Aegis Padlock DT Fips User Manual
Aegis Padlock DT FIPS
User’s Manual
Data Security at Your Fingertips
Remember to memorize / save your
authentication and recovery PINs in a
safe place.
Table of Contents
Padlock DT
LED glowing solidly, indicating that
* If PIN is unacceptable, Red LED will blink 3 times and return to solid BLUE / blinking GREEN LEDs.
Package contents
First-Time Use 4
Locking the Drive 4
Unlocking the Drive 4
LED States and Their Meaning 5
Admin Mode 5
Adding a New User PIN (Via Admin Mode) 6
Adding a New User PIN (Via User Forced Enrollment Mode) 6
Deleting the User PIN 7
Changing the User PIN 7
Changing the Admin PIN 7
Setting One-Time-Use Recovery PINs 8
Using One-Time-Use Recovery PINs 8
Setting Read-Only or Read / Write Modes from Admin Mode 9
Setting Read-Only or Read / Write Modes from the User Mode 10
Setting LED Flicker / Button Press Indicator Mode 11
Setting Minimum PIN Length Requirement 11
Setting the Unattended Auto-Lock Feature 11
Setting a Self-Destruct PIN 12
Aegis Padlock DT FIPS Brute-Force Protection 13
Performing a Complete Reset 14
Initializing and Formatting After a Complete Reset 15
Hibernating or Logging Off from the Operating System 16
Aegis Padlock DT Setup for Mac OS 16
Diagnostic Mode 17
Lock-Override Mode 18
Troubleshooting / FAQs 19
Quick Reference Guide for Key Command Programming 20
Warranty and RMA information 21
• Aegis Padlock DT FIPS
• AC Adapter
• USB 3.0 data cable (backwards
compatible with USB 2.0)
• Quick Start Guide
Aegis
Quick Start Guide
NOTE: if you are using the Aegis Congurator to set up your Padlock DT, First
CONFIGURABLE
ensure that the device has the “congurable” logo on the belly label. Also, DO NOT
perform the following Manual Admin and USER PIN SETUP steps below; The Aegis
Congurator will only recognize devices in their factory “out of box” state or devices that have
been completely reset.
Your Aegis Padlock DT is preformatted in NTFS for Windows® and is ready for use. For Mac OS
formatting, please refer to the Mac OS formatting instructions on the reverse.To access the Aegis
Padlock DT, connect the drive to a power outlet via the AC Adapter and a USB port using the USB
3.0 cable (this cable is also compatible with USB 2.0).
Each Aegis Padlock DT is shipped without a preset Personal Identication Number (PIN.) To prepare
the drive for use, the user must rst establish an Admin PIN that is between 6 and 16 digits in length.
PINs cannot contain all consecutive numbers or all the same numbers (e.g. 0123456789, 987654321
or 11111111, 22222222, etc.This Admin PIN is used to set the Padlock DT’s various Admin features and
also serves as the rst of ve User PINS for the Padlock DT’s standard operation.
First-Time Use / Admin PIN Setup
1. Plug the Padlock 3 into a USB port and turn power switch to ON.
(BLUE and GREEN LEDs will glow solidly, indicating no Admin PIN has been established.)
2. Press
+ 9 simultaneously.
(BLUE LED will glow solidly and GREEN LED will blink.)
3. Enter the PIN to be used as your Admin code and press
(If PIN is accepted, BLUE LED will turn off momentarily and GREEN LED will blink 3 times by itself,
then will continue blinking as the BLUE LED glows solidly.)*
4. Quickly re-enter that same PIN once more and press
(BLUE LED will turn off momentarily and GREEN LED will illuminate for one second until replaced by
the BLUE LED glowing solidly, indicating that the Admin PIN has been set and the Padlock 3.0 is in
Admin mode, ready to add another User PIN [see reverse] or for setting up features.)
5. To exit the Admin mode, press cancel (RED LED will glow solidly) or wait 30 seconds and Padlock
3.0 will return to standby mode.
6. If no additional users are to be added or Admin features set, Padlock 3.0 setup is now complete and
ready for use.
Copyright © 2018 Apricorn. All rights reserved.
Windows is a registered trademark of Microsoft Corporation.
All other trademarks and copyrights referred to are the property of their
respective owners.
Distribution of modied versions of this document is prohibited without
the explicit permission of the copyright holder.
Distribution of the work or derivative work in any standard (paper) book
form for commercial purposes is prohibited unless prior permission is
obtained from the copyright holder.
DOCUMENTATION IS PROVIDED AS IS AND ALL EXPRESS OR
IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES,
INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH
DISCLAIMERS ARE HELD TO BE LEGALLY INVALID
.
Adding a New User PIN
There are two ways to establish a User PIN: Admin-generated
while in Admin Mode, and User-generated while Padlock DT is
placed in User Forced Enrollment State.
ADMIN-GENERATED USER PIN
1. Enter the Admin Mode by holding
With RED LED blinking, enter the Admin PIN and press the
UNLOCK button. The BLUE LED will glow solidly.
2. Press the
+ 1 buttons together until the BLUE LED
glows solidly and the GREEN LED starts blinking.
3. Enter the User PIN* and press
blink three times by itself, then the BLUE LED will glow
solidly as the GREEN LED continues blinking.
4. Re-enter that same User PIN and press
LED will glow solidly for three seconds verifying that
the User PIN was successfully added, and then will be
replaced by the BLUE
the drive has returned to the Admin mode.
+ 0 for ve seconds;
. The GREEN LED will
. The GREEN
Revised June 2018
First-Time Use
Admin Mode
Before you begin, ensure that the USB cable is connected, the power cable is connected to
the drive and plugged into an outlet, and the power switch is turned ON.
Each Aegis Padlock DT FIPS is shipped without a preset Personal Identication Number
(PIN) installed on the device. A 7- to 16-digit Admin PIN must rst be established before
the drive can be used. This Admin PIN can be used to set any and all of the Admin Mode
Features of the drive, as well as to access its data. Note: PINs can’t be repeating or
sequential numbers such as 0123456, 987654321, or 1111111, 2222222, etc.
CONFIGURABLE
be congured has the “congurable” logo on the belly label and second, DO NOT perform
any of the the following Manual Admin and USER PIN SETUP steps below; The Aegis
Congurator will execute these setup steps and will only recognize devices in their factory
“out of box” state or devices that have been completely reset.
NOTE: if you are using the Aegis Congurator to set up your Aegis Padlock DT
FIPS or any other Apricorn secure drive, you must rst ensure that the device to
To Set Up the Admin PIN:
1. Plug device into USB Port. Both the BLUE and GREEN LEDs will glow steadily.
2. Press
will blink.
3. Enter the series of numbers that you will use for the Admin PIN and press the
4. Within 30 seconds, re-enter that same PIN and press the
will illuminate for one second, then replaced by the BLUE LED glowing steadily.
5. The drive is now in Admin mode where Admin features can be set (e.g., adding a User.)
6. To exit the Admin mode, press the CANCEL button. The drive will return to the locked
standby state. If no action is taken within 30 seconds, the drive will return to its locked
sleep state.
* GREEN LED will blink if the PIN is accepted; If the PIN is NOT accepted, the RED LED
will blink-- return to step 4 to resume the Admin PIN setup process.
+ 9 at the same time. The BLUE LED will glow steadily and the GREEN LED
button.*
button again. The GREEN LED
Unlocking the Drive
Enter either a User PIN or Admin PIN and press the button. If the PIN is accepted, the
GREEN LED will blink three times, then will rapidly blink for a short time, followed by steady
glowing, indicating that it’s now unlocked and ready for use. If the PIN is incorrect, the RED
LED will blink.
Locking the Drive
Press the CANCEL button. When successfully locked, The RED LED will glow steadily,
indicating that it’s returned to its standby state.
The Aegis Padlock DT will not be recognized by the operating system while in its standby state.
Note: If data is still being written to the key when the CANCEL button is pressed, the Padlock DT
will wait until that operation is completed before the lock command is executed.
To set up any of the drive’s Admin functions, the Admin mode must rst be entered. Once in
the Admin mode, each of the drive’s functions can be addressed with the appropriate button
commands. While in the Admin mode, the actual data on the drive will not be accessible.
Prior to your rst use of the Aegis Padlock DT, you must rst create the Admin PIN. Immediately after setting the Admin PIN, you may then continue setting up other functions. If you’d
like to skip the function setup, or do it at another time, either press the CANCEL button or do
nothing for a period of 30 seconds and the key will revert to its standby state.
To re-enter the Admin mode, perform the following steps below.
1. Press and hold
(This indicates that the drive is prepared to accept the correct Admin PIN.)
2. Enter the Admin PIN and press the
3. Successfully entering the Admin Mode is indicated by a solid BLUE LED.
4. To exit the Admin Mode, either allow 30 seconds of inactivity or press the
CANCEL button.
+ 0 for ve seconds until the RED LED blinks.
button.
LED States and Their Meaning
No LEDs Drive locked, power switch is off, device unplugged
Blinking RED Error / incorrect button entry; Mode Not Available;
User PIN Change
Solid RED Locked / Standby state; Awaiting PIN entry
Blinking GREEN Button-entry accepted
Solid BLUE /
Blinking GREEN
Solid BLUE Admin Mode
Solid GREEN Drive unlocked
Slow Blinking BLUE Drive unlocked in Lock-Override Mode
Solid GREEN /
Slow Blinking RED
Alternating
RED / BLUE
One second of RED
followed by one
second of GREEN
followed by one
second of BLUE
Three Seconds of
Solid RED / GREEN
Waiting for New User or Admin PIN to be
established
Drive unlocked in Read-Only Mode
Indicates a mode has been entered that can result
in the deletion of a User or the data on the drive
(depending on the mode chosen.)
Also used when setting Auto-lock feature
Self-test mode (automatically occurs during key
startup) ensures all components are ready and
working properly
During Reset Process, indicates successful
resetting of cryptographic security parameters
4
5
Establishing a User PIN
Deleting the User PIN
If no additional Users beyond the Admin will be permitted to access the drive’s data, disregard
this page’s contents as it relates only to the “User” PINs.
The Aegis Padlock DT can have one Admin and four additional Users, making a total of ve
authentication PINs.
Adding a User is a perfect way to securely share the drive or deploy it for use where the Users do
not require access to the drive’s Admin features. While the Users have limited functionality and
no Admin rights to the drive, they can still access all of its data, change their own User PINs, and
set the drive to Read Only or Read / Write mode.
There are two ways to establish a User PIN: Admin-generated while in Admin Mode, or Usergenerated while in User Forced Enrollment State.
A.) ADMIN-GENERATED USER PIN
1. Enter the Admin Mode by holding
Admin PIN and press the button. The BLUE LED will glow steadily.
2. Press the
LED starts blinking.
3. Enter the User PIN* and press
the BLUE LED will glow steadily as the GREEN LED continues blinking.
4. Within 30 seconds, re-enter that same User PIN again and press
GREEN LED will glow steadily for three seconds verifying that the User PIN was suc-
cessfully added, and then will be replaced by the BLUE LED glowing steadily, indicating
that the drive has returned to the Admin mode.
B.) USER-GENERATED USER PIN (USER FORCED ENROLLMENT)
Note: User Forced Enrollment state can only be implemented where there is no
Admin-generated User PINs set up as described in the process above.
User Forced Enrollment Security Warning:
When a drive is in the User Forced Enrollment state, it is essentially unlocked until a User
PIN is established. Therefore, DO NOT load sensitive data onto the drive if User Forced
Enrollment is to be implemented.
1. Enter the Admin Mode by holding
Admin PIN and press the button. The BLUE LED will glow steadily.
2. Press 0 + 1 and the GREEN LED will blink three times, then will be replaced by BLUE
LED glowing steadily. Press the CANCEL button to return the drive to its locked state. The
drive is now in User Forced Enrollment State, allowing the rst User to establish his own
User PIN.
USER-GENERATED USER PIN IN FORCED ENROLLMENT STATE
1. Press
2. Press
ing.
3. Enter the new User PIN and press the
by itself and then will be joined by the BLUE LED glowing solidly.
4. Within 30 seconds, enter that same User PIN once more, and press the
This time, the GREEN LED will glow solidly for a few seconds, then the drive will return
to its locked state, indicated by the RED LED glowing solidly. The key’s data can now be
accessed using either the User PIN or the Admin PIN.
* Note: Default setting for PIN length is 7 characters min. / 16 max. PINs can’t be
consecutive numbers (0123456) or repeating the same number (2222222).
+ 1 buttons together until the BLUE LED glows steadily and the GREEN
and ensure that the BLUE and the GREEN LEDs are glowing steadily.
+ 1 and ensure that the BLUE LED is glowing solidly with the GREEN LED blink-
+ 0 for ve seconds; With RED LED blinking, enter the
. The GREEN LED will blink three times by itself, then
to verify. The
+ 0 for ve seconds; With RED LED blinking, enter the
button. The GREEN LED will blink three times
button again.
6
You can delete the User PIN by doing the following:
1. Enter the Admin mode. (Hold
Admin PIN and press the button.) The BLUE LED will now glow steadily.
2. Press the 7 + 8 buttons together for ve seconds. The GREEN LED will blink three times and
then will be followed by the RED and BLUE LEDs blinking alternately.
3. Press the 7 + 8 buttons together again for ve seconds. The GREEN LED will glow
steadily for two seconds.
4. The drive will return to Admin mode indicated by the BLUE LED glowing steadily.
NOTE: Deleting the User PIN will also delete the Self-Destruct PIN and all recovery
PINs (if any have been set.)
+ 0 for ve seconds. With the RED LED blinking, enter the
Changing the User PIN
The User PIN can be changed within the User mode (drive unlocked, GREEN LED blinking)
*Note: The Admin PIN cannot be changed while in the User mode. The Admin PIN can only
be changed from within the Admin mode-- See below.
You can change the User PIN by doing the following:
1. Unlock the Aegis Padlock DT with the User PIN. (The GREEN LED will blink)
2. Press the
3. Enter the current User PIN and press the
and the GREEN LED will blink.)
4. Enter the new User PIN and press the
times, followed by the BLUE LED glowing steadily and the GREEN LED blinking.)
5. Re-enter the new User PIN and press the
steadily for two seconds, then will return to the User mode, indicated by the GREEN
LED blinking.)
+ 1 buttons together for ve seconds (the RED LED will blink)
button. (The BLUE LED will glow steadily
button (the GREEN LED will blink three
button (the GREEN LED will glow
Changing the Admin PIN
Changes to the Admin PIN can only be made while the drive is in the Admin mode.
1. Enter the Admin mode. (Hold
the Admin PIN and press the button.) The BLUE LED will glow steadily.
2. Press UNLOCK + 9. The BLUE LED will glow steadily and the GREEN LED will blink.
3. Enter the new Admin PIN and press the
three times.
4. Re-enter the new Admin PIN and press the
for two seconds and then return to the Admin mode, indicated by the BLUE LED glowing
steadily.
+ 0 for ve seconds – with the RED LED blinking, enter
button. The GREEN LED will blink
button. The GREEN LED will glow steadily
7
Loading...