IS-FL-DSD-256-DP Includes Only:
- 2 datAshur SD with Protective Sleeve, Type C to A adapter and Quick Start Guide
- 1 KeyWriter Licence
Features:
- Easy to use - 8-64 digit, PIN authenticated, hardware encrypted USB Type-C flash drive.
- Expand your datAshur SD capacity instantly. The microSD Card slot is designed to accept as many encrypted iStorage microSD Cards, in varying capacities, as required.
- datAshur SD drives can be cloned with the same encrypted encryption key using the patented iStorage datAshur SD KeyWriter software. This allows users with different datAshur SD drives to share encrypted data stored on iStorage microSD Cards or to create a backup drive in case your datAshur SD drive is lost or stolen.
- FIPS 140-3 Level 3 compliant, tamper proof and evident design
Easy to use
Insert your iStorage microSD Card into the datAshur SD microSD Card slot and simply enter your 8-64 digit PIN to authenticate and use as a normal flash drive. When the drive is locked, all data on the iStorage microSD card is encrypted (full disk encryption) using AES-XTS 256-bit hardware encryption (no software required).
On-device Crypto-chip
Offering 100% real-time military grade AES-XTS 256-bit Hardware Encryption with FIPS PUB 197 validated encryption engine.
Government validations
FIPS 140-3 Level 3 compliant (pending Q2 2022).
Key-logger and Brute Force Attack Protection
The datAshur SD is authenticated (unlocked) and all functions are performed using the onboard alphanumeric keypad and with zero software and host involvement, the device is not vulnerable to key-loggers and/or brute force attacks
Polymer coated, wear resistant alphanumeric keypad
The datAshur SD keypad is coated with a layer of wear resistant polymer that protects the keys and hides key usage to avoid tipping off a potential hacker to commonly used keys.
Brute force hack defence mechanism
If the User PIN is entered incorrectly 10 consecutive times, the User PIN will be deleted and the drive can only be accessed by either activating the User recovery PIN (if configured) or entering the Admin PIN.
Immune to Bad USB
Both the USB Crypto chip and Secure Microprocessor incorporate digitally signed flash lock mechanisms making the datAshur SD immune to Bad USB.
Common Criteria EAL5+ secure microprocessor
Offers ultimate security against hackers, detecting and responding to tampering with features such as:
- Dedicated hardware for protection against SPA/DPA/SEMA/ DEMA attacks.
- True Random Number Generator (TRNG), with NIST SP800- 90B approved analogue noise source.
- Advanced hardware protection against physical attacks, including:
- Active Shield, for detecting any physical intrusion or tampering
- Enhance Protection Object, for protecting the memory against any attempts to introduce perturbations via laser attacks.
- Glitch & Slope Detectors, for monitoring the internal power supply, and protecting the execution against glitch attacks on the power pins.
- Built-in Parity Check mechanism, for detecting any corruption of sensitive states and registers.
- Bare-metal Memory and Bus Encryption, for mitigating the risk of program, code and data integrity violation.
- Environmental Protection Systems, for preventing any execution out of the operating ranges (voltage, frequency and temperature).
- Secure Memory Management & Access Protection, for preventing against code injection attacks.
- In-house state-of-the-art secure firmware, developed with pervasive protection throughout the code, and designed to resist against advanced Side Channel Attacks.
- NIST SP800-90A approved Deterministic Random Bit Generator (DRBG), generating random numbers which are statistically equivalent to a uniformly distributed data stream.
Tamper proof & evident design
All critical components incorporated within the datAshur SD are completely covered by a layer of super tough epoxy resin, which is virtually impossible to remove without causing permanent damage to the components. The drive is also designed to be tamper evident making it obvious if it has been tampered with.
Super tough drive
The datAshur SD housing and protective sleeve are made of hard anodised and ruggedised extruded aluminium, giving it a crush proof design that can withstand the weight of a 2.7 ton vehicle.
Auto-lock
The datAshur SD automatically locks when unplugged from the host computer or when power to the USB port is turned off. It can also be set to automatically lock when idle following a predetermined length of time.
Read only (write protect) - Dual Mode
Both Admin and User can configure the datAshur SD as a read only (write protect) device. If configured by the Admin, the feature cannot be modified or disabled by the User, allowing the Admin to pre-provision a device with pre-loaded content as a read-only drive for the User.
Bootable
Ideal in certain cases where the datAshur SD needs to remain unlocked during USB port re-enumeration, such as during a reboot process or passing the device through a virtual machine. Allows users to install an OS on the datAshur SD and boot directly from it.
User recovery PIN
Extremely useful in situations where a User forgets their PIN, the recovery PIN allows the User to unlock the datAshur SD and set a updated User PIN.
User PIN enrolment
Admin can set a restriction policy for the User PIN. This includes setting the minimum length of the PIN, as well as requiring the input of one or more 'Special Character' if needed. The 'Special Character' functions as 'SHIFT ( ) + digit'
Whitelisting on networks
Configured with a unique VID/PID and internal/external serial number with barcode, allowing easy integration into standard end-point management software (white-listing), to meet internal corporate requirements.
Superspeed USB 3.2 (Generation 1)
Backward compatible with older USB ports.
Self-destruct feature
Pre-program the datAshur SD with a self-destruct PIN, once entered, the encrypted encryption key and all PINs are deleted rendering the drive unable to then decrypt data stored on iStorage microSD Cards that were encrypted with the same drive.
Device reset feature
Deletes the encrypted encryption key, all PINs and renders all data as lost forever. The device can then be redeployed which randomly generates a updated encrypted encryption key, a process that can be repeated as many times as required.
Customisation services
Offering an in-house PIN configuration and laser-etching service whereby the datAshur SD sleeve or side of the device can be customised with your name, company name and/or logo, web/email address, phone number etc.
