top of page

Desktop Profile

Mandatory Requirements

  1. 55cm (21") or larger display.

  2. All-in-One chassis.

  3. USB ports, for HID devices (e.g. keyboard and mouse).

  4. GigE NIC with support for PXE (netboot) and WOL (Wake-on-LAN).

  5. x86–64 CPU, although low-end is sufficient.

  6. 4G or more of RAM.

  7. Glass fascia. Vendors are encouraged to consider the option of stronger tempered glass as some correctional facilities consider this a valuable feature.

  8. Internal PSU. An external PSU is not suitable as it can be used as a flail weapon.

  9. Chassis secured with Tamper-Resistant Torx (also known as Torx TR) or pin-in Torx to ensure prisoners can not gain access to the internal components.

  10. Internal speakers.

  11. 3.5mm TRS stereo jack and TS mic, or combined TRRS audio jack.

  12. No webcam. Exceptions may be made for desktops isolated in monitored rooms, for use in virtual hearings or similar.

  13. No hard-drive.

  14. No TV receiver.

  15. No microphone.

  16. No WiFi transceiver.

  17. No bluetooth transceiver.

  18. Any external port must provide no support for MHL, HEC, or HEAC.

  19. All firmware config screens disabled. It is acceptable for the firmware to only display information such as the date and time, MAC address, etc.

  20. Firmware password protection disabled. Note that common 'password protection' is insufficient to satisfy the previous requirement.

  21. Traditional BIOS. We expect to support UEFI in the future. When we do, UEFI and secure boot must be configured to include only Cyber IT Solutions' public key in trusted keyring (db), and Microsoft's keys explicitly blacklisted (dbx). Cyber IT Solutions' public key available on request.

  22. Permit boot from only PXE (netboot).

  23. Boot must be disabled from HDD and removable media (USB, CD/DVD, etc) under all circumstances.

  24. SATA AHCI enabled.

  25. WoL (wake-on-LAN) enabled.

  26. Firmware factory default and optimised default values equivalent to these requirements.

  27. Firmware must not allow updates to be applied by removable media.

  28. HDMI audio disabled.

  29. NumLock off.

Torx Tamper-resistent Screw
Prison wireless denied
Hardened PrisonPC PILS Desktop
Valuable (non-mandatory) Features

  1. No accessible mass storage slots (e.g. SD-Card reader), excepting the mandatory USB ports for HID devices. It is acceptable to leave the device disconnected from the controller.

  2. Intel NIC and Intel GPU, as these are most compatible with PrisonPC.

  3. Touchscreen. Vendors are encouraged to offer an optional touchscreen interface as some correctional facilities may consider this a valuable feature.

  4. Optical (CD/DVD) drive. Some correctional facilities require optical drives while the policy in others is the drive be removed and a blanking plate securely installed in its place.

  5. Transparent chassis, with suitable electromagnetic shielding. For high-security facilities, vendors are encouraged to consider an optional transparent chassis.

  6. USB sockets provide only between 180 and 220 milliamps on all ports.

bottom of page