Kingston Technology IRONKEY D500SM Manual de usuario

IRONKEY™D500SM

ENCRYPTED USB 3.2 Gen 1 FLASH DRIVE

User Guide

Contents

About This Guide .................................................................................................................. 3

Quick Start ............................................................................................................................. 4

About My Device ................................................................................................................... 4

How Is This Different Th an A Regular USB Drive? ................................................................. 4

What Systems Can I Use It On? ........................................................................................... 5

Some applications are only available on specific systems: Windows Only ..................................... 5

Product Specifications ............................................................................................................ 5

Recommended Best Practices ......................................................................................... 6

Setting Up My Device..................................................................................................... 6

Device Access (Windows Environment) .................................................................................. 6

Device Access (macOS Environment) ................................................................................. 7

IronKey Control Panel ......................................................................................................... 7

Using My Device - Managed Features .......................................................................... 9

Accessing My Secure Files ..................................................................................................... 9

Unlocking In Read-Only Mode ...................................................................................... 9

Changing The Unlock Message ......................................................................................... 10

Locking The Device ........................................................................................................ 10

Typing Passwords with The Virtual Keyboard ................................................................ 12

Managing Passwords ......................................................................................................... 12

Formatting My Device .................................................................................................... 13

Finding Information About My Device .................................................................................................. 13

FAT32 .................................................................................................................................................... 13

exFAT ................................................................................................................................................................... 13

Finding Information About My Device ............................................................................. 13

Editing The Applications List ................................................................................................ 14

Resetting My Device .......................................................................................................... 14

Using My Device - Managed Only Features ................................................................ 15

Accessing My Device If I Forget My Password .................................................................... 15

Scanning My Device for Malware .................................................................................... 15

Using ZoneBuilder in SafeConsole .................................................................................. 16

Using My Device on Linux.................................................................................................. 16

Using The IronKey ................................................................................................................. 16

Where Can I Get Help? ................................................................................................... 17

About This Guide (06012023)

IronKeyTM D500SM is a Managed drive that requires a device license and can be

managed by SafeConsole. SafeConsole is a secure cloud or on-premises management

platforms that allow your organization to centrally manage compatible USB (Universal

Serial Bus) storage devices easily and efficiently.

This guide will explain how to setup and initialize a D500SM drive on a SafeConsole to

be a managed drive.

Quick Start

Windows 11, 10 & macOS 10.15.x – 13.x.x

Plug the device into your computer’s USB port.

When the Device Setup window appears, follow the on-screen instructions. If this

window does not appear, open it manually:

•

Windows: Start > This PC > IronKey Unlocker > IronKey.exe

•

macOS: Find er > IRONKEY > IronKey.app

When Device Setup is complete, you can move your important files to the IRONKEY

SECURE FILES USB drive, and they will be automatically encrypted.

Some Windows systems prompt to restart after you first plug in your device. You can

safely close that prompt without restarting - no new drivers or software are installed.

About My Device

IronKey D500SM USB 3.0 is a portable flash drive with built-in password security and

data encryption. It is designed with advanced AES 256-bit encryption and other features

that enhance mobile data security. Now you can safely carry your files and data with

you wherever you go.

How Is This Different Than a Regular USB Drive?

FIPS 140-3 Level 3 Certification - The IronKey D500SM is a FIPS-certified device, so

you can feel confident that you’re complying with regulatory requirements.

Hardware Encryption – The Advanced Encryption Controller in your device

protects your data with the same level of protection as highly classified government

information. This security technology feature is always on and cannot be disabled.

Password-Protected - Device access is secured using password protection. Do not

share your password with anyone so that even if your device is lost or stolen, no one else

can access your data.

Device Reset - If the Advanced Encryption Controller detects physical tampering, or if

the number of consecutive incorrect password attempts exceeds 10 attempts, the

device will initiate a reset sequence. Important - When a device is reset, all onboard

data will be erased, and the device returns to factory settings - so remember your

password. NOTE: Admins can reset password using SafeConsole.

Anti-Malware Autorun Protection - Your device can protect you from many of the

latest malware threats targeting USB drives by detecting and preventing autorun

execution of unapproved programs. It can also be unlocked in Read-Only Mode if you

suspect the host computer is infected.

Simple Device Management - Your device includes the IronKey Control Panel, a

program for accessing your files, managing your device, and editing your

preferences, changing your device password, and safely locking your device.

What Systems Can I Use It On?

• Windows® 11

• Windows® 10

• macOS® 10.15.x – 13.x.x

• Linux (4.4.x or higher) Note: The Linux CLI Unlocker does not support any features that

require network access, for example, setting up your device or changing your

password.

Some applications are only available on specific systems:

Windows Only

• Virtual Keyboard (English only)

• Device Updates

Product Specifications

For further details about your device, see the Device Info page in the IronKey Control

Panel.

Specifications Details

Capacity* 8GB, 16GB, 32GB, 64GB, 128GB, 256GB, 512GB

Speed** USB 5Gbps:

- 8GB-16GB: 165MB/s Read; 22MB/s Write

- 32GB: 250MB/s Read; 40MB/s Write

- 64GB-512GB: 250MB/s Read; 85MB/s Write

Dimensions 77.9 mm x 22.2 mm x 12.05 mm

Waterproof Up to 4 ft. (1.2 m)

Temperature Operating: 0°C to 50°C; Storage: -20°C to 85°C

Hardware

Encryption

256-bit AES (XTS Mode)

EMI/EMC

Compliance

TAA Compliant, FCC, CE, VCCI & KC, RoHS & WEEE

Certification FIPS 140-3 Level 3 Certified (pending)

Hardware USB 5Gbps Compliant and USB 2.0 Compliant

Compatibility

- Windows 11, Windows 10 (Requires Two Free Drive

Letters)

- macOS 10.15.x – 13.x.x

- Linux 4.4.x***

Accessibility IronKey Control Panel is designed to be Section 508

compliant. Users with disabilities have keyboard

navigation and screen reader support.

Warranty 2 Years Limited

Designed and assembled in the U.S.A., D500SM devices do not require any software or

drivers to be installed.

* Advertised capacity is approximate. Some space is required for onboard software.

** Speed varies with host hardware, software, and usage.

*** Limited Feature Set. No online management features.

Recommended Best Practices

Lock the device:

•

when not in use

•

before unplugging it

•

before the system enters sleep mode

Never unplug the device when the LED is lit.

Never share your device password.

Perform a computer anti-virus scan before setting up and using the device.

Setting Up My Device

To ensure there is ample power provided to the D500SM encrypted USB drive, insert it

directly into a USB 2.0/3.0 port on a notebook or desktop. Avoid connecting it to any

peripheral devices that may feature a USB port, such as a keyboard or USB-powered

hub. Initial setup of the device must be done on a supported Windows or ma c OS based

operating system.

Device Access (Windows Environment)

Plug the D500SM encrypted USB drive into an available USB port on the notebook

or desktop and wait for Windows to detect it.

•

Windows 11 and 10 users will receive a device driver notification.

•

Once the new hardware detection is complete, Windows will prompt to begin the

initialization process.

Select the option IronKey.exe inside of the IRONKEY partition that can be found

in File Explorer. Please note that the partition letter will vary based on the next

free drive letter. The drive letter may change depending on what devices are

connected. In the image below, the drive letter is (E:).

Device Access (macOS Environment)

Plug the D500SM encrypted USB drive into an available USB port on the macOS

notebook or desktop and wait for the operating system to detect it.

Double click the IRONKEY volume that appears on the desktop to start the

initialization process.

•

If the IRONKEY volume does not appear on the desktop, open Find er and locate

the IronKey volume on the left side of the Find er window (listed under Devices.)

Highlight the volume and double-click the IRONKEY application icon in the Finder

window. This will start the initialization process.

IronKey Control Panel

PREFERENCES

1. Language: Change device language

2. Auto lock device: Change lock out timer

3. Exit on Control Panel on lock: Change

behavior to exit or leave open Control Panel

when device is locked.

4. Minimize after unlock: Change to minimize

Control Panel when device is unlocked or

allow it to stay maximized.

5. UNLOCK MESSAGE: Add a message that will

be displayed on the log-in window.

TOOLS

1. UPDATE: Check for Updates

2. DEVICE HEALTH: Reformat secure volume

using FAT32 or exFAT. (macOS only allows

formatting FAT32)

PASSWORD

1. CHANGE PASSWORD: Change drive log-in

password.

2. Enforce Strong Password: Enable/Disable

Strong password requirement

ABOUT

1. ABOUT THIS DEVICE: Lists devices

information.

2. Visit Website: Launches Kingston’s website

3. Legal Notices: Launches both Kingston’s and

DataLocker’s legal notices websites

4. Certifications: Launches Kingston’s certificate

page for encrypted USB devices

Setting Up a D500SM Device with SafeConsole

The initialization process will begin by allowing the device to be ready to

communicate with the SafeConsole server. The steps needed to register a D500SM

to SafeConsole will depend on the policies that your administrator is enforcing. Not all

dialogs will be shown.

A SafeConsole Connection Token will be needed. The SafeConsole Connection

Token is obtained by the System Administrator through the Quick Connect Guide,

located inside of the SafeConsole user interface.

Enter the SafeConsole Connection Token that is obtained in the steps above.

Review the license agreement, check the checkbox to accept it, and click

Activate in the bottom left-hand corner.

•

Optionally Enabled Policies - These policies may or may not be enabled by your

System Administrator. They will appear during device registration if they have been

enabled.

Confirm Ownership of the device: Enter the Windows username and password

that is associated with the login credentials of the computer the device is plugged

into.

Custom Device Information: Required information about you or your device. The

required fields will vary.

Unique User Token: This token is directly associated with the end user’s account

and will be provided by the System Administrator.

Administrator Registration Approval: The System Administrator may require their

approval to proceed with device registration.

Enter a secure Password and Confirm it. Once the password created meets the

requirements listed to the right side of the input fields, click Continue. The

requirements of this password will depend on the policy selected by your

administrator. Passwords are case-sensitive and must have at least 8 characters

along with more requirements if Strong Password is enabled.

Choose a Secure Volume File System (see Formatting My Device) and click

Continue.

The device will now finalize the setup process and be ready for use. Access

the Encrypted Storage by clicking the Folder Icon in the top menu. The settings

of the device can be accessed and altered by clicking the Gear Icon. See the

IronKey Control Panel for more information.

Strong Password

While creating or changing the password for the device there is an option to enable

Enforce Strong Password. For Managed devices this option may be configured or

enforced by your System Administrator. When enabled the following rules are

checked against all potential passwords.

•

Must be at least eight (8) characters in length.

•

Must include characters from at least three (3) of the following character

classes:

ASCII digits (0123456789) Note: If the last character of the password is an

ASCII digit, then it does not count as an ASCII digit for this restriction.

lowercase ASCII (abc…xyz)

uppercase ASCII (ABC…XYZ) Note: If the first character of the password is an

uppercase ASCII letter, then it is not counted as an uppercase ASCII letter for

this restriction.

non-alphanumeric ASCII (!@#$, etc)

non-ASCII characters

Strong Password Examples

Example Passwords Results

password Failed: 8 characters long, however, only contains

1 unique character class (lowercase ASCII).

Password1 Failed: 9 characters long, however the Capital ‘P’

and ‘1’ do not count toward the unique character

classes, leaving only lowercase ASCII.

pa$$Word Pass: 8 characters long. Contains lowercase ASCII,

uppercase ASCII, and non-alphanumeric ASCII.

Using My Device

Verifying Device Security

If a secure USB storage device has been lost or unattended it should be veriﬁed as per

the following user guidance. The secure USB storage device shall be discarded if it may

be suspected that an attacker has tampered with the device or if the self-test fails.

•

Verify the secure USB storage device visually, that it doesn’t have marks or new

scratches that might indicate tampering.

•

Verify that the secure USB storage device is physically intact by slightly twisting it.

•

Verify that the secure USB storage device weighs about 30 grams.

•

Verify when plugged into a computer that the blue indicator light on the secure USB

storage device blinks (the correct frequency is 3 times per second at initial

connection and during read/write operations).

•

Verify that the secure USB storage device is showing as a DVD-RW, and a storage

partition is not mounted until the device is Unlocked.

•

Verify that the device software on the virtual DVD-RW drive is issued by DataLocker

Inc before executing it.

Accessing My Secure Files

After unlocking the device, you can access your secure files. Files are automatically

encrypted and decrypted when you save or open them on the drive. This technology

gives you the convenience of working as you normally would with a regular drive, while

providing strong, “always-on” security.

To access your secure files:

Click Files on menu bar of the IronKey Control Panel.

Windows: Opens Windows Explorer to the IRONKEY SECURE FILES USB drive.

macOS: Opens Finder to the KINGSTON USB drive.

Do one of the following:

To open a file, double-click the file on the D500SM USB drive.

To save a file, drag the file from your computer to the D500SM USB drive.

Hint: You can also access your files by right clicking the IronKey Icon in the Windows

taskbar and clicking Secure Files.

Unlocking In Read-Only Mode

You can unlock your device in a read-only state so that files cannot be altered on your

secure drive. For example, when using an untrusted or unknown computer, unlocking

your device in Read-Only Mode will prevent any malware on that computer from

infecting your device or modifying your files. Managed devices can be forced to

unlock in a read-only state by an administrator.

When working in this mode, the IronKey Control Panel will display the text Read-Only

Mode. In this mode, you cannot perform any operations that involve modifying files

on the device. For example, you cannot reformat the device, restore applications or

edit the Applications List, or edit files on the drive.

To unlock the device in Read-Only Mode:

Insert the device into the USB port of the host computer and run the IronKey.exe.

Check the Read-Only Checkbox below the password entry box.

Type your device password and click Unlock. The IronKey Control Panel will

appear with the text Read-Only Mode at the bottom.

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Almacenamiento de Kingston Technology

Kingston Technology

Kingston Technology Flash Memory Manual de usuario

Kingston Technology

Kingston Technology DataTraveler 2000 Manual de usuario

Kingston Technology

Kingston Technology IRONKEY S1000B Manual de usuario

Kingston Technology

Kingston Technology DataTraveler Vault-Privacy Manual de usuario

Kingston Technology

Kingston Technology DataTraveler Manual de usuario

Kingston Technology

Kingston Technology DataTraveler 4000 G2 Manual de usuario

Kingston Technology

Kingston Technology DataTraveler 4000 Manual de usuario

Kingston Technology

Kingston Technology DataTraveler Bolt Duo Manual de usuario

Kingston Technology

Kingston Technology UHS-I Manual de usuario

Kingston Technology

Kingston Technology DataTraveler 6000 Manual de usuario

Kingston Technology

Kingston Technology SSDNow M-series Manual de usuario

Kingston Technology

Kingston Technology DT4000M-R Manual de usuario

Kingston Technology

Kingston Technology imation S250 Manual de usuario

Kingston Technology

Kingston Technology Ironkey D300 Manual de usuario

Kingston Technology

Kingston Technology IRONKEY Vault Privacy 50 Manual de usuario

Kingston Technology

Kingston Technology KTM8000/386 Manual de usuario

Kingston Technology

Kingston Technology DataTraveler DT400 Manual de usuario

Kingston Technology

Kingston Technology DataTraveler Locker+ Generation 3 DTLPG3 Manual de usuario

Kingston Technology

Kingston Technology DataTraveler 2000 Manual de usuario

Kingston Technology

Kingston Technology DataTraveler 410 (DT410) Manual de usuario

Kingston Technology

Kingston Technology DataTraveler II Plus Migo Edition Manual de usuario

Kingston Technology

Kingston Technology SSDNow 07-16-2009 Manual de usuario

Kingston Technology

Kingston Technology DataTraveler 2000 Manual de usuario

Kingston Technology

Kingston Technology DataTraveler Reader Manual de usuario

Manuales populares de Almacenamiento de otras marcas

QNAP

QNAP TS 32PXU Series Manual de usuario

LaCie

LaCie RUGGED RAID Manual de usuario

Freecom

Freecom CLS DOCK Manual de usuario

PNY

PNY Attache P-FD64MBATT3 Manual de usuario

HP StorageWorks MSL2024 Manual de usuario

OLT

OLT 6x6 Maximizer Manual de usuario

Transcend

Transcend JetFlash 160 Manual de usuario

LaCie

LaCie RUGGED MINI Manual de usuario

Thunderbolt

Thunderbolt 600 Manual de usuario

Panasonic

Panasonic LB-DH8 series Manual

Intel

Intel RAID High Availability Manual de usuario

LaCie

LaCie 12big Thunderbolt 3 Manual de usuario

Spectra Logic

Spectra Logic T-Series Spectra T50e Manual de usuario

Panasonic

Panasonic LKM-F931-1 Manual de usuario

Tabernus

Tabernus Enterprise Erase E2400 Manual de usuario

Rocstor

Rocstor COMMANDER 3F series Manual de usuario

HP P9000 Manual de usuario

Western Digital

Western Digital Ultrastar Data60 Manual de usuario