standard operator station layouts, but plan your tower-to-KVM routing before finalizing desk builds — DVI at dual-link resolution is more sensitive to cable quality and length than DisplayPort or HDMI at equivalent bandwidth.
• The CK4-D108C has no IP or virtual media capability — that is intentional under NIAP 4.0. Do not specify this unit if your architecture requires remote KVM access; that requirement is fundamentally incompatible with the NIAP PSD protection profile this switch is certified under.

The CK4-D108C is the right pick for a SCIF or secure operations center where operators consolidate access to multiple classified or multi-level hosts at a single desk, need integrated CAC authentication, and the system security plan requires NIAP PSD 4.0 on all peripheral sharing devices.