ControlCenter-IP-XS-20 incl. maximum 20 licenses

Item no. A2300140

Back to last view

KVM-over-IP Matrixswitch XS

Request product now

Add to watchlist Compare product Questions about the product?

Learn more

The form could not be loaded.

With the central unit ControlCenter-IP-XS,

you can operate a smaller number of computers from a smaller number of workplaces. KVM-over-IP™ matrix systems assist you in managing complex IT infrastructures in a simple and intuitive way while leveraging the advantages of a flexible network. Especially in mission-critical environments such as control rooms, military command centers, data centers, or facilities for managing critical infrastructures, users benefit from this secure, reliable, and flexible solution for decentralized operation and administration. The ControlCenter-IP-XS is integrated into the standard IP-based network along with KVM-over-IP™ end devices (computer modules, RemoteAccess-IP-CPUs, and console modules). While the central routing is handled via standard network switches, the ControlCenter-IP-XS manages the mediation logic within the network, optimizes the accessibility of all devices, and enables switching to the connected computer modules.

Transmission

At least one Layer-2-managed switch with Gigabit Ethernet is required, offering features such as QoS, VLAN, multicast, IGMP, IGMP snooping, and IGMP snooping querier. Additionally, adequate performance (forwarding bandwidth, switching bandwidth, forwarding performance, and uplinks) must be ensured, especially when using multiple network switches

KVM-over-IP™ via IP-based networks (layer 3)
Transmission distance between two active network components is up to 100 meters over CAT cables

Device

Improved security through physical separation between workplaces and computers

Access to standard interfaces of the computer, with no software installation required

Users can switch between different sources almost in real-time, without noticing interruptions or delays

The device manages the mediation logic within the network, optimizes the accessibility of all devices, and enables switching to the connected computer modules.

PowerPack not included in the scope of delivery

The ControlCenter-IP-XS series is compatible with the ControlCenter-IP series and the KVM-over-IP™ end devices for computer and workplace connections

Security features

Permanent encryption of all communication and data transmissions, as well as sensitive information such as login credentials and passwords, guarantees a high level of security in critical environments
- AES256-GCM for keyboard/mouse and control data
- AES128-CTR for video, audio, GenericUSB and RS232

Bootloader, operating system, and firmware form a "Trusted Computing Platform" with automatic integrity checks during system startup

Integrated Trusted Platform Module (TPM) protects all access and configuration data from being spied on or tampered with by third parties

Comprehensive rights management and user administration, allowing precise control over which user can access which resources
Option for disablable access protection (OpenAccess mode), in which all connected workstation modules can access all released computer sources immediately and without prior authentication

Support for external directory services (Active Directory, Radius, LDAP) to meet company security policies

To comply with individual password policies and improve security, password complexity can be configured system-wide

Configurable login options, such as displaying terms of use or setting the maximum acceptable number of failed login attempts, can enhance system security

Emergency direct connection (extender mode) between console and computer module ensures continuous operation even during unexpected events at the central module

The optional UID-Locking restricts the usable end devices, ensuring that no additional devices can be added or replaced after activation

Early detection of security incidents or unusual activities through continuous monitoring via Syslog, monitoring, and SNMP

Auto Backup Function: Automates backups at user-defined intervals and replaces manual intervention – ensuring reliable, timely data protection without the need for continuous monitoring

Configurable exclusive access control for USB, audio, and RS232 ensures that access is granted only to console modules and authorized users

End devices (computer modules, RemoteAccess-IP-CPUs and console modules) do not store security-relevant information such as login credentials, which could be extracted in the event of device loss

Freeze function: If the video signal is lost, the last displayed image is frozen and highlighted with a colored frame and timer

Operation features

Operation via multilingual on-screen display (OSD) or a graphical interface and hotkeys

auto-recognition and display of the system structure

Configuration and central update of all components via the multilingual HTML5 web interface “Config Panel 21” (Java-free)

Support for Wake-on-LAN Function: A standardized method for powering on a shut-down or sleeping computer via a network command, provided the target system supports this functionality

With configurable select keys, computers can be made available to each user individually via quick access

Configurable view filters enable efficient sorting of large lists of computer modules

The configurable multi-user access allows multiple users to access a real or virtual computer simultaneously

With channel grouping, multiple computer modules or multiple console modules can be grouped together into a channel group

USB pinning: In grouped channels, transparent USB transmission remains linked to the currently connected computer – even when switching to another system – and continues seamlessly until the transfer is complete

Easy integration of new end devices via the built-in device finder, eliminating the need for manual IP address entry

Device

External power supply via external 12V power pack or G&D-MultiPower, providing a central and redundant power supply

Security features

DirectRedundancyShield (DRS) – premium software feature that ensures continuous operation in case of unexpected disruptions in the active system by seamlessly switching to the previously passive system:
- requires a second matrix switch with the corresponding number of licenses
- each console and computer module establishes two permanent connections to both the active and passive KVM-over-IP matrix but uses only one transmission path at a time
- if the primary connection is interrupted, the previously passive connection automatically and immediately takes over
- the transition is seamless and without any delay in video transmission

2-Factor-Authentication (2FA) – premium software feature to enhance security by using a second possession-based factor during user authentication:
- The traditional password authentication is combined with a time-limited, single-use code (Time-Based-One-Time-Password - TOTP)
- You can choose between using the internal authentication server provided in the device or an external directory service
- Authenticator apps or hardware token can be used
- This additional layer of protection prevents unauthorized access and ensures the highest level of security, particularly in sensitive IT environments

SecureCert feature – premium software feature that ensures compliance with the strict security standards FIPS 140-3, DoDIN APL, and CC EAL2+
- Federal Information Processing Standard (FIPS) 140-3 is a U.S. government standard designed to protect sensitive and valuable data in IT systems. It defines security requirements for cryptographic modules and provides a secure framework for cryptographic operations in IT infrastructures
- The Department of Defense Information Network Approved Products List (DoDIN APL) is a consolidated list of products approved for use in the technology infrastructure of U.S. government agencies. To be listed, products must meet specific requirements within defined categories, including technical, functional, and security-related criteria
- Common Criteria (CC) is an internationally recognized standard for evaluating and certifying the security of IT products. It ensures that products meet defined security requirements and are protected against identified threats. Certification is granted at Evaluation Assurance Level (EAL) 2+, an internationally acknowledged level that guarantees a fundamental and reliable security assessment

Operation features

TradeSwitch Function (TS Function) – premium software feature providing convenient operation and seamless restoration of individual working environments at consoles with multiple console modules, including the most recently connected sources:
- optimizes usability for consoles tasked with simultaneous monitoring or control of multiple computers via several console modules
- provides a central keyboard and mouse for operating the entire workplace
- both input devices can switch to any console module using a hotkey
- CrossDisplay switching additionally offers an especially user-friendly switching method: simply moving the mouse pointer from one monitor to another automatically transfers keyboard and mouse focus to another module and thus another computer
- The FreeSeating function automatically restores a user's personalized working environment, including previously used sources, at any workplace within the group. A single login is sufficient to register all console modules and activate the respective sources, while a single logout will log out the entire group

Push-Get Function – premium software feature for moving/retrieving connections from own or other devices:
- optimizes collaboration within control rooms by improving team communication, flexibility, and responsiveness
- allows users to "push" the connection status of their console module to another console module or "get" it from there

Control options

IP-Control-API – premium software feature enabling remote control, scenario switching, and retrieval of switching states via an API interface:
- allows text-based XML control of a KVM matrix system over the network
- optional encryption of communication
- provides the capability to create custom control applications, send switching commands, and retrieve selective information on switching states as well as computer statuses
- flexible and scalable solution for seamless integration into IT infrastructures from various vendors
- Includes a scripting function for creating, managing, and executing scripts, automating scenarios such as changing the switching state of individual consoles, multiple consoles, or the entire system
- Enables control of external devices via HTTP requests

System expansion

Support for all common video signals, thanks to a wide selection of matrix-compatible KVM-over-IP™ extenders, which can be integrated as end devices in matrix operation in a “mixed” configuration (Mix & Match). Video transmission is performed using bluedec™ – G&D’s advanced, multi-stage, lossless compression – delivering pixel-perfect, lossless video quality with near-zero latency.

The RemoteAccess-IP-CPU lets you seamlessly integrate virtual machines into your KVM-over-IP installation. This way, hybrid systems with real and virtual computer infrastructure can be optimally implemented.

U2-LAN-04 – integrate high-speed USB 2.0 into your KVM-over-IP matrix installation: The U2-LAN-04 is an USB 2.0 high-speed extender and enables the integration of high-speed USB 2.0 signals into a KVM-over-IP matrix installation.

In contrast to the ControlCenter-IP, the terminal device limit of 20 cannot be increased with the ControlCenter-IP-XS.

General	Product group	KVM matrix systems
Transmission	KVM-over-IP™ Transmission	yes
	Range	100 m
	KVM matrix system component	Central unit
	Medium	CAT7 CAT6 CAT5e
	Data rate	100 Mbit/s
Network	Medium 1	CAT5 CAT6 CAT7
Network	Data rate 1	10 MBit/s 100 MBit/s
Maintenance	Update via	ConfigPanel (Network)
Maintenance	Serviceport settings	115200bps (8/N/1)
Housing	Material	anodised aluminium
	Width	ca. 109 mm
	Height	ca. 31 mm
	Depth	ca. 184 mm
	IP protection class	IP20
	Weight	ca. 0.54 kg
Operating conditions	Operating temperature	5 °C to 45 °C
	Operating air humidity	20 % to 80 %, non-condensing
	Area of application	Interior
	Maximum operating altitude	3048m above sea level
	Storage temperature	-20 °C to 55 °C
	Storage air humidity	15 % to 85 %, non-condensing
	MTBF	200000 h at 25°C
	Conformities	CE compliant (see downloads) UKCA compliant (see downloads) FCC compliant (see manual) TAA compliant (see downloads) EAC compliant (see downloads) RoHS compliant (see downloads) WEEE (reg. no. DE30763240) REACH compliant (see downloads)
Power supply	Input voltage	12 VDC
	Current consumption	0.3 A
	Power consumption idle	1.3 W
	Power consumption max.	2.7 W
	Heat output idle	1.3 W
	Heat output max.	2.7 W