IronKey Enterprise Secure USB Flash Drive

Overview:

The World's Most Secure Flash Drive

Combines AES 256-bit hardware-encrypted IronKey USB flash drives with central management. Always-on encryption protects critical data from loss while intelligent anti-malware keeps out malicious code. Remotely enforce security policies across thousands of IronKey Enterprise drives.

The IronKey Enterprise solution combines hardware-encrypted IronKey USB flash drives with the IronKey Enterprise Remote Management Service. It allows you to remotely administer policies across thousands of IronKey Enterprise devices over the Internet. Embedded strong authentication capabilities enable organizations to use IronKey drives as a scalable platform for secure remote access and virtual desktops.

Ironkey Enterprise Benefits:

• All stored data is protected with militarygrade AES 256-bit hardware encryption
• No software or drivers to install
• Easy to deploy and use
• Customizable to your enterprise policies
• Remotely managed
• Integrates encrypted storage & RSA SecurID
• A secure platform for portable applications

Benefits:

Intelligent Self-Defending Secure Storage The IronKey Enterprise S200 solution combines AES 256-bit hardware-encrypted IronKey USB flash drives with the IronKey Enterprise Remote Management Service. It allows you to remotely administer policies across thousands of IronKey Enterprise S200 devices over the Internet. Embedded strong authentication capabilities enable organizations to use IronKey drives as a scalable platform for secure remote access and virtual desktops. The World’s Most Secure Flash Drive All user data on an IronKey Enterprise drive is encrypted with high-speed, AES 256-bit hardware encryption in CBC mode. This is the same strong algorithm that the U.S. military and government agencies use to protect Top Secret data. If a thief tries to break into an IronKey Enterprise device and exceeds a policy-determined number of failed login attempts, the IronKey Cryptochip will lock out the encryption functions and securely erase all encrypted data. The Only FIPS 140-2 Level 3 Flash Drive IronKey devices have been validated to meet the stringent government security requirements of FIPS 140-2 Level 3. These include a number of protections, including an epoxy compound that fully encases the chips, strong key management, and other strong anti-tampering measures. Active Anti-Malware Protection Malicious code and viruses that are spread by removable storage devices infect millions of computers every year. IronKey’s active defenses deliver layered protection to stop the spread of malware and worms. Proactive defenses prevent changes to AutoRun files and allow administrators to remotely control which computers IronKey devices may be used on. Onboard malware scanning protects the device when files are moved or opened. Additionally, a read-only mode prevents malware from jumping onto the device from an infected host PC. Remote Administration and Policy Enforcement over the Internet The IronKey Enterprise Remote Management Service allows you to easily manage thousands of IronKey Enterprise devices and enforce device-specific policies, including password strength, password retry limits and onboard portable applications. Remotely Disable or Terminate Lost and Stolen USB Drives A key component of the IronKey Enterprise Remote Management Service is the Silver Bullet Service, which provides powerful options to prevent access to rogue devices— whether lost, stolen or in the possession of a user who has been terminated or deemed an insider threat. Deny—Prohibits accessing the data on a device until it can verify status Disable—Locks out the user completely the next time the device connects Destroy—Instructs the IronKey drive to initiate its self-destruct sequence Strong Authentication IronKey Enterprise devices have full public-key encryption capabilities, enabling them to be managed securely and remotely. IronKey Enterprise devices support One-Time Password technology such as RSA SecurID®, allowing IronKey devices to be used as two-factor tokens, eliminating the need for employees to carry multiple devices. Optional onboard identity management software facilitates single sign-on and keeps user credentials safe from keyboard loggers, spyware and other online threats.

Endpoint and Enterprise Application Integration The IronKey Enterprise solution has been designed to work seamlessly with many of the industry's leading endpoint security software products. IronKey Enterprise S200 devices include an onboard PKCS #11 digital certificate and interface that enable rapid deployment of strong authentication for online enterprise applications. Policy Enforcement and Provisioning IronKey administrators use an intuitive, secure online interface to apply security policies to their organization’s IronKey Enterprise S200 flash drives. Users can easily self-provision their devices, or you can initialize the devices and deploy them to end users. Self-Service Password Recovery IronKey offers optional, self-service online password recovery that employs advanced mutual authentication to verify employee identity. Administrator Device Unlock and Reset The IronKey Enterprise solution uses Public Key authentication to allow authorized administrators to access data on employee devices without back-door passwords. Administrator privileges can be remotely revoked. Portable Security Software You can optionally deploy IronKey Enterprise devices with a suite of applications and services, including a secure portable version of Mozilla Firefox, IronKey Password Manager, and the IronKey Secure Sessions service. Policy settings allow IronKey system admins to turn these applications on or off as desired. Secure Platform for Virtualization Rapid access performance, high reliability, hardware-level defenses, and large storage capacities (up to 16GB), all combine to make an IronKey drive the ideal platform for deploying secure virtual desktops and portable applications.

 

Trusted Virtual Computing Environment:

IronKey has developed the world's most secure portable computing device for converging secure storage, mobile authentication, and portable desktop virtualization solutions. It is based on years of research—originally funded by the U.S. Department of Homeland Security—in secure storage, portable software, encryption key management, cryptographic processes, and nanometer-scale ASIC design. IronKey Secure Portable Virtualization delivers the many benefits of virtualization—which have reduced cost, increased security and availability and enabled more agile business responses in the datacenter—on this ultra-secure USB device.

Key Components:

IronKey KeyOS
IronKey KeyOS™ firmware is optimized not only to meet the demands of virtualization security but also the performance requirements of portable desktops, such as writing many files very quickly. It secures the content, enables a protected pre-boot environment, and delivers trusted updates over the Internet. IronKey KeyOS also prevents updates from getting on the device unless they are digitally signed by IronKey—ensuring that your payload is always what you think it is. The IronKey architecture further makes it possible to place a trusted pre-boot environment in a hardened read-only capsule. When combined with the high-performance IronKey hardware architecture, IronKey KeyOS delivers a fast and transparent user experience.

IronKey KeyOS also prevents updates from getting on the device unless they are digitally signed by IronKey—ensuring that your payload is always what you think it is. The IronKey architecture further makes it possible to place a trusted pre-boot environment in a hardened read-only capsule. When combined with the high-performance IronKey hardware architecture, IronKey KeyOS delivers a fast and transparent user experience.

Application Validation in Hardware
The IronKey Cryptochip handles application validation using x.509 digital certificates in hardware that is manufactured with a secure supply chain. This cryptographic module has been further validated by NIST as using the correct processes to ensure that an attacker cannot introduce fake signatures. Running the virtualization payload from this trusted hardware provides two crucial advantages: the portable computing device starts out clean in terms of viruses, and it defends against malware or malicious users.

Optimized Secure Storage
FIPS 140-2 Level 3 IronKey secure portable virtualization protects the virtualization payload, applications, and user data from unauthorized access with strong hardware encryption. Conventional hardware encryption only secures and accelerates the processing of the encryption; it does not address the other critical aspects of protecting data and desktops. The IronKey multifunction device is FIPS 140-2 Level 3 validated for its secure cryptographic processes and protection of the cryptographic module against attack.

Strong Authentication for Network Access
Strong Authentication IronKey multifunction security devices contain an array of strong two-factor authentication technologies, allowing virtualized applications to authenticate themselves to corporate networks and VPNs. Built-in public key infrastructure, with digital certificates, enables a single device to be both an authentication token as well as a secure virtualized desktop. IronKey devices also function as RSA SecurID tokens, providing interoperability with existing enterprise authentication deployments.

Remote Management
Remote Management Enterprise-class remote systems management adds another level of security, including audits, remote security policy updates, and terminating lost and stolen devices remotely.

World-Class Security Architecture
Hardware Encryption Underlying all IronKey virtualization solutions is a multifunction portable computing device that not only protects all stored data with hardware encryption, but it also protects the user authentication process in hardware. Recent cybercrime attacks and penetration research trials have demonstrated that using software to validate a user's password is not secure. Instead, the IronKey system transmits the password through a secure, non-replayable connection from the PC to the device where the IronKey Cryptochip validates it. To defend against brute force attacks, even the retry counter is protected in hardware. Finally, the system decrypts the AES key with a hash of the user's password and unlocks the device.

Remote Management

When the entire desktop and access to your network resources are literally on the line, you can only trust your security to a dedicated security company. All IronKey secure portable virtualization solutions gain an additional level of security from enterprise-class central management. The IronKey Enterprise Management Service enables complete lifecycle management—from provisioning to policy enforcement, which even includes the ability to remotely terminate lost or stolen devices. The cloud-based service makes it easy to securely manage your IronKey fleet in real time. The result is an increased security profile, streamlined compliance, and reduced capital expenditures and operational overhead.

Ultra-Secure Online Management Services

Hosted at an ultra-secure data center facility (that is monitored by dedicated on-site personnel 24x7), physical access to the system requires multiple authentication layers such as hand geometry biometric readers, "man trap" entry, government-issued photo ID verifications, and individual access credentials.

Unparalleled Technical Support and Services

Every IronKey Enterprise Management Service subscription includes world-class technical support, including access to:

• IronKey Knowledge Base and Online Tutorials—Includes both keyword queries and guided support wizards for fast and easy access to detailed support documentation and tutorials—24/7
• IronKey User Forum—Delivers direct end-user responses by submitting questions anytime
• Prioritized Call Handling—Offers exclusive access to a toll-free telephone Support number (average wait time of just five-minutes to reach a support expert)

Strong Authentication:

As a growing number of remote workers become physically separated from the IT organizations that support them, the need for strong authentication is increasing dramatically. Strong authentication—with hardware as the critical second component—also enables companies to secure their cloud-based applications while verifying their users' real-world identities from the cloud.

IronKey secure portable hardware—A trusted platform for efficient and highly secure authentication

As a leader in mobilizing enterprise security, IronKey delivers the most advanced best-of-breed portable authentication solutions. Organizations can use the onboard digital certificate or solutions from RSA and other leading technology partners to consolidate encrypted mobile storage and strong two-factor authentication in a single device. An onboard password manager also protects users' identities from cyber thieves. Hardware-based defenses against malware, password attacks, and other threats make IronKey devices the ideal platform for deploying remote authentication.

The IronKey solution—together with technology from industry-leading partners:

• Consolidates passwords, RSA SecurID tokens, and VeriSign® digital certificates on one convenient device
• Protects user credentials in hardware
• Enables remote user verification for cloud applications
• Drops seamlessly into smart card (CAC/PIV) deployments

IronKey Comparison:

*Secure Browser, Built-in Identity Manager, and VeriSign® Identity Protection (VIP)

*IronKey Personal and Basic D200 drives are only available in 4, 8, 16 and 32GB capacities.

Demo:

IronKey Enterprise Demo

The IronKey Enterprise solution combines AES 256-bit hardware-encrypted IronKey USB flash drives with a Remote Management Service. Strong encryption and strong authentication capabilities protect critical data from loss while intelligent anti-malware keeps out worms and other malicious code. Administrators can enforce security policies across thousands of IronKey Enterprise drives over the Internet.

Technical Specifications:

Capacity

• 1GB, 2GB, 4GB, 8GB or 16GB

Speed*

• Up to 27MB per second read
• Up to 24MB per second write

Dimensions

• 75mm X 19mm X 9mm

Weight

• .9 oz (25 grams)

Waterproof

• MIL-STD-810F

Temperature

• Operating: 0 °C, +70 °C
• Storage: -40 °C, +85 °C

Operating Shock

• 16G RMS

Hardware

• USB 2.0 high speed

Operating System Encryption Compatibility

• Windows 2000 SP4, Windows XP SP2+, Vista, Macintosh OS X 10.4+, Linux 2.6+

Hardware Encryption

• Data: AES Cipher-Block Chained mode
• Encryption Keys: 256-bit Hardware
• PKI: 2048-bit RSA
• Hashing: 256-bit SHA
• FIPS Validations: 140-2 Level 3
• Section 508 Compliant

Documentation:

Download the IronKey Enterprise Datasheet (PDF).