TAA-Designated KVM Switches for Federal Buyers

The Trade Agreements Act question is about origin, and it has a specific shape. Under FAR 25.003 an end product qualifies if it is wholly the growth, product or manufacture of the United States or of a designated country, or if it was substantially transformed in one of those places into a new and different article of commerce with a name, character or use distinct from what it was made from. "Designated country" is itself four lists rolled into one term — the WTO Government Procurement Agreement countries, the free trade agreement countries, the least developed countries and the Caribbean Basin countries — and the composition of those lists is exactly the part that changes over time. As of August 2026 the FAR text published on acquisition.gov reflects FAC 2026-01, effective 13 March 2026. Treat any list you have saved as a snapshot, and confirm the current one at acquisition.gov or through GSA's own designated-country lookup before you rely on it in a determination.

What the designation on a catalog title does not do is settle the other compliance questions in the same order, and on this class of part there are usually three of them. It says nothing about NDAA Section 889, which is a different statute asking a different question and carrying no dollar threshold whatsoever: it applies at every acquisition value, including micro-purchases and commercial off-the-shelf items, and it names specific entities — Huawei, ZTE, Hytera, Hikvision and Dahua, with their subsidiaries and affiliates — rather than countries. It says nothing about whether a secure model has been evaluated against NIAP's protection profile for peripheral sharing devices, which is a listing you look up by model and version on NIAP's Product Compliant List, not something a title can settle. And it says nothing about cryptographic validation on an over-IP switch's management interface: that is a NIST Cryptographic Module Validation Program question, answered by looking the specific module up on csrc.nist.gov and checking whether its certificate sits on the Active or the Historical list. Buyers with a FIPS requirement should note the calendar — CMVP has said that modules validated to FIPS 140-2 will move to the Historical list on 21 September 2026, which does not revoke a certificate or stop an existing system running, but does mean a module in that state is a poor choice to specify into a new build.

The KVM shelf splits into three jobs, and the paperwork gets heavier as you move along it. A standard switch shares one keyboard, monitor and mouse across two, four, eight or sixteen machines because walking between them is a waste of a person; the questions are port count, connector, resolution and whether the console needs audio and a USB hub. A secure peripheral sharing device answers a different requirement entirely — it exists so that a console shared across separated systems cannot itself become the path between them, which is why its titles talk about isolation, absence of internal memory, anti-tamper switches and dedicated card-reader ports rather than about convenience features. An over-IP switch moves the console onto the network so an administrator can reach a machine that has stopped answering, and in doing so it becomes a piece of out-of-band infrastructure that has to be addressed, patched, access-controlled and, in a good many federal environments, encrypted to a standard someone will ask you to evidence.

Two planning notes save most of the rework. The first is that a secure console is a system, not a switch: the evaluated device, the cables the manufacturer specifies for it, the card reader if identity has to pass through, and the displays and their connectors are one decision, and substituting any of them late is how a desk ends up with an adapter chain nobody wants to explain during an assessment. The second is that the origin clause reaches all of it. A switch bought against a TAA-clause order sits beside cables, extenders, rack rails and sometimes a second unit for the adjacent desk, and each of those lines carries its own origin answer — the clause does not stop at the item that happened to be on the drawing. Send the console layout, the number of machines per position, the connectors those machines present and whether a secure or over-IP device is required, and the switches, the cabling, the racks and any console hardware can be quoted together on one document with lead times attached.