DisplayNet Logo

DisplayNet® Security

Secure by Design.

Hold AV to the same security standards as the rest of your network, with AES-128 encryption, 802.1X, SSH, TLS, and role-based access.

Contact Us

System Security

Protection Built Into Every DisplayNet® System

AES-128 Encryption

In-line 128-bit AES on all AV data over 10GbE

USB HID Encryption

Optional encryption for USB keyboard and mouse streams

HDCP 2.2

Full compliance on DN-300 and DN-200 HDMI connections

802.1X Network Access Control

Endpoint admission under your existing access policy, plus separate VLAN support

Control Layer at a Glance

DisplayNet® Control Security

AuthenticationEnforceable for every user and API client
SSHEncrypted API sessions with managed keys
HTTPS / TLSSupports uploaded certificates
Secure WebSocketEncrypted real-time API traffic
Token RESTSupports revocable bearer tokens
Claim KeysDevices visible only to your servers
RBACRole-based access control
H.26x ControlStreams on or off by device or device type

Control Layer

Authentication and Secure Control

User Access

Authentication on Every Interface

Users and API Clients

Require authentication from every user and API client. Each user keeps the same role and login token in DisplayNet Manager and over telnet, SSH, WebSocket, and REST.

Token-Authenticated REST

Send a bearer token with every REST request. With authentication enforced, requests without a valid token are rejected. Set token lifetime on the server and revoke tokens at any time.

Encrypted Control

SSH, HTTPS, and Secure WebSocket

SSH and Key Management

Run API sessions over SSH and manage trusted public keys from DisplayNet Manager. Enforce SSH to disable the telnet API ports, 6970 and 6980.

HTTPS with Your Certificate

Enforce HTTPS for DisplayNet Manager and Secure WebSocket API traffic. Upload and activate your own SSL certificate and private key.

Device Security

Device Claiming and Authentication

Claim your devices and keep them out of reach of rogue servers. Claimed devices are visible only to servers with the claim key.

DisplayNet Server®

Your server

Claim key

Rogue Server

No claim key

Claimed Endpoints

Transmitter
Transmitter
Receiver
Receiver
  1. Generate a key. Create a random 50-character claim key in DisplayNet Manager and back it up someplace safe.
  2. Claim devices. As an Admin, claim endpoints individually, by device type, or all at once.
  3. Add authentication. Enable device authentication keys to limit the system to authorized devices.

Admins can also disable H.26x streams on a single device or on all devices of a type.

User Roles

Role-Based Access Control

Integrators run and configure the system. Admins also control access and security. Every API command has a minimum role.

Function
Integrator
Admin
Routing
Presets, video walls, and MultiView
Device configuration and layouts
View device security settings
User accounts and roles
Require authentication, enforce SSH and HTTPS
SSL certificates and SSH keys
Claim, release, and authorize devices
Server power, service restarts, and database maintenance

Get Started

Plan a Secure DisplayNet System

Documentation

Find security settings, user management, and API authentication in the DisplayNet® Software Manual and API Manual.

Software Manual API Manual

Talk to Our Application Engineers

Bring us into your IT security review. We will walk your network and security staff through a DisplayNet deployment.

Contact Us

Do the impossible.

Secure AV-over-IP on standard 10GbE networks.

Contact Us