Page 2
Copyright 2015 Imation Corp. All rights reserved. Imation and Imation logo, IronKey and IronKey logo, and “PC on a Stick” are trademarks of Imation Corp. All other trademarks are the property of their respective owners. Imation Enterprises Corp. 1 Imation Way Oakdale, MN 55128-3414 USA www.imation.com...
CONTENTS About my IronKey Workspace W700-SC device Features and benefits Host computer requirements Device management Device security Device specifications Recommended best practices Other resources About IronKey Control Panel Starting IronKey Control Panel Booting from a USB drive Running the Startup Assistant...
ABOUT MY IRONKEY WORKSPACE W700-SC DEVICE IronKey Workspace W700-SC is a trusted, FIPS 140-2 Level 3 certified, secure USB flash drive that features XTS-AES 256-bit hardware encryption. Certified by Microsoft as a Windows To Go device, your W700-SC is a secure, personal workspace.
An IronKey Enterprise Management System allows IT administrators to remotely manage your IronKey Workspace W700-SC device. If you have a managed device, you must first activate it before you start Windows To Go. Activation binds the device to your user account in the IronKey Enterprise Management System and applies a device policy.
User management Use the IronKey Control Panel application to manage your device preferences. If your device is managed by an IronKey Enterprise Management System, the IronKey Control Panel allows the device to connect to the management system. Using the Control Panel, you can activate your device with the management system and download device software updates.
The IronKey Workspace W700-SC adds an extra security factor when authenticating, a smart card. Instead of a device password like other IronKey Workspace devices, you can use your smart card to unlock the device. The encryption key from the smart card is paired with the device and bound to the device authentication method.
If your company has purchased IronKey secure storage devices, you can save your data to the IronKey storage device while booted in Windows To Go. You can also use folder redirection or offline files, or back up your data to a network drive or cloud-based storage space.
ABOUT MY IRONKEY WORKSPACE W700-SC DEVICE Other resources OTHER RESOURCES IronKey devices http://support.ironkey.com Support information, knowledge base and video tutorials securityfeedback@imation.com Product feedback and feature requests http://www.ironkey.com General information Windows To Go http://www.ironkey.com/en-US/windows-to-go-drives/windows-to-go.html Reference documentation from Apple The following table provides links to documentation from Apple about Boot Camp 5.1 and Windows 8 and 8.1 support on Mac computers.
ABOUT IRONKEY CONTROL PANEL The IronKey Control Panel is software that lets you manage your device. You can run the Control Panel when you are booted into the host operating system or when booted in Windows To Go. The Control Panel lets you edit your device preferences and view device information, such as the software or firmware version.
Panel operations” on page 10. Note: If you have a managed device, the first time you start IronKey Control Panel in non-boot mode, you will be required to activate the device. See “Activating a managed device on first-time use” on page 20.
Page 12
To lock the device • In IronKey Control Panel, click Lock from the bottom left corner of the application. You can also use the keyboard shortcut: CTRL + L. Note: Once the device is locked, you can safely unplug it.
Page 13
Windows To Go mode In Windows To Go mode, IronKey Control Panel runs automatically when you boot Windows from the device. You do not have to unlock the device to start the application. The device unlocks when you authenticate in the IronKey Workspace Preboot environment.
• Booting your device on a Macintosh RUNNING THE STARTUP ASSISTANT Run the IronKey Workspace Startup Assistant first before you try booting Windows To Go from the device. The Startup Assistant runs on Windows computers only and will not configure Mac systems. The tool can...
Page 15
To run the IronKey Workspace Startup Assistant Make sure that the host computer is turned on and the host operating system is running. Insert the IronKey Workspace W700-SC device into the USB port of the host computer. Click the Settings...
MANUALLY CONFIGURING THE HOST COMPUTER If the host computer is not supported by the IronKey Workspace Startup Assistant, you can manually configure it to boot from a USB device. The steps to configure your computer depend on the host operating system you are using.
Boot menu, the computer starts Windows To Go from the device for only this startup session. This is called a one-time boot procedure and does not permanently change the boot order of the host computer. IronKey Workspace W700-SC User Guide...
Windows To Go. For more information about installing Boot Camp “Installing Boot Camp support drivers” on page 37. For a list of Mac models that have been tested with IronKey Workspace devices running Windows To Go, see “Level of support for Mac models” on page 34.
Page 19
Tip: If you do not press the Option key in time and the Mac operating system starts, click Restart on the Welcome screen (or click the Apple menu and choose Restart), and then immediately hold the Option key to open the Startup Manager. IronKey Workspace W700-SC User Guide...
Activating a device binds the device to your user account in the IronKey Enterprise Management System. With the IronKey Workspace W700-SC, the smart card is also paired with your device during this process. You will need the activation code provided by your administrator. During device activation, policies are applied to your device.
Page 21
Do one of the following: • If you are running a Mac, open the IronKey Unlocker drive in Finder and then open the IronKey appli- cation. If you want the IronKey Unlocker application to automatically open when you plug in the device, install the Auto-Launch Assistant.
Page 22
Tip: You will need the smart card PIN when you start Windows from the device. Installing the Auto-Launch Assistant (Mac only) Installing the Auto-Launch Assistant will automatically open the IronKey Unlocker window when you plug in the device on that computer. This feature is only available on a Mac.
System before you start Windows for the first time. For more information, see “Activating a managed device on first-time use” on page During the startup procedure, you will need your smart card and PIN. The PIN unlocks the device in the IronKey Workspace W700-SC Preboot environment. For security reasons, Windows To Go must start within 90 seconds after the device unlocks and reboots into Windows To Go (step 4).
If the device is being used in non-boot mode (that is, the device is not booted into Windows To Go and the host operating system is running), you should lock the device (using IronKey Control Panel), and then safely eject it from the host computer. For more information about locking a device, see “To lock the device” on page...
Page 25
Managing your Smart Card and PIN Open a file manager, double-click the IronKey.exe file from the IronKey Workspace drive. Type a SmartCard PIN and confirm it, and then click Continue. The new smart card will be paired with the device.
For managed devices, updates are uploaded to the IronKey Enterprise Management System by an administrator. You can download and install the update using IronKey Control Panel. If set in the device policy (by your administrator), you will automatically be notified about a new update when you unlock the device.
Insert the device into the USB port of the host computer. Unlock the device and start the IronKey Control Panel application by double-clicking the “IronKey.exe” file on the IronKey Workspace drive from a file manager.
7 lines and 200 characters). VIEWING DEVICE INFORMATION You can find specific information about your device, such as the model and serial number, software and firmware version from IronKey Control Panel. To view device details In IronKey Control Panel, click the Settings button on the menu bar.
To switch to non-boot mode, shut down the Windows To Go operating system and then unplug the device. Restart the host computer and then plug the device back in. Start the IronKey Control Panel on the application partition of the device. Follow all of the steps in the procedure “Updating device software”...
The Admin Code that was set on the device when it was provisioned may not match the Admin Code set when the device was added to your user account in IronKey Enterprise Management System. If these codes (set by an administrator) do not match, the Activation Code will not activate your device. Contact your administrator to verify that you have the correct Activation Code for your device.
Page 31
USB boot issue. Once set, when you shut down the PC, it will perform a full shut down operation. Open the Control Panel and click Power Options. Tap or click the Choose what the power buttons do. IronKey Workspace W700-SC User Guide...
Page 32
Tap or Click the Change settings that are currently unavailable. If prompted by UAC, then tap or click Yes. Under Shutdown settings, click to clear the Turn on fast startup box, and tap or click Save changes. IronKey Workspace W700-SC User Guide...
Page 33
Some PC manufacturers prioritize the performance of USB 3.0 ports before a USB 2.0 port. The USB 3.0 port is visually different. See the image below for examples of USB 2.0 and 3.0 ports. USB 3.0 ports often have this symbol beside the port. SS stands for Super Speed. IronKey Workspace W700-SC User Guide...
Mac or a Windows-based computer. LEVEL OF SUPPORT FOR MAC MODELS The following table lists Mac models that have been tested with Windows To Go on an IronKey Workspace device. The level of support for Mac hardware is indicated by model.
Page 35
2013) OS X 10.8.4 after installing Boot Camp, you may have to install it manually from the Driver folder in the Boot Camp directory. • MacBook Air (13 inch Mid Level 1 5.1.5621 2012), Software OS X 10.9.1 IronKey Workspace W700-SC User Guide...
Mac mini (Mid 2010) supported The alternate re-boot method refers to how the computer reboots from the IronKey Workspace Preboot Environment. Some Mac models require that you use this method to ensure that the USB device displays in the Startup Manager when you reboot the computer.
Turn on the computer and immediately hold the Option key (Alt key on a non-Mac keyboard) to open the Startup Manager. For a list of all startup key combinations for Intel-based Mac computers, see http://support.apple.com/kb/ht1533. IronKey Workspace W700-SC User Guide...
Page 38
If you downloaded both versions of Boot Camp 5.1 support software, you can copy both versions to Windows To Go but you should only install the version that supports the Mac you are currently using. IronKey Workspace W700-SC User Guide...
Page 39
Double-click the folder for the manufacturer of the component that is not working. For example, for a wireless driver, try Broadcom. Double-click the driver executable file for the missing driver. For example, for wireless, try BroadcomNet- AdapterWin8x64.exe. IronKey Workspace W700-SC User Guide...
Safely eject the USB drive. If the computer is running Windows, move to a Mac that supports the version of Boot Camp 5.1 Support Software you downloaded. Follow the instructions in “Installing Boot Camp support drivers” on page 37. IronKey Workspace W700-SC User Guide...
You can activate your device on a qualified Mac or PC. Device activation can only be done using the IronKey Control Panel in non-boot mode (not in Windows To Go). Once activated, you can boot your device by following the procedure “Starting Windows from the device”...
Page 42
APPENDIX 2: ADMIN USERS Activating a managed device on first-time use • If you are running Windows, open a file manager, double-click the IronKey.exe file from the IronKey Workspace drive. Type the Activation Code (or copy and paste the characters if you received an email with the activation code) and click the check box to agree to the End-User License Agreement.
IronKey Enterprise Management System to access your online account through the IronKey Control Panel. The online account lets you view the IronKey devices associated with your user account. If you own more than one IronKey device, you can create nicknames for each device. Names help you tell the devices apart from each other when viewed online.
Page 44
Manage Account Settings. The Admin Console in the IronKey Enterprise Management System will open in a Web browser. To edit a device nickname Log on to your online account in IronKey Control Panel.
Page 45
Type a new nickname in the box and click the Save button. To manage your online account settings Log on to your online account in IronKey Control Panel. Click the My Account tab. The following table describes tasks that you can perform in your online account.
Need help?
Do you have a question about the Workspace W700-SC and is the answer not in the manual?
Questions and answers