IronKey Enterprise Secure USB Flash Drive

Overview:

The World's Most Secure Flash Drive

Combines AES 256-bit hardware-encrypted IronKey USB flash drives with central management. Always-on encryption protects critical data from loss while intelligent anti-malware keeps out malicious code. Remotely enforce security policies across thousands of IronKey Enterprise drives.

The IronKey Enterprise solution combines hardware-encrypted IronKey USB flash drives with the IronKey Enterprise Remote Management Service. It allows you to remotely administer policies across thousands of IronKey Enterprise devices over the Internet. Embedded strong authentication capabilities enable organizations to use IronKey drives as a scalable platform for secure remote access and virtual desktops.

Ironkey Enterprise Benefits:

• All stored data is protected with militarygrade AES 256-bit hardware encryption
• No software or drivers to install
• Easy to deploy and use
• Customizable to your enterprise policies
• Remotely managed
• Integrates encrypted storage & RSA SecurID
• A secure platform for portable applications

Benefits:

Trusted Virtual Computing Environment:

IronKey has developed the world's most secure portable computing device for converging secure storage, mobile authentication, and portable desktop virtualization solutions. It is based on years of research—originally funded by the U.S. Department of Homeland Security—in secure storage, portable software, encryption key management, cryptographic processes, and nanometer-scale ASIC design. IronKey Secure Portable Virtualization delivers the many benefits of virtualization—which have reduced cost, increased security and availability and enabled more agile business responses in the datacenter—on this ultra-secure USB device.

Key Components:

IronKey KeyOS
IronKey KeyOS™ firmware is optimized not only to meet the demands of virtualization security but also the performance requirements of portable desktops, such as writing many files very quickly. It secures the content, enables a protected pre-boot environment, and delivers trusted updates over the Internet. IronKey KeyOS also prevents updates from getting on the device unless they are digitally signed by IronKey—ensuring that your payload is always what you think it is. The IronKey architecture further makes it possible to place a trusted pre-boot environment in a hardened read-only capsule. When combined with the high-performance IronKey hardware architecture, IronKey KeyOS delivers a fast and transparent user experience.

IronKey KeyOS also prevents updates from getting on the device unless they are digitally signed by IronKey—ensuring that your payload is always what you think it is. The IronKey architecture further makes it possible to place a trusted pre-boot environment in a hardened read-only capsule. When combined with the high-performance IronKey hardware architecture, IronKey KeyOS delivers a fast and transparent user experience.

Application Validation in Hardware
The IronKey Cryptochip handles application validation using x.509 digital certificates in hardware that is manufactured with a secure supply chain. This cryptographic module has been further validated by NIST as using the correct processes to ensure that an attacker cannot introduce fake signatures. Running the virtualization payload from this trusted hardware provides two crucial advantages: the portable computing device starts out clean in terms of viruses, and it defends against malware or malicious users.

Optimized Secure Storage
FIPS 140-2 Level 3 IronKey secure portable virtualization protects the virtualization payload, applications, and user data from unauthorized access with strong hardware encryption. Conventional hardware encryption only secures and accelerates the processing of the encryption; it does not address the other critical aspects of protecting data and desktops. The IronKey multifunction device is FIPS 140-2 Level 3 validated for its secure cryptographic processes and protection of the cryptographic module against attack.

Strong Authentication for Network Access
Strong Authentication IronKey multifunction security devices contain an array of strong two-factor authentication technologies, allowing virtualized applications to authenticate themselves to corporate networks and VPNs. Built-in public key infrastructure, with digital certificates, enables a single device to be both an authentication token as well as a secure virtualized desktop. IronKey devices also function as RSA SecurID tokens, providing interoperability with existing enterprise authentication deployments.

Remote Management
Remote Management Enterprise-class remote systems management adds another level of security, including audits, remote security policy updates, and terminating lost and stolen devices remotely.

World-Class Security Architecture
Hardware Encryption Underlying all IronKey virtualization solutions is a multifunction portable computing device that not only protects all stored data with hardware encryption, but it also protects the user authentication process in hardware. Recent cybercrime attacks and penetration research trials have demonstrated that using software to validate a user's password is not secure. Instead, the IronKey system transmits the password through a secure, non-replayable connection from the PC to the device where the IronKey Cryptochip validates it. To defend against brute force attacks, even the retry counter is protected in hardware. Finally, the system decrypts the AES key with a hash of the user's password and unlocks the device.

Remote Management

When the entire desktop and access to your network resources are literally on the line, you can only trust your security to a dedicated security company. All IronKey secure portable virtualization solutions gain an additional level of security from enterprise-class central management. The IronKey Enterprise Management Service enables complete lifecycle management—from provisioning to policy enforcement, which even includes the ability to remotely terminate lost or stolen devices. The cloud-based service makes it easy to securely manage your IronKey fleet in real time. The result is an increased security profile, streamlined compliance, and reduced capital expenditures and operational overhead.

Hosted at an ultra-secure data center facility (that is monitored by dedicated on-site personnel 24x7), physical access to the system requires multiple authentication layers such as hand geometry biometric readers, "man trap" entry, government-issued photo ID verifications, and individual access credentials.

Every IronKey Enterprise Management Service subscription includes world-class technical support, including access to:

• IronKey Knowledge Base and Online Tutorials—Includes both keyword queries and guided support wizards for fast and easy access to detailed support documentation and tutorials—24/7
• IronKey User Forum—Delivers direct end-user responses by submitting questions anytime
• Prioritized Call Handling—Offers exclusive access to a toll-free telephone Support number (average wait time of just five-minutes to reach a support expert)

Strong Authentication:

As a growing number of remote workers become physically separated from the IT organizations that support them, the need for strong authentication is increasing dramatically. Strong authentication—with hardware as the critical second component—also enables companies to secure their cloud-based applications while verifying their users' real-world identities from the cloud.

IronKey secure portable hardware—A trusted platform for efficient and highly secure authentication

As a leader in mobilizing enterprise security, IronKey delivers the most advanced best-of-breed portable authentication solutions. Organizations can use the onboard digital certificate or solutions from RSA and other leading technology partners to consolidate encrypted mobile storage and strong two-factor authentication in a single device. An onboard password manager also protects users' identities from cyber thieves. Hardware-based defenses against malware, password attacks, and other threats make IronKey devices the ideal platform for deploying remote authentication.

The IronKey solution—together with technology from industry-leading partners:

• Consolidates passwords, RSA SecurID tokens, and VeriSign® digital certificates on one convenient device
• Protects user credentials in hardware
• Enables remote user verification for cloud applications
• Drops seamlessly into smart card (CAC/PIV) deployments

IronKey Comparison:

What IronKey is Right for You?	Enterprise	Personal	Basic
Remote Terminate for Lost or Stolen Drives
Access Control and Revocation
User Activity and Event Tracking
Device Recovery and Recommissioning
Managed Remotely over the Internet
Enforceable Security Policies
Automatic Antivirus Scanning
RSA SecurID®, CRYPTOCard, One-time Password
Web Privacy and Identity Protection*
Built-in Malware Protection
Automatic Hardware Encryption of All Data
Dual Channel, High Performance Architecture
Ruggedized, Tamper-Resistant & Waterproof

*Secure Browser, Built-in Identity Manager, and VeriSign® Identity Protection (VIP)

*IronKey Personal and Basic D200 drives are only available in 4, 8, 16 and 32GB capacities.

Demo:

IronKey Enterprise Demo

The IronKey Enterprise solution combines AES 256-bit hardware-encrypted IronKey USB flash drives with a Remote Management Service. Strong encryption and strong authentication capabilities protect critical data from loss while intelligent anti-malware keeps out worms and other malicious code. Administrators can enforce security policies across thousands of IronKey Enterprise drives over the Internet.

Technical Specifications:

• 1GB, 2GB, 4GB, 8GB or 16GB

Speed*

• Up to 27MB per second read
• Up to 24MB per second write

Dimensions

• 75mm X 19mm X 9mm

Weight

• .9 oz (25 grams)

• MIL-STD-810F

• Operating: 0 °C, +70 °C
• Storage: -40 °C, +85 °C

• 16G RMS

Hardware

• USB 2.0 high speed

Operating System Encryption Compatibility

• Windows 2000 SP4, Windows XP SP2+, Vista, Macintosh OS X 10.4+, Linux 2.6+

Hardware Encryption

• Data: AES Cipher-Block Chained mode
• Encryption Keys: 256-bit Hardware
• PKI: 2048-bit RSA
• Hashing: 256-bit SHA
• FIPS Validations: 140-2 Level 3
• Section 508 Compliant

Documentation:

Download the IronKey Enterprise Datasheet (PDF).