IronKey USB Flash Drives User Manual
www.ironkey.com
sales@ironkey.com
sales@ironkey.com
5150 El Camino Real, Suite C31
Los Altos, CA 94022 USA
Los Altos, CA 94022 USA
T 650 492 4055
F 650 967 4650
F 650 967 4650
Enforceable Security Policies
Automatic Antivirus Scanning
RSA SecurID
®
and Cryptocard
VeriSign
®
Identity Protection (VIP)
Identity Protection Services
Identity Manager
Hardware Encryption
Fast & Reliable Storage
Tamper-Resistant & Waterproof
Hardware-level Active Malware Defenses
Remotely Terminate Compromised Drives
BASIC
PERSONAL
ENTERPRISE
WHICH IRONKEY IS RIGHT FOR YOU?
INTELLIGENT SELF-DEFENDING SECURE STORAGE
The IronKey Enterprise solution combines hardware-encrypted IronKey USB flash drives
with the IronKey Enterprise Remote Management Service. It allows you to remotely
administer policies across thousands of IronKey Enterprise devices over the Internet.
Embedded strong authentication capabilities enable organizations to use IronKey drives
as a scalable platform for secure remote access and virtual desktops.
with the IronKey Enterprise Remote Management Service. It allows you to remotely
administer policies across thousands of IronKey Enterprise devices over the Internet.
Embedded strong authentication capabilities enable organizations to use IronKey drives
as a scalable platform for secure remote access and virtual desktops.
The World’s Most Secure Flash Drive
All user data on an IronKey Enterprise drive is encrypted with high-speed, AES
CBC-mode hardware encryption. If a thief tries to break into an IronKey Enterprise device
and exceeds a policy-determined number of failed login attempts, the IronKey
Cryptochip will lock out the encryption functions and securely erase all encrypted data.
IronKey devices have been validated to meet the rigorous government security
requirements of FIPS 140-2 Level 2.
CBC-mode hardware encryption. If a thief tries to break into an IronKey Enterprise device
and exceeds a policy-determined number of failed login attempts, the IronKey
Cryptochip will lock out the encryption functions and securely erase all encrypted data.
IronKey devices have been validated to meet the rigorous government security
requirements of FIPS 140-2 Level 2.
Active Anti-Malware Protection
Malicious code and viruses that are spread by removable storage devices infect millions
of computers every year. IronKey’s active defenses deliver layered protection to stop the
spread of malware and worms. Proactive defenses prevent changes to AutoRun files and
allow administrators to remotely control which computers IronKey devices may be used
on. Onboard malware scanning protects the device when files are moved or opened.
Additionally, a read-only mode prevents malware from jumping onto the device from an
infected host PC.
of computers every year. IronKey’s active defenses deliver layered protection to stop the
spread of malware and worms. Proactive defenses prevent changes to AutoRun files and
allow administrators to remotely control which computers IronKey devices may be used
on. Onboard malware scanning protects the device when files are moved or opened.
Additionally, a read-only mode prevents malware from jumping onto the device from an
infected host PC.
Remote Administration and Policy Enforcement Over the Internet
The IronKey Enterprise Remote Management Service allows you to easily manage
thousands of IronKey Enterprise devices and enforce device-specific policies, including
password strength, password retry limits and onboard portable applications.
thousands of IronKey Enterprise devices and enforce device-specific policies, including
password strength, password retry limits and onboard portable applications.
Remotely Disable or Terminate Lost and Stolen USB Drives
A key component of the IronKey Enterprise Remote Management Service is the Silver
Bullet Service, which provides powerful options to prevent access to rogue devices—
whether lost, stolen or in the possession of a user who has been terminated or deemed
an insider threat.
Bullet Service, which provides powerful options to prevent access to rogue devices—
whether lost, stolen or in the possession of a user who has been terminated or deemed
an insider threat.
• Deny—Prohibits accessing the data on a device until it can verify status
• Disable—Locks out the user completely the next time the device connects
• Destroy—Instructs the IronKey drive to initiate its self-destruct sequence
Strong Authentication
IronKey Enterprise devices have full public-key encryption capabilities, enabling them to
be managed securely and remotely. IronKey Enterprise devices support One-Time
Password technology such as RSA SecurID
be managed securely and remotely. IronKey Enterprise devices support One-Time
Password technology such as RSA SecurID
®
, allowing IronKey devices to be used as
a two-factor tokens, eliminating the need for employees to carry multiple
devices. Optional onboard identity management software facilitates single
sign-on and keeps user credentials safe from keyboard loggers, spyware and
other online threats.
devices. Optional onboard identity management software facilitates single
sign-on and keeps user credentials safe from keyboard loggers, spyware and
other online threats.
ENTERPRISE
ENCRYPT MOBILE DATA
REMOTELY MANAGE DEVICES
PREVENT USB MALWARE
"IronKey Enterprise is a powerful
and effective way to establish
and maintain control over
mobile information assets.”
and effective way to establish
and maintain control over
mobile information assets.”
Information Security Magazine,
February 2009
The World’s Most
Secure Flash Drive