Page 1
User Guide IronKey Enterprise Models: S200, S100, D200 IRONKEY ENTERPRISE USER GUIDE PAGE 1...
Page 2
Thank you for your interest in IronKey. IronKey is committed to creating and developing the best security technologies and making them simple-to-use, affordable, and available to every- one. Years of research and millions of dollars of development have gone into bringing this tech- nology to you in the IronKey.
Importing a Digital Certificate into the IronKey (Windows Only) ....23 Using my.ironkey.com (Windows and Mac) ....... . . 25 Using Your IronKey in Read-Only Mode (Windows, Mac, Linux) .
Core Features Hardware-Encrypted Flash Drive Your IronKey can safely store 1, 2, 4, 8, 16, or 32 gigabytes of documents, applications, files and other data. The IronKey Cryptochip inside the IronKey protects your data to the same level as highly classified government information and cannot be disabled or accidently turned off.
Page 5
Secure Local Backup and Data Recovery Securely back up the data on your IronKey using IronKey’s Secure Backup software. It allows you to recover your data to a new IronKey in case your IronKey is ever lost or stolen, or synchronize data between IronKeys.
Device Diagrams The IronKey has been designed from the ground up with security in mind. A combination of advanced security technologies are used to ensure maximum protection of your data. Additionally, the IronKey has been designed to be physically secure, to prevent hardware-level attacks and tampering, as well as to make the device rugged and long-lasting.
Technical and Security Notes We are endeavoring to be very open about the security architecture and technology that we use in designing and building the IronKey devices and online services. There is no hocus-pocus or handwaving here. We use established cryptographic algorithms, we develop threat models, and we perform security analyses (internal and third party) of our systems all the way through design, development and deployment.
Page 8
The IronKey Identity Manager and my.ironkey.com work together, giving you the ability to back up your online passwords to your Online Security Vault. First, you must unlock your IronKey device with your device password. Your Identity Manager passwords are securely stored in a...
An email from your System Admin with an Activation Code ACTIVATIOn AnD InITIALIzATIOn (WInDOWS AnD MAC) When you open the package, you will find one IronKey Secure Flash Drive and a Quick Start Guide. Below is a brief description of the standard way of setting up an IronKey: nOTE: The Windows version of the IronKey Control Panel is shown.
Page 10
“Preferences” in IronKey Control Panel Settings. (Mac only) 3 Retrieve the email with your Your System Admin has setup your IronKey ahead of time to abide by your organization’s security standards. Activation Code. Copy and paste You will receive an email with an Activation Code that it into the IronKey window.
Page 11
IronKey must verify your email address because it is confirmation email by entering used with important services related to your online the confirmation code online. account. At this point, your IronKey is ready to protect your data, identity, and online privacy. IRONKEY ENTERPRISE USER GUIDE PAGE 10...
THE IROnKEy unLOCKER On A MAC You can use the IronKey Unlocker for Mac to access your files and change your device password on a Mac. You can use the other IronKey applications on a Windows computer.
Depending on your Linux distribution, you might need root privileges to use the program “ironkey” found in the Linux folder of the mounted virtual CD-ROM. If you have only one IronKey attached to the system, simply run the program from a command shell with no arguments (e.g.
Page 14
Also, on 64-bit linux systems the 32-bit libraries must be installed to run the ironkey program. 2. Mounting problems Ensure you have permissions to mount external SCSI and USB devices »...
“always-on” security. 2 Updating device firmware/software The IronKey can securely update its software and firmware through signed updates that are verified in hardware. This allows users to keep their devices up-to- date and protect themselves from future malware and online threats.
Page 16
If proxy authentication is required, you can enter your username and password in the appropriate fields. 5 Creating a Lost and Found Message You can show your contact information on the IronKey Unlocker window. If you lose your IronKey, someone can return it to you.
Page 17
9 Locking and unplugging the IronKey Clicking “Lock Drive” (Windows, CTRL+L) or “Lock & Quit” (Mac) exits open IronKey applications and locks the device. It is then safe to unplug it from your com- puter.
Virtual Keyboard icon » Use the keyboard shortcut CTRL+ALT+ V The IronKey Virtual Keyboard can be used in a number of other applications when you need extra security typing out information (e.g. email, documents). # Step...
THE OnBOARD FIREFOx AnD SECuRE SESSIOnS SERVICE (WInDOWS OnLy) If enabled, a Firefox web browser is already onboard your IronKey, so none of your cookies, history files, bookmarks, add-ons or online passwords is stored on the local computer. Now you can carry your personalized web experience with you to other computers without worry.
The IronKey Identity Manager also allows you to back up your encrypted Identity Manager data to your Online Security Vault, to synchronize password data between IronKeys, and to securely restore all your passwords to a new IronKey if your IronKey is ever lost or stolen. Only you can access and decrypt your passwords.
Page 21
Identity Manager also submits the login. You can also automatically log in by: Using the IronKey Launcher (Ctrl + Alt + R). • Using the Titlebar Menu in the top right of the •...
Description 1 Backing up your IronKey You can create an encrypted backup of a single file or your entire IronKey to your local computer. Click the “Secure Backup” button in the IronKey Control Panel, select a destination folder, and select which files to back up. It’s that simple.
RSA SECuRID On yOuR IROnKEy (WInDOWS OnLy) If enabled, your IronKey can provide additional strong authentication capabilities by generating RSA SecurID one-time passwords. Your System Administrator will provide you either a token file or a URL to import your tokens, or he may import them for you.
The import process uses IronKey’s PKCS#11 interface and requires Mozilla Firefox. Note that there is only space for one additional private key in the IronKey Cryptochip, though that key will receive the security benefits of the Cryptochip’s tamperproof hardware and self-destruct mechanisms.
Page 25
Description 3 Click the “View Certificates” button. This opens the Firefox Certificate Manager. 4 Note that IronKey’s certificate is available here. Now you can add your own. Click the “Import” button. 5 Browse to the PKCS#12- You will be prompted for the location of the PKCS#12- format certificate file and format certificate file (file extension will be .p12 in UNIX/...
This locks down your account so that you must have both your IronKey and your password in order to gain access. In other words, only you can access your online IronKey account, even if someone stole your IronKey or your password.
Page 27
IronKey as lost from within my.ironkey.com, which will prevent that device from ever accessing your account. If you find your IronKey later, you can also mark it as found again. 3 Recovering device passwords People sometimes forget passwords.
You can unlock your IronKey in a read-only state such that files on your IronKey cannot be edited. An example of when this is useful is when you want to access a file on your IronKey while using an untrusted or unknown computer. If you unlock your IronKey in Read-Only Mode, you need not fear that malware on that machine can infect your IronKey or modify your files.
Your IronKey, however, includes built-in anti- malware features, including: » A read-only virtual CD from which the most important IronKey files » Autorun protection from worms and viruses that spread just by plugging in a USB drive »...
Page 30
Your first update might take a long time to download, depending on your Internet connection. If your IronKey Malware Scanner becomes too far out of date, it will need to download a large file to bring it back up to date.
Product Specifications For details about your device, see “About IronKey” in IronKey Control Panel Settings. CAPACITy* Up to 32GB, depending on the model DIMEnSIOnS 75mm X 19mm X 9mm WEIgHT 0.8 oz WATERPROOF MIL-STD-810F OPERATIng TEMPERATuRE 0C, 70C OPERATIng SHOCK...
Have a cool idea or suggestion? Please let us know. You can open a thread on the IronKey Forum (forum.ironkey.com) or submit feedback to feedback@ironkey.com. Let us know if you would like to be a beta tester of new functionality.
The information contained in this document represents the current view of IronKey on the issue discussed as of the date of publication. IronKey can- not guarantee the accuracy of any information presented after the date of publication. This document is for information purposes only. IronKey makes no warranties, expressed or implied, in this document.
Need help?
Do you have a question about the Enterprise S200 and is the answer not in the manual?
Questions and answers