DataLocker H350 Basic User manual

DATALOCKER H300/H350 BASIC
ENCRYPTED EXTERNAL HARD DRIVE

User Guide

© 2016 DataLocker Inc. All rights reserved.

NOTE: DataLocker is not liable for technical or editorial errors and/or omissions contained herein; nor for incidental or
consequential damages resulting from the furnishing or use of this material. The information provided herein is subject
to change without notice. The information contained in this document represents the current view of DataLocker on the

issue discussed as of the date of publication. DataLocker cannot guarantee the accuracy of any information presented
after the date of publication. This document is for information purposes only. DataLocker makes no warranties,
expressed or implied, in this document. DataLocker, and the DataLocker logo are trademarks of DataLocker Inc. and its
subsidiaries. All other trademarks are the property of their respective owners.

Ironkey™ is a registered trade mark of Kingston Technologies, used under permission of Kingston Technologies. All
rights reserved.

FCC Information

This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device
may not cause harmful interference, and (2) this device must accept any interference received, including interference
that may cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of
the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential
installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference
to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged
to try to correct the interference by one or more of the following measures:

• Reorient or relocate the receiving antenna.

• Increase the separation between the equipment and receiver.

• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

• Consult the dealer or an experienced radio/ TV technician for help.

Note: Changes or modifications not expressly approved by the party responsible for compliance could void the user's
authority to operate the equipment.

Industry Canada

This Class B digital apparatus complies with Canadian ICES-003.

Cet appareil numerique de la classe B est conforme à la norme NMB-003 du Canada.

CONTENTS

Quick Start 4

Mise en route 4

Kurzanleitung 5

Inicio rápido 5

クイックスタート 6

빠른 시작 6

快速入门 7
快速入門 7

About my device 8
How is it different than a regular hard drive? 8
What systems can I use it on? 9
How secure is it? 9
Product specifications 10
Recommended best practices 11

Using my device 12
Setting up the device 12
Unlocking and locking the device 13
Managing passwords 14
Accessing my secure files 16
Upgrading my device from Basic to Enterprise 16
Reformatting my device 17
Using my device on Linux 17
Finding information about my device 19

Where can I get Help? 20

DataLocker H300/H350 Basic User Guide

3

QUICK START

Once set up, you can use your device on Windows, Mac, or Linux systems. For more information about using
your device on Linux, see “Using my device on Linux” on page 17.

Windows & Mac Setup (Windows XP, Vista, 7, 8, 8.1, 10 or Mac OS X 10.6+)

1. Plug the device into your computer’s USB port.

2. When the Device Setup window appears, follow the on-screen instructions. If this window does not

appear, open it manually:

• Windows: Start > This PC > Unlocker > Unlocker.exe

• Mac: Finder > Unlocker > Unlocker

3. When Device Setup is complete, you can move your important files to the PRIVATE USB drive and they
will be automatically encrypted.

Some Windows systems prompt to restart after you first plug in your device. You can safely close that
prompt without restarting—no new drivers or software are installed.

Linux Setup (Linux 2.6+)

1. Plug the device into your computer’s USB port.

2. Run the “unlocker.exe” program from the device’s linux folder and follow the on-screen instructions.

MISE EN ROUTE

Installation avec Windows et Mac (Windows XP, Vista, 7, 8, 8.1, 10 ou Mac OS X 10.6 +)

1. Branchez le périphérique sur le port USB de votre ordinateur.

2. Lorsque la fenêtre d’Installation du périphérique s’affiche, suivez les instructions à l’écran. Si cette fenêtre

ne s’affiche pas, ouvrez-la manuellement:

• Windows:Démarrer > Ordinateur > Unlocker > Unlocker.exe

• Mac: Finder > Unlocker > Unlocker

3. Lorsque l’installation du périphérique est terminée, vous pouvez déplacer vos fichiers importants vers le
lecteur PRIVATE USB (Fichiers sécurisés). Ils seront automatiquement cryptés.

Certains systèmes Windows vous invitent à redémarrer la première fois que vous branchez votre
périphérique. Vous pouvez fermer cette invite en toute sécurité sans redémarrer, aucun nouveau pilote ou
logiciel n’est installé.

Installation avec Linux (Linux 2.6+)

1. Branchez le périphérique sur le port USB de votre ordinateur.

2. Exécutez le programme unlocker.exe depuis le dossier Linux du périphérique et suivez les instructions

àl’écran.

DataLocker H300/H350 Basic User Guide

4

KURZANLEITUNG

Geräte-Setup bei Windows und Mac (Windows XP, Vista, 7, 8, 8.1, 10 oder MacOS X 10.6+)

1. Stecken Sie das Gerät in den USB-Port Ihres Computers

2. Wenn sich das Fenster „Geräte-Setup“ öffnet, folgen Sie den Anweisungen auf dem Bildschirm. Wenn sich

dieses Fenster nicht öffnet, dann öffnen Sie es wie folgt manuell:

• Windows: Start > This PC > Unlocker > Unlocker.exe

• Mac: Finder > Unlocker > Unlocker

3. Wenn das Geräte-Setup abgeschlossen ist, können Sie Ihre wichtigen Dateien auf das Laufwerk „PRIVATE
USB“ verschieben und sie werden automatisch entschlüsselt.

Einige Windows-Systeme werden Sie zum Neustart auffordern, wenn Sie das Ihr Gerät zum ersten Mal
anschließen. Sie können diese Aufforderung sicher schließen ohne Neu zu starten – keine neuen Laufw
erke oder Software werden installiert.

Geräte-Setup bei Linux (Linux 2.6+)

1. Stecken Sie das Gerät in den USB-Port Ihres Computers.

2. Führen Sie das Programm „unlocker.exe“ unter dem Linux-Ordner des Geräts aus und folgen Sie den

Anweisungen auf dem Bildschirm.

-

INICIO RÁPIDO

Instalación en Windows y Mac (Windows XP, Vista, 7, 8, 8.1, 10 o Mac 10.6 OS X osuperior)

1. Conecte el dispositivo en el puerto USB de su equipo

2. Cuando aparezca la ventana Instalación del dispositivo, siga las instrucciones que se muestran en pantalla.

Si no aparece, ábrala manualmente:

• Windows: Inicio > Equipo > Unlocker > Unlocker.exe

• Mac: Finder > Unlocker > Unlocker

3. Tras finalizar la instalación del dispositivo, podrá mover sus archivos importantes a la unidad “PRIVATE
USB” y estos se cifrarán de forma automática.

Algunos sistemas Windows le solicitarán que reinicie el sistema tras conectar el dispositivo por primera
vez. Puede cerrar este mensaje con seguridad sin reiniciar el equipo, no se instalarán drivers ni software
nuevo.

Instalación en Linux (Linux 2.6 o superior)

1. Conéctelo el dispositivo en el puerto USB de su equipo.

2. Ejecute el programa “unlocker.exe” desde la carpeta de Linux del dispositivo y siga las instrucciones que

se muestran en pantalla.

DataLocker H300/H350 Basic User Guide

5

クイックスタート

Windows および Mac のセットアップ(Windows XP、Vista、7、8、8.1、10または Mac OS X10.6+)

1. デバイスをコンピューターの USB ポートに挿入します。

2. [ デバイスのセットアップ ] 画面が表示されたら、画面上の指示に従ってください。

この画面が表示されない場合は、手動で開いてください。

• Windowsの場合 :[ スタート ]>[ マイコンピューター ]>[Unlocker]>[Unlocker.exe]

• Macの場合 :[ セレクタ ]>[Unlocker]>[Unlocker]

3. デバイスのセットアップが完了したら、重要なファイルを「PRIVATEUSB」ドライブに移動させることができ、そこ
で自動的に暗号化されます。

デバイスを初めて挿し込むと、Windows システムが再起動するようにプロンプトを表示します。 新しいドライバー
またはソフトウェアがインストールされていない場合、再起動することなくそのプロンプトを安全に閉じることが

できます。

Linux セットアップ(Linux 2.6+)

1. デバイスをコンピューターの USB ポートに接続します。

2. デバイスの linux フォルダーから「unlocker.exe」を実行し、画面の指示に従います。

빠른 시작

Windows 및 Mac 설정 (Windows XP, Vista, 7, 8, 8.1, 10 또는 Mac OS X 10.6 이상 )

1. 컴퓨터 USB 포트로 장치를 꽂습니다 .

2. 장치 설정 창이 나타나면 화면의 지침을 따릅니다 .

이 창이 나타나지 않으면 다음과 같이 수동으로 엽니다 .

• Windows: 시작 > 내 컴퓨터 > Unlocker > Unlocker.exe

• Mac: Finder > Unlocker > Unlocker

3. 장치 설정이 완료되면 중요한 파일을 ‘PRIVATE USB’ 드라이브로 이동할 수 있습니다 . 이동한 파일은 자동으로
암호화됩니다 .

일부 Windows 시스템에서는 장치를 처음으로 꽂으면 다시 시작하라는 메시지를 표시합니다 . 다시 시작하지 않고
메시지를 닫아도 안전합니다 . 새로운 드라이버나 소프트웨어가 설치되지 않습니다 .

Linux 설정 (Linux 2.6 이상 )

1. 컴퓨터의 USB 포트에 꽂습니다 .

2. 장치의 linux 폴더에서 ‘unlocker.exe’ 프로그램을 실행하고 화면의 지침을 따릅니다 .

DataLocker H300/H350 Basic User Guide

6

快速入门

Windows & Mac 安装 （Windows XP、 Vista、 7、 8、 8.1、 10 Mac OS X 10.6 以上版本）

1. 将设备插到电脑 USB 接口。

2. 显示设备安装窗口后，按屏幕上的说明进行操作。

如果窗口未显示，可手动将其打开：

•Windows： 开始 > 我的电脑 > Unlocker > Unlocker.exe

•Mac：Finder > Unlocker > Unlocker

3. 设备安装完成后，可以将重要文件移动到 “ 安全文件 ” 驱动器中，文件会自动加密
首次插入设备后，某 Windows 系统会提示重新启动 您可以放心关闭此提示，且无需重新启动，因为系统并未安装

任何新的驱动程序或软件。

Linux 安装 （Linux 2.6 以上版本）

1. 将设备插到电脑 USB 接口。

2. 从设备 linux 文件夹中运行 “unlocker.exe” 程序，并按屏幕上的说明进行操作

快速入門

Windows 與 Mac 設定 （支援系統為：Windows XP、 Vista、 7、 8、 8.1、 10 或 Mac OS X 10.6 以上版本）

1. 將裝置連接到您的電腦 USB 連接埠。

2. 當裝置設定視窗出現時，請依照畫面上指示操作。

若此視窗並未出現，請手動開啟：

•Windows： 開 始

•Mac：Finder > Unlocker > Unlocker

3. 當裝置設定完成時，即可將您的重要檔案移至 「安全檔案」裝置，接著這些檔案就會自動加密。
部分 Windows 系統會在您第一次連接裝置後，提示您重新啟動電腦。您可以放心關閉此提示且無需重新啟動，因為

系統並無安裝任何新的驅動程式或軟體。

Linux 設定 （支援系統為：Linux 2.6 以上版本）

將裝置連接到您的電腦 USB 連接埠。
從裝置內的 linux 資料夾執行 「unlocker.exe」應用程式並依照畫面上指示操作。

>

我的電腦 > Unlocker > Unlocker.exe

DataLocker H300/H350 Basic User Guide

7

ABOUT MY DEVICE

H350

H300

DataLocker® H300 Basic and DataLocker® H350 Basic are USB (Universal Serial Bus) 3.0, portable hard drive
drives with built-in password security and data encryption. They are designed to be the world’s most secure
USB hard drives. Now you can safely carry your files and data with you wherever you go.

Figure 1: H Series hard drives

HOW IS IT DIFFERENT THAN A REGULAR HARD DRIVE?

FIPS 140-2 Level 3 certification (H350 only)

H350 is a FIPS-certified device so you can feel confident that you’re complying with regulatory requirements.

Hardware Encryption

The Cryptochip in your device protects your data to the same level as highly classified government
information. This security technology is always on and cannot be disabled.

Password-Protected

Device access is secured using password protection. Do not share your password with anyone so that even if
your device is lost or stolen, no one else can access your data.

Self-Destruct Sequence

If the Cryptochip detects physical tampering, or if ten incorrect password attempts have been entered, it
initiates a permanent self-destruct sequence that securely erases all onboard data (unless you set your device
to reset)—so remember your password.

Simple Device Management

Your device includes the DataLocker Control Panel, a program for accessing your files, managing your device
and editing your preferences, changing your device password, and safely locking your device.

DataLocker H300/H350 Basic User Guide

8

ABOUT MY DEVICE

WHAT SYSTEMS CAN I USE IT ON?

•Windows® 10

•Windows® 8.1

•Windows® 8

•Windows® 7

•Windows® Vista

•Windows® XP (SP2+)

•Mac OS® X (10.6 or higher)

• Linux (2.6 or higher)

Some applications are available only on specific systems:

Windows Only

• Virtual Keyboard (English only)

Mac Only

• Auto-Launch Assistant

What systems can I use it on?

HOW SECURE IS IT?

H300 and H350 devices have been designed from the ground up with security in mind. A combination of
advanced security technologies are used to ensure that only you can access your data. Additionally, it has
been designed to be physically secure, to prevent hardware-level attacks and tampering, as well as to make
the device rugged and long-lasting.

The Cryptochip is hardened against physical attacks such as power attacks and bus sniffing. It is physically
impossible to tamper with its protected data or reset the password counter. If the Cryptochip detects a
physical attack, it destroys the Cryptochip, making the stored encrypted files inaccessible.

We strive to be very open about the security architecture and technology that we use in designing and
building this product. We use established cryptographic algorithms, we develop threat models, and we
perform security analyses (internal and third party) of our systems all the way through design, development
and deployment.

Device Security

Data Encryption Keys

• AES key generated by on-board Random Number Generator

• AES key generated at initialization time and encrypted with hash of user password

• No backdoors: AES key cannot be decrypted without the user password

• AES key never leaves the hardware and is not stored in NAND flash

Data Protection

• Secure volume does not mount until the password is verified in hardware

• Password try-counter implemented in tamper-resistant hardware

• Once the password try-count is exceeded, by default, the device will be reset and all data will be
erased. Resetting a device puts the device back to its original factory state. If you disable the device
reset setting in the Control Panel, the device will self-destruct when the password try-count is
exceeded.

• Sensitive data and settings are stored in hardware

DataLocker H300/H350 Basic User Guide

9

ABOUT MY DEVICE

Application Security

Device Password Protection

• USB command channel encryption to protect device communications

• Password-in-memory protection to protect against cold-boot and other attacks

• Virtual Keyboard to protect against keyloggers and screenloggers

Product specifications

The device password is hashed using salted SHA-256 befor
secure USB channel. It is stored in an extremely inaccessible location in the protected Cryptochip hardware.
The hashed password is validated in hardware (there is no “getPassword” function that can retrieve the hashed
password), and only after the password is validated is the AES encryption key decrypted. The password try­counter is also implemented in hardware to prevent memory rewind attacks.

e being transmitted to the device firmware over a

PRODUCT SPECIFICATIONS

For further details about your device, see the Device Info page in the DataLocker Control Panel. See “To view
device information” on page 19.

Tab l e 1 : H300 and H350 Device Specifications

Specification Details

Hard Drive Capacity* 500GB, 1TB, 2TB

Dimensions 124.6mm (L) x 86.6mm (W) x 26.8mm (H)

Weight

Operating Temperature 5C, 55C

500GB: 10.8 oz (306 grams)

1TB: 11.6 oz

2TB: 11.8 oz (334 grams)

(328 grams)

Operating Shock 400 G (2ms) / 900 G (1ms)

Hardware Encryption • 256-bit AES (XTS Mode)

• Hardware: 256-bit AES

• Hashing: 256-bit SHA

•PKI: 2048-bit RSA

File System Support • FAT32 (Default)

• NTFS (Windows only)

EMI/EMC Compliance USA FCC, Europe CE, Canada ICES, Australia C-Tick Taiwan BSMI, Japan VCCI,

Korea KCC (KCC ID: MSIP-REM-WKY-H300) (KCC ID:MSIP-REM-WKY-H350)

Certification FIPS 140-2 level 3 certified (applies to H350 only)

Hardware • USB 3.0 (SuperSpeed) port recommended, As a minimum, the computer must

have a USB 2.0 port (high-speed).

Hardware accessories USB 3.0 Type A to Micro B cable

DataLocker H300/H350 Basic User Guide

10

ABOUT MY DEVICE

Tab l e 1 : H300 and H350 Device Specifications

Specification Details

OS Compatibility • Windows 10, Windows 8.1, Windows 8, Windows 7, Windows XP (SP2+),

Windows Vista

• Mac OS X (10.6 or higher)

• Linux (2.6 or higher, x86)

Accessibility DataLocker Control Panel is designed to be Section 508 compliant. Users with

disabilities have keyboard navigation and screen reader support.

Warranty 5 Years Limited

Designed and assembled in the U.S.A.

H300/H350 devices do not require any software or drivers to be installed.

* Advertised capacity is approximate. Some space is required for onboard software.

Recommended best practices

RECOMMENDED BEST PRACTICES

1. Lock the device (see “Locking the device” on page 14)

• when not in use

• before unplugging it

• before the system enters sleep mode

2. Never unplug the device when the LED is on.

3. Never share your device password.

4. Perform a computer anti-virus scan before setting up the device.

DataLocker H300/H350 Basic User Guide

11

USING MY DEVICE

SETTING UP THE DEVICE

Once set up, you can use your device on Windows, Mac, or Linux systems. The setup process is the same for
systems running a Microsoft Windows or Mac operating system. To set up the device using Linux, see “Setting
up the device on Linux” on page 17.

To set up the device

1. Plug the USB
screen appears.

The setup software runs automatically from the public volume. This screen may not appear if your com­puter does not allow devices to autoru

• Wi

• Ma

install the Auto-Launch Assistant, so that the Unlocker will automatically open when you plug in a
device. See “Installing the Auto-Launch Assistant (Mac only)” on page 12.

2. Se

3. T

4. Sel

5. On t

6. Click Cont

lect a default language preference, agree to the end-user license agreement, and then click Unlock.

By default, device software will use the same language as y

ype a device password and confirm it, and then click Continue.

Your password is case-sensitive and must have at least 4 characters (including spaces).

ect Reset the device... if you do not want the device to self-destruct if the wrong password is entered

10 consecutive times.

he Device Setup screen, select the file system for the secure volume. Mac and Linux operating sys-

tems do not support an NTFS file system.

During this process, it generates the AES encryption key, creates the file system for the secure volume,

opies secure applications and files to the secure volume.

and c

When the initialization is complete, the DataLocker Control Panel appears. Your device is now ready to

otect your data and can be used on a Windows, Mac or Linux computer.

pr

cable into the device and insert the cable into your computer’s USB port. The Device Setup

n. You can start it manually by:

ndows: Opening the Unlocker drive in This PC and double-clicking the Unlocker.exe file.

c: Opening the Unlocker drive in Finder and then opening the Unlocker application. You can

our computer’s operating system.

inue. The device initializes.

Installing the Auto-Launch Assistant (Mac only)

Installing the Auto-Launch Assistant will automatically open the Unlocker window when you plug in the device
on that computer. This feature is only available on a Mac.

To install the Auto-Launch Assistant

1. Unlock y

2. Click To

DataLocker H300/H350 Basic User Guide

our device and click the Settings button on the menu bar.

ol s from the left side bar, and then click Install Auto-Launch Assistant.

12

USING MY DEVICE

Tip: To uninstall the Assistant, click Uninstall Auto-Launch Assistant.

Unlocking and locking the device

UNLOCKING AND LOCKING THE DEVICE

Unlocking the device

The unlock process is the same for Windows and Mac systems. For Linux systems, see “Use my device on
Linux” on page 19. Once you enter the correct password, the device will mount the secure volume with all your
secure applications and files. Exceeding the number of incorrect password attempts will, by default, reset the

device. If you disabled this setting, the device will self-destruct and you will lose all on-board data.

Note: As
attempts.

Unlocking in Read-Only Mode

ou can unlock your device in a read-only state so that files cannot be edited on your secure drive. For

Y
example, when using an untrusted or unknown computer, unlocking your device in Read-Only Mode will
prevent any malware on that computer from infecting your device or modifying your files.

When working in this mode, the DataLocker Control Panel will display the text “Read-Only Mode”. In this mode,
you cannot perform any operations that involve modifying files on the device. For example, you cannot
reformat the device, restore applications or edit the Applications list, or edit files on the drive.

To un l o ck t h e devi c e

1. Insert

2. If y

3. T

Tip: Y

“Typing passwords with the Virtual Keyboard” on page 15.

a security precaution, you must unplug and reinsert the device after every three failed password

the device into the USB port of the host computer, and wait for the Unlocker window to appear.

If the Unlocker window does not appear

• Windows: Double-clicking the Unlock

• Mac: Opening the Unloc

installed the Auto-Launch Assistant, the Unlocker will automatically open when you plug in a device.
See “Installing the Auto-Launch Assistant (Mac only)” on page 12.

ou want to unlock your device in Read-Only Mode, click the Read-Only check box.

ype your device password and click Unlock. The DataLocker Control Panel will appear.

ou can also use the virtual keyboard (runs in Windows and is English only) to type your password, see

ker drive in Finder, and then opening the Unlocker application. If you

, you can start it manually by:

er drive in This PC and double-clicking the Unlocker.exe file.

Changing the Unlock message

The Unlock message is custom text that displays in the Unlocker window when you unlock the device. This
feature allows you to customize the message that displays, for example, to add contact information so that if
you lose your device someone will know how to return it to you.

To change the Unlock message

1. In the Da

2. Click P

ype the message text in the Unlock Message field. The text must fit the space provided (approximately 7

3. T
lines and 200 characters).

DataLocker H300/H350 Basic User Guide

taLocker Control Panel, click the Settings button on the menu bar.

references in the left sidebar.

13

USING MY DEVICE

Managing passwords

Locking the device

Lock your device when you are not using it to prevent unwanted access to your secure files on the drive. You
can manually lock the device or you can set the device to automatically lock after a specified period of
inactivity.

By default, to prevent potential file corruption, your device will not lock if applications or files on the drive are
open. Close any open applications or files before locking the device.

Caution: If y
corrupt as a result of the forced lock operation. Unplugging the device while it is unlocked may also result in

loss or corruption of data on the device.

If your files have become corrupt from a forced lock pr
you might be able to recover the files by running CHKDSK and using data recovery software.

To manually lock the device

• Click the Loc

ou can also use the keyboard shortcut: CTRL + L, or right-click the DataLocker icon in the system tray

Tip: Y

and click Lock Device.

To set a device to automatically lock

1. U

2. Click P

3. Cli

5, 15, 30, 60, 120, or 180 minutes.

Note: B
application or file to close. Although you can configure the auto-lock setting to force the device to lock; doing
so can result in loss of data to any open and unsaved files.

To run CHKDSK (Windows only)

ou configure auto-lock to force the device to lock, any open files may lose changes or become

ocedure or from unplugging the device before locking,

k button in the bottom left of the Control Panel to safely lock your device.

nlock your device and in the DataLocker Control Panel, click the Settings button on the menu bar.

references in the left sidebar.

ck the check box for auto-locking the device and set the time-out to one of the following time intervals:

y default, if a file or application is open when the device tries to auto-lock, it will not force the

1. Unl

2. Pr

3. Ty

4. Fr

ock the device.

ess the WINDOWS LOGO KEY + R to open the Run prompt:

pe CMD and press ENTER.

om the command prompt, type CHKDSK, the PRIVATE USB drive letter, and then “/F /R”.

For example, if the PR

IVATE USB drive letter is G, you would type:

CHKDSK G: /F /R

5. Use data recovery software if necessary in order to recover your files.

MANAGING PASSWORDS

It is a good security practice to regularly change your password. Make sure you remember your device
password. If you forget it, there is no way to unlock the device.

When a password is required, for example when logging in to the device or during a password change
operation, you can use the Virtual Keyboard instead of the real keyboard to type the password, see “Typing
passwords with the Virtual Keyboard” on page 15.

DataLocker H300/H350 Basic User Guide

14

USING MY DEVICE

To change your password

Managing passwords

1. Unlock y

2. Click Pa

3. Enter your current password in the field provided.

4. Ent

5. Click Cha

our device and click the Settings button on the menu bar.

ssword in the left sidebar.

er your new password and confirm it in the fields provided.

nge Password.

Typing passwords with the Virtual Keyboard

If you are unlocking your device on an unfamiliar computer and are concerned about keylogging and
screenlogging spyware, use the Virtual Keyboard. It helps protect your device password by letting you click
out letters and numbers. The underlying techniques in the Virtual Keyboard will bypass many trojans,
keyloggers, and screenloggers.

Note: Th
for the device must be set to English.

To type a password using the Virtual Keyboard (Windows only)

1. O

2. Click

Tip: Click the Ra

screenloggers.

Note: When y
screenloggers from capturing what you clicked. To disable this feature, click the icon (beside the Ex
button) and choose Disable screenlogger protection.

is feature uses a standard QWERTY key set. It is available on Windows only. The language preference

pen the Virtual Keyboard by doing one of the following actions:

• In a password field, click the Virtual Keyboard icon

• When the keyboard focus is in a password field, press CTRL+AL

the keys to type your password, and then click ENTER.

You can also use the Virtual Keyboard in conjunction w
characters and click some characters.

ndomize button to arrange the keys in a random manner. This helps protect against

ou click a key in the Virtual Keyboard, all of the keys briefly go blank. This feature prevents

.

T+ V.

ith the actual keyboard, so that you type some

it

DataLocker H300/H350 Basic User Guide

15

USING MY DEVICE

Accessing my secure files

Accessing my device if I forget my password

There are no back doors to a DataLocker H300/H350 Basic device. In other words, there is no way to unlock it
if you do not have the correct password.

• If you have enabled device reset, you can reset the device back to its pre-setup state by exceeding
the 10 allo

• If you have not enabled device reset, you have only 10 pas
manently self-destruct. You will not

wed password attempts; however, all on-board data will be permanently lost.

sword attempts before the device will per-

be able to use the device again and your data will be erased.

ACCESSING MY SECURE FILES

After unlocking the device, you can access your secure files. Files are automatically encrypted and decrypted
when you save or open a file on the drive. This technology gives you the convenience of working as you
normally would with a regular hard drive, while providing strong, “always-on” security.

To access my secure files

1. Click the Fi

les button on menu bar of the DataLocker Control Panel.

• Win

• Mac: Ope

2. Do one of

• To open a file, double-click the file on the PR

• To save a file, drag the file from your computer to the PR

ou can also access your files by right-clicking the DataLocker icon in the Windows taskbar and clicking

Tip: Y

Secure Files.

dows: Opens Windows Explorer to the PRIVATE USB drive.

ns Finder to the PRIVATE USB drive.

the following:

IVATE USB drive.

IVATE USB drive.

UPGRADING MY DEVICE FROM BASIC TO ENTERPRISE

If notified by your system administrator, you can upgrade your DataLocker H300/H350 Basic device to an
Enterprise device. Enterprise devices are managed by IronKey™ EMS. When you upgrade your device, you will
be required to activate it using an activation code provided by your administrator. An Internet connection is
required to complete this process. See the DataLocker H300/H350 Enterprise User Guide on your device for
information about Enterprise features.

Important: O
with IronKey EMS.

To upgrade from Basic to Enterprise

1. W

hen you receive the Activation Code from your system administrator, start the DataLocker Control

Panel and click the Settings

nly start the upgrade process if your system administrator has asked you to activate your device

button.

2. In the left s

aste the Activation Code in the Enterprise Activation text box (Windows and Mac systems only).

3. P

ollow the on-screen instructions.

4. F

5. A

DataLocker H300/H350 Basic User Guide

dditional applications may be installed on your device based on the device policy settings chosen by
your system administrator. You may also be required to change your password so that it conforms to the
password security policy set for Enterprise devices in your organization.

idebar, click To ol s and then click Upgrade to Enterprise.

16

USING MY DEVICE

Reformatting my device

REFORMATTING MY DEVICE

Reformatting the secure volume will erase all your files and your Application List, but it will not erase your
device password and settings.

Important: B
cloud storage or your computer).

To reformat a device

1. Unlock y

2. Click To

3. Under De

efore you reformat the device, back up your secure volume to a separate location (for example, to

our device and click the Settings button on the menu bar of the DataLocker Control Panel.

ol s on the left sidebar.

vice Health, select the file format and click Reformat Secure Volume.

USING MY DEVICE ON LINUX

You can set up and use your device on several distributions of Linux (x86 systems only with kernel version 2.6
or higher).

Setting up the device on Linux

1. Plug the USB cable into the device and insert the cable into your computer’s USB port.

2. Start

3. A

4. Cr

5. Enabl

6. T

the Unlocker by running the unlocker.exe program from the linux folder on the device.

The device mounts as a hard drive.

ccept the license agreement. Press Q (Quit) to exit or press Y (Yes) to agree to the terms.

eate a device password.

Your password is case-sensitive and must be at least 4 characters long.

e Device Reset if you want the device to reset instead of self-destructing if you exceed the number
of password attempts allowed. A device reset operation erases all on-board data, but unlike self-destruct,
does not render the device unusable.

he device initializes. During this process, it generates the AES encryption key, and creates the file system

for the secure volume.

When this process is complete, your device is ready for use.

Using the Unlocker

Use the Unlocker for Linux to access your files and change your device password on Linux. Depending on your
Linux distribution, you may need root privileges to use the program “
folder of the mounted public volume. If you have only one device attached to the system, run the program
from a command shell with no arguments (for example,
must specify which one you want to unlock.

Note:

distributions do this automatically; if not, run the mount program from the command line, using the device
name printed by

To change the password of the device named “devicename,” enter:

unlocker.exe only unlocks the secure volume; it must then be mounted. Many modern Linux

unlocker.exe.

unlocker.exe). If you have multiple devices, you

unlocker.exe --changepwd [devicename]

To unlock the device in Read-Only Mode, enter:

unlocker.exe --readonly When prompted, type your password.

DataLocker H300/H350 Basic User Guide

unlocker.exe” found in the Linux

17

USING MY DEVICE

To unlock the device, enter:

Using my device on Linux

unlocker.exe --unlock When prompted, type your password.

To lock the device, you must either unmount and physically remove (unplug) it, or else run:

unlocker.exe --lock

Simply unmounting the device does not automatically lock the secure volume.

To lock the device when more than one device is in use, enter:

unlocker.exe --lock [devicename] where devicename is the name of the device you want to lock.

Please note the following important details for using your device on Linux:

1. Kernel Version must be 2.6 or higher

If you compile your own kernel, you must include the following in it:

• DeviceDrivers->SCSIDeviceSupport-><*>SCSICDROMSupport

• DeviceDrivers-><*> Support for Host-side USB

• DeviceDrivers-><*> USB device filesystem

• DeviceDrivers-><*> EHCI HCD (USB 2.0) support

• DeviceDrivers-><*> UHCI HCD (most Intel and VIA) support

• DeviceDrivers-><*> USB Mass Storage Support

The kernels that are included by default in most major distributions already have these features, so if you are
using the default kernel that comes with a supported distribution you do not need to take any other action.

Also, on 64-bit Linux systems the 32-bit libraries must be installed in order to run the
program. Consult the distribution’s help resources for assistance and more information.

2. Mounting problems

• Make sure you have permissions to mount external SCSI and USB devices

• Some distributions do not mount automatically and require the following command to be run:

unlocker.exe

mount /dev/<name of the device> /media/<mounted device name>

• The name of the mounted device varies depending on the distribution. The names of the devices
can be discovered by running:

unlocker.exe --show

3. Permissions

• You must have permissions to mount external/usb/devices.

• You must have permissions to run an executable file from the public volume in order to launch the
Unlocker.

• You might need root user permissions.

See the linux folder on the device’s public volume for information about how to set up permissions to allow
non-root users to access their devices. All of these methods require that the system administrator take (one
time) action to enable access; after that, ordinary users can lock, unlock, and change passwords on any
devices they plug in.

4. Supported distributions

Not all distributions of Linux are supported. Please visit http://support.datalocker.com for the latest list of
supported distributions.

DataLocker H300/H350 Basic User Guide

18

USING MY DEVICE

This Capacity Meter indicates
that there is 92.5 GB of free
space available on the drive.

Finding information about my device

5. The Unlocker for Linux only supports x86 systems at this time.

FINDING INFORMATION ABOUT MY DEVICE

Use the Capacity Meter, located at the bottom right of the DataLocker Control Panel, to see how much storage
space is still available on your device. The green bar graph represents how full the device is (for example, the
meter will be totally green when the device is full). The white text on the Capacity Meter displays how much
free space remains.

For general information about your device, see the Device Info page.

To view device information

1. U

2. Click De

nlock your device and in the DataLocker Control Panel, click the Settings button on the menu bar.

vice Info in the left sidebar.

The Ab

out This Device section includes the following details about your device:

• Model number

• Serial number

• Software and firmware version

• Release Date

• Secure Files drive letter

• Unlocker drive letter

• Operating System and system administrative privileges

Note: T

o visit the DataLocker website or access more information about legal notices or certifications for

DataLocker products, click one of the information buttons on the Device Info page.

Tip: Click Co

py to copy the device information to the clipboard so that you can paste it in an email or support

request.

DataLocker H300/H350 Basic User Guide

19

WHERE CAN I GET HELP?

The following resources provide more information about DataLocker products. Please contact your Help desk
or System Administrator if you have further questions.

• support.datalocker.com—Support information, knowledge base and video tutorials

• [e-mail]—Product feedback and feature requests

• www.datalocker.com—General information

DataLocker H300/H350 Basic User Guide

20