Ensurity Technologies ThinC-VAULT User Manual

Download

Page 1

ThinC-VAULT

(Secure USB with Biometric authentication)

ThinC Manager User Manual

A product by

Ensurity Technologies

https://thinc.ensurity.com

Page 2

ThinC–VAULT

Table of Contents

ThinC-VAULT: Introduction ............................................................................................................................. 3

Hardware Specifications .............................................................................................................................. 4

LED Indications ............................................................................................................................................ 5

ThinC Management Tool ................................................................................................................................. 6

Installation Microsoft® Windows® .............................................................................................................. 6

Uninstallation Microsoft® Windows® ......................................................................................................... 9

ThinC Manager Functionality for Admin User ............................................................................................... 12

Basic Functionalities .................................................................................................................................. 16

Create / Delete Users ............................................................................................................................ 16

Register / De-Register Users fingerprints .............................................................................................. 19

Create / Delete Groups ......................................................................................................................... 24

Add / Remove Group Members ............................................................................................................ 26

Set / Edit / Manage Partitions without Password ................................................................................. 28

Manage Device Settings ........................................................................................................................ 32

Others .................................................................................................................................................... 35

Advanced Functionalities .......................................................................................................................... 38

Set / Edit / Manage Partitions with Password ...................................................................................... 39

Set / Edit / Manage Access Rights ......................................................................................................... 44

Set / Edit / Manage Passwords.............................................................................................................. 47

Reassign Partition .................................................................................................................................. 50

Binding ................................................................................................................................................... 52

Operating ThinC Device in Microsoft® Windows® ........................................................................................ 71

Page 3

ThinC–VAULT

ThinC-VAULT: Introduction

ThinC-VAULT is a USB (Universal Serial Bus) based external data storage device (Pen Drive / Flash Drive) with built-in fingerprint biometric security and military grade encryption. ThinC-VAULT protects the data with the hardware-based 256-bit AES encryption, the keys for encryption gets generated and stored in devices Secure Element. By using a secure element in ThinC-VAULT provides an additional layer of security and increases the level of protection for encrypted data stored on the device.

ThinC enhances and establishes an authentic access control to the device using fingerprint-based biometric security. This touch-based sensor is exceptionally responsive; ThinC-VAULT uses hardware to match enrolled fingerprint and unlocking device.

The ordered ThinC-VAULT is with 128GB storage capacity. Ensurity provides two complementary tools for ThinC range of devices viz ThinC Manager and ThinC Agent. ThinC Manager is a standalone management tool to administer ThinC devices and used for managing the device/s, partitions, fingerprint enrolment, binding etc. ThinC Agent is a standalone user tool to interact / operate device's advanced security functions like unlock password protected partitions & unlock binding for using device. The device has a robust metallic casing and designed for long-term persistent performance even after multiple time USB use cycles (Plug-in-Plug out).

Page 4

ThinC–VAULT

Hardware Specifications

The following table provides brief specification of ThinC-Vault device.

Feature

Specification / Description

Connectivity

• High-speed USB 2.0

Capacity

• 128 GB

Fingerprint Biometrics

• Capacitive touch-based fingerprint sensor

• Upto 15 Fingerprint registrations

• Upto 5 Users and each user can enroll 3

fingerprints

Security & Cryptology

• AES256 for Fingerprint store and data

encryption

• Dynamic on-chip Key generation

• Design in compliance with FIPS 140-2 Level

2 standards

• Individual partitions are encrypted with

different key

Certifications

• FCC

• CE

Partitions

• Upto 8 partitions are supported

Access Control

• Read / Write

• Read Only

• Password for partition

Performance

• Durability: ~20,000 insertion cycles

• Typical Average Read speed: ~38 Mbps

• Typical Average Write speed: ~35 Mbps

Environment

• Storage Temperature: -40°C to 85°C

• Operating Temperature: -5°C to 55°C

• Operating Voltage: 4.9V ~ 5.1V

Fingerprint Registration Software Compatibility

• Microsoft Windows 8.1 and above for

Desktop versions (64Bit)

Memory calculation for ThinC-Vault considers the following: 1GB= 1,000,000,000 bytes or 1GB=1000MB

Page 5

ThinC–VAULT

LED Indications

The following table indicates the state of LED after the device is connected and powered on.

Function

State

LED State

Remarks

Power On

- Typically, 1-2 seconds

BITE (Built in Test)

- BITE Successful

- BITE Failure after 7 sec

Fingerprint

Wait

Wait for fingerprint - 30 sec time out.

Process

Success

Typically, 1-2 seconds

Fail

Delete Fingerprint Success

Fail

Factory Reset

Success

After Reset

Disconnect and reconnect the device

Fail Typically, 1-2 seconds

SD Card Operations

Read/Write

Data read / write from the device

Blinking

Slow Blinking

Glow

Page 6

ThinC–VAULT

ThinC Management Tool

ThinC Manager tool can be downloaded from the following links. To receive installer on mail, send email to [email protected] with subject "Send ThinC Manager Tool - Windows" for Microsoft Windows based tool latest download links respectively.

• https://x.co/tctools

• https://thinc.ensurity.com/#download

ThinC Manager tool is a software utility meant for managing ThinC range of USB devices viz ThinCFIDO2 / U2F, ThinC-VAULT and ThinC-COMPUTE. Management tool for ThinC-VAULT has four sub tabs i.e 1) User 2) Partitions 3) Settings 4) FAQ and disconnect button.

Installation Microsoft® Windows®

This section of the manual describes installation process of ThinC Manager tool for Microsoft® Windows®. ThinC Manager tool is a software utility required for registering the fingerprints, partitions and managing permissions to the partitions. To utilize the device the following steps has to be followed, 1) Register / Enroll fingerprint biometrics using ThinC Manager Tool 2) Create partition and assign permissions. The ThinC Manager tool installer can be downloaded from the URLs / web links provided below or kindly contact [email protected] with subject "ThinC tool - Windows" to get your copy delivered to your electronic mail box.

• https://x.co/tctools

• https://thinc.ensurity.com/#download

Please download ThinC Manager tool installer for Microsoft Windows operating system.

Step 1:

• Open the downloaded file to begin the installation wizard.

During the installation process in Microsoft Windows 8.1 / Windows 10 or above, it is possible that Microsoft Smart Screen protector may pop up window for permission. Kindly choose to provide necessary permissions by selecting 'Run Anyway' (or equivalent).

It is possible that the User Access control / Antivirus / End Point Protector software could

request you to approve the installation of the software. Kindly choose to permit any such request that may be popped up during installation.

Page 7

ThinC–VAULT

Typical window showing the downloaded installer tool in Microsoft Windows 10 operating system.

Step 2:

• After opening ThinC Manager tool installer, license agreement window will be shown. Please

read the Ensurity Software Applications - End Users License Agreement completely and choose to accept by selecting on "I accept the agreement" and click on Next to proceed further with the wizard. Choosing cancel any time during the installation process will abort the installation.

Step 3:

• By default the tool installs in "C:\Program Files\ThinC Manager". To choose a different folder,

click on Browse and select another folder. Click on Install to begin the installation.

Page 8

ThinC–VAULT

Step 4:

• The Installation window will show progress of installation. Once the installation process is

initialized this process can't be stopped / aborted.

If installation is stopped or aborted tool will not be installed.

Step 5:

• After the installation is successfully completed

Page 9

ThinC–VAULT

Click on Finish to complete the installation and launch the tool immediately. Deselect "Launch ThinC Manager tool" and click Finish to close the installer and use the tool later. Use desktop shortcut or start menu shortcut or navigate to install path to run ThinC Management tool.

In case of any issue or error during the installation, please contact support at

[email protected] or visit us on ensurity.com for technical support.

Uninstallation Microsoft® Windows®

Follow the below steps to uninstall ThinC Manager tool from Windows®

Step 1:

• Goto Windows Control Panel > Programs and features. Or Control Panel > Uninstall a program.

Page 10

ThinC–VAULT

Step 2:

• Select "ThinC Manager x.y.z" and click Uninstall or Uninstall/Change.

During uninstallation process Microsoft Windows can request permission to uninstall

ThinC Manager tool, choose to accept or click Yes to continue uninstall. Choose No to abort the operation.

Step 3:

• ThinC Manager tool uninstall window will ask to reconfirm Uninstallation process. To proceed

further choose Uninstall and to abort choose Cancel.

Page 11

ThinC–VAULT

Step 4:

• Uninstaller will remove / delete ThinC Agent files from installation directory. After uninstalling

the tool, Microsoft Windows will show "ThinC Manager has been uninstalled from your computer" click Finish to complete the uninstallation process. In case of any issue during uninstallation kindly contact [email protected] with subject "Uninstall-Windows".

Page 12

ThinC–VAULT

ThinC Manager Functionality for Admin User

Manage ThinC-VAULT USB ThinC Manager is a standalone management tool to administer ThinC devices and used for managing the device/s, partitions, fingerprint enrolment, binding etc.Ensure that tool is installed in required computer before proceeding further [refer to installation section in the manual for installing]. This tool is used for managing ThinC-VAULT. Connect the ThinC-VAULT to computer USB port, the device would power on, initialize and install necessary drivers automatically and await to read fingerprint or enroll fingerprints.

The ThinC-VAULT device has two types of users. A) Admin User (AU) The following are the functionalities that the Admin User can perform

• Basic Functionalities

1. Create / Delete Users

2. Create / Delete Groups

3. Add / Delete Members to the Group

4. Register / De-Register Users fingerprints.

5. Set / Edit / Manage Partitions

6. Manage Device Settings

• Advanced Functionalities

1. Set / Edit / Manage Access Rights

2. Set / Edit / Manage Passwords

3. PC Binding

B) End User (EU). The following are the functionalities that the End User can perform

• Lock / Unlock Partitions

Refer to LED Indication table to understand different device states

While the device is initializing, do not place your finger on the fingerprint sensor.

• Open ThinC Manager tool application and click on the device that needs to be managed.

The application will automatically search, recognize and list connected ThinC devices.

Page 13

ThinC–VAULT

• If the device is not connected properly or not available in computer, the below screen would

be displayed prompting the user to reconnect the device. If it continues to be unrecognized device, please contact [email protected].

ThinC-VAULT device supports up to 15 fingerprint registrations.

Page 14

ThinC–VAULT

• The below screen provides an overview of the tabs available in ThinC Manager tool.

User Tab

Partitions Tab:

Note: Capacity showcased by the doughnut chart varies based on ThinC-VAULT variant

Page 15

ThinC–VAULT

Binding Tab

Settings Tab

Page 16

ThinC–VAULT

FAQs Tab

Basic Functionalities

This section of the document describes the basic functionalities available in ThinC-VAULT. The basic functionalities are listed below, and the description of each section is described as follows.

• Creation / Deletion of Users: Describes the process of creating and deleting user using ThinC

Manager.

• Register / DeRegister Users Fingerprints: Describes the process of enrolling fingerprints,

verifying enrolled fingerprints and deleting exiting fingerprints.

• Creation / Deletion of Groups: ThinC allows grouping fingerprints into a group and can assign

access rights to a group.

• Adding / Removing Members from the Group: Adding new members or removing existing

members from group.

• Setting / Editing / Managing Partitions: Creating the partitions and assigning the user to the

partitions or deleting the partition.

• Others: Describes the options such as disconnecting the device from ThinC Manager and lists

the FAQ's

Create / Delete Users

User Creation: ThinC Manager tool has capability to automatically distinguish between fresh / reset / unregistered device and fingerprint enrolled / registered device. In case of fingerprint enrolled / registered device it is mandatory for the registered user to authenticate before accessing Management functions. The step 1 below provide process to access management function for device with enrolled fingerprint, see to step 2 for unregistered device or first-time fingerprint enrolment.

The tool will automatically skip to step 2 to initiate the initial authentication process for new

fresh / reset / unregistered device.

Page 17

ThinC–VAULT

Step 1:

• Click on Authenticate and place enrolled finger on the Touch sensor. The tool will request

ThinC-VAULT to verify the finger and provide access after successful verification. This step is skipped by tool automatically for fresh / reset / unregistered device.

The device has mechanism to prevent unauthorized access. More than 10 continuous

unsuccessful authentications would initiate factory reset.

Step 2:

• Click on Add User /Group button to register a new user to the device.

• The tool displays a dialog box "Create New User". In the dialog box, select User option and

enter the Display Name, User Name. Click on Create to create the user. By default the first user of the device is the Admin. Click Ok in the pop up.

Page 18

ThinC–VAULT

It is mandatory to enroll atleast one fingerprint associated with the created user for device to

Only the device administrator can add / remove users or fingerprints.

User Deletion:

• In the user management window click on in the user tile to delete the user. After successful

deletion of the user "Delete User Successful" notification will be displayed by the tool.

Page 19

ThinC–VAULT

The Admin user can only be deleted by performing a factory reset

If the user is deleted, the corresponding access rights to the partition will be removed.

Register / De-Register Users fingerprints

• The tool will automatically showcase fingerprint management window for the user created.

Fingerprint management window provides 10 slots to choose for enrolment of finger. Choose the finger slot of your choice by clicking on icon to enroll the fingerprint. Click on "Yes

enroll!" to initiate enrollment process, click No to abort enrollment process.

Page 20

ThinC–VAULT

Avoid using different finger for indicated fingerprint slots to minimize confusions later. All the

enrolled fingerprints are securely stored on the ThinC-VAULT device.

No fingerprints or device access information is stored in the management tool. All fingerprint

information is stored on ThinC-VAULT in an encrypted format.

• Place the finger repeatedly on fingerprint sensor to continue and complete the enrollment

process, finger has to be repeatedly placed on fingerprint sensor till enrollment process reaches 100%. As a best practice placing finger repeatedly in slightly different angles each time to enroll finger quickly.

Page 21

ThinC–VAULT

• After the fingerprint enrollment process is successfully completed, tool displays a notification

stating "Adding Finger successfully" message and the screen would get updated.

The tool would display the fingerprint slots that are available in USB device for enrollment

with symbol

The Tool would display the fingerprint slots that are already used with fingerprint symbol

and icon is displayed on the Management tool finger image.

ThinC Device supports upto 5 users and each user can enroll upto 3 fingerprints. If these slots are exceeded and after enrollment process instead of "Fingerprint enrolled Successfully" tool would notify "Maximum finger limit reached".

Page 22

ThinC–VAULT

Step 3:

• Verification of finger is not a mandatory process for using services, as a best practice please

choose to verify the enrolled fingerprints by using "Verify Finger" option. In Fingerprint management window click on Yes, verify, place the finger on sensor.

• Tool will automatically initiate the verification and shall provide results by notifying "Your

fingerprint verified Successful" if fingerprint matches enrolled finger or "Authentication Failed" if fingerprint does not match

Page 23

ThinC–VAULT

De-Register Users fingerprints

The Fingerprint management allows deletion / de-registration of individual fingerprints.

• In the fingerprint management window click on 'delete / trash icon' on the given slot to delete

/ de-register fingerprint. After successful deletion of the fingerprint " Your fingerprint data is successfully deleted from the device" notification will be displayed by the tool.

It is mandatory for the Admin to have at least one fingerprint enrolled.

Page 24

ThinC–VAULT

Create / Delete Groups

This section of the document describes the process of creating a group and adding or removing members to the group.

Group Creation

• Click on Add User /Group button to register a new group to the device.

• The tool displays a dialog box "Create New User". In the dialog box, select Group option and

enter the Group Name. A group can only be created if there are any users in the device. The list of all the users in the device is displayed under "Selected Users". Check the necessary members from the list to add them to the group and click the Create Group button.

At least one user must be registered in the device to create a group.

Page 25

ThinC–VAULT

Maximum of 3 groups can be created with maximum of 5 users per group.

Group Deletion:

• In the user management window click on in the Group tile to delete the Group. After

successful deletion of the user "Delete Group Successful" notification will be displayed by the tool.

Page 26

ThinC–VAULT

Add / Remove Group Members

Add Members to the Group

• Admin can add multiple members to the group. To add a member to the group, click on "Add

Member" and select one or more users in the list of users and click on Add Members.

Page 27

ThinC–VAULT

Delete Members from the Group

• To remove the user from a group, click on and the tool displays a pop-up message "Are you

sure? You want to remove user from group!", click on "Yes, Remove" to remove the user from the group else click on "No Keep".

Page 28

ThinC–VAULT

Set / Edit / Manage Partitions without Password

This section of the document describes the process of creating, deleting partitions with and without password in ThinC-Manager application.

Create Partition

• To manage the partitions on ThinC-VAULT device, goto ThinC Manager tool partition tab (by

clicking on partitions). This tab shows the partition information (Name & Size) and unallocated space in the form of doughnut chart.

Page 29

ThinC–VAULT

• To create a new partition, click on the doughnut chart. Enter the partition name and required

partition size. Select one or more users in the list of "Assign Access to user / group". Assign access rights to the partition by clicking on under Manage column. Now drop down menu

under Under Permissions Tab choose the required access control - "Read Only" or "Read / Write". After modifying the access rights, click on to save the changes. Clicking on will

discard the modified changes. Click on "Create" to create the partition.

The maximum of 15 characters are allowed for partition name. If User is not assigned to the partition, tool displays a prompt "Please select at least one user

for creating partition" requesting the user to select a user to continue the partition creation process.

Partition can either be assigned to a user or a group.

Page 30

ThinC–VAULT

• The tool displays a pop up "Partition Added successfully. The new partition will be accessible

from next device connection". Remove the ThinC-VAULT device from computer, reconnect and authenticate to enumerate the newly created partitions.

Page 31

ThinC–VAULT

Deletion of Partitions

ThinC-VAULT supports deletion of selected partitions. Please use the following procedure to delete partition(s).

• In the partition management tab click on 'Delete Partition' to delete the selected partition.

Click on "Yes, delete" to proceed with the deletion or click on "No" to abort the operation.

Page 32

ThinC–VAULT

• After successful deletion of the partition "Deleting partition successful" notification will be

displayed by the tool. Kindly remove the ThinC-VAULT device and reconnect. Authenticate the device using enrolled fingerprint to re-login.

Please remove and reconnect ThinC-VAULT device after delete operations Deleting a given partition will delete the contents stored in the partition. Deleting all partitions

will delete contents stored in all partitions.

Manage Device Settings

The settings tab in ThinC Manager provides access to device information and factory reset. It displays the complete details of device i.e Firmware version and serial number and factory reset is used for resetting device to factory default setting.

Page 33

ThinC–VAULT

It is recommended to note down the device information as it would be useful during

communication with support.

Device Info:

• Click on the "Settings" to display the device info. The info displayed consist of firmware version

and serial number. This information is required during support.

The value of content displayed in device info could be different for each device connected.

Device Name Admin has the ability to set a unique name for each device.

• To set a device name, enter the name and click on Update in the Device Settings section.

Page 34

ThinC–VAULT

Factory Reset

Factory reset is a process to erase all the partitions, storage drives, keys, and fingerprints.

• To set the device to factory default settings, click on Factory Reset. A pop-up warning window

will be displayed requesting the permission to proceed further, choose "Yes, reset!" and "No, don't reset" to abort. Once "Yes, reset!" is chosen tool will request user to authenticate the device, click on authenticate and place already enrolled finger on fingerprint sensor to initiate factory reset process.

Page 35

ThinC–VAULT

• After successful reset the tool will navigate to the dashboard.

Before proceeding with factory reset it is recommended to back up the data stored in the

partitions.

After clicking on Reset, the blue LED's blink once and red LED blinks continuously indicating

the device is being reset to factory settings. Disconnecting the device immediately during this process will terminate the reset process.

Factory reset will erase all stored data including fingerprints and reset the device to factory

default.

Others

Disconnect:

Disconnect is used for disconnecting the device and log off from the tool. To disconnect click on

Page 36

ThinC–VAULT

Logout, a "Do you want to logout from the device?" pop up window is displayed choose "Yes, Logout!" to disconnect device from the tool or "No, don't logout!" for returning to device management. Once disconnected, re-authentication is required to access the management function.

Support:

For any support and queries, please do contact us at [email protected]

Please note that the support will is available only on weekdays (Monday to Friday) between 10:00 AM

and 7:00 PM IST.

FAQ

Without the User biometric authentication, can ThinC-VAULT be used to access the Encrypted

Storage partition?

• NO. The device will be accessible only after the user's successful biometric authentication to the

device.

How many fingerprints can be registered onto the device?

• ThinC-Vault supports up to 15 fingerprints.

What is the encryption used for the storage partitions?

• Storage Partitions are encrypted with hardware based AES256 algorithm. The encryption key is

stored securely.

Page 37

ThinC–VAULT

How many Storage Partitions can be created?

• ThinC-VAULT devices support upto 8 storage partitions. The ownership/accessibility of storage partitions can be assigned to either a single fingerprint or a group of fingerprints with read-only or read-write permissions.

How many users are supported for ThinC-VAULT?

• ThinC-VAULT support upto 5 users and 3 groups. Each group can contain upto 5 members.

Page 38

ThinC–VAULT

Advanced Functionalities

This section of the document describes the Advanced Functionalities available in ThinC-VAULT device. The advanced functionalities are listed below and the description of each section is described as follows.

• Access Rights: ThinC-VAULT supports " Read Only" and "Read/Write" access rights per partition

per user on the device. Access rights are managed by the device admin.

• Passwords: Password authentication can also be used as a authentication method for ThinC-

VAULT devices. Setting a password for a partition prevents the partition from opening after the device is connected to a PC/Laptop. The password for the partition is set after the partition is created.

• PC Binding: It’s a security function that binds ThinC-VAULT device to given computer

(Laptop/Desktop), IP address, MAC address, Network Binding. If any ThinC-VAULT is binded to computer then it can only be used in that computer and it does not work / function with any other computer machines. Adding Computer will trigger and enable the binding security function in the device.

Page 39

ThinC–VAULT

Set / Edit / Manage Partitions with Password

Create Partition

• To manage the partitions on ThinC-VAULT device, goto ThinC Manager tool partition tab (by

clicking on partitions). This tab shows the partition information (Name, Size, User access rights) and storage capacities in the form of doughnut chart.

• To create a new partition, click on the doughnut chart. Enter the partition name and required

partition size. Select one or more users in the list of "Assign Access to user / group". The default access rights will be Read/Write. Assign access rights to the partition by clicking on under

Manage column . Now drop-down menu under Under Permissions tab, choose the required access control - "Read Only" or "Read / Write". After modifying the access rights, click on to save the changes. Clicking on will discard the modified changes. Click on "Create" to

create the partition.

Page 40

ThinC–VAULT

If User / Group is not assigned to the partition, tool displays a prompt "Please select at least

one User / Group for creating partition" requesting the admin to select a user / group to continue the partition creation process.

• Tool supports assigning of Password based access control to the partition during the creation

of partition. Click on "Enable Password" check box. Please enter Password and confirm Password, click on Create button to create the partition.

Partition Password supports only 16 characters.

• The tool displays a pop up "Partition Added successfully. The new partition will be accessible

from next device connection". Remove the ThinC-VAULT device from computer, reconnect and authenticate to enumerate the newly created partitions.

Page 41

ThinC–VAULT

Deletion of Partitions

ThinC-VAULT supports deletion of selected partitions. Please use the following procedure to delete partition.

• In the partition management tab click on 'Delete Partition' to delete the selected partition.

Page 42

ThinC–VAULT

• Click on "Yes, delete" to proceed with the deletion or click on "No" to abort the operation

• Unlock the partition by entering the Password to proceed with the deletion.

Page 43

ThinC–VAULT

• After successful deletion of the partition "Deleting partition successful" notification will be

displayed by the tool. Kindly disconnect and reconnect the ThinC-VAULT device. Authenticate the device using enrolled fingerprint to re-login.

Please remove and reconnect ThinC-VAULT device after delete operations Deleting a given partition will delete the contents stored in the partition. Deleting all

partitions will delete contents stored in all partitions.

Page 44

ThinC–VAULT

Set / Edit / Manage Access Rights

Partition Access Rights Management

ThinC-VAULT supports " Read Only" and "Read/Write" access rights per partition per user on the device. Access rights are managed by the device admin.

• To assign access rights to the partition in tools go to partition tab, click on the required partition

to manage access rights. Under the Manage column clicking on . Now drop down menu under Permissions tab choose the required access control - "Read Only" or "Read / Write".

Refer to Best practices section below while assigning read only permissions.

• After modifying the access rights, click on to save the changes. Clicking on will discard

the modified changes.

Page 45

ThinC–VAULT

Best practice for Read only Partition Read Only access control is a very versatile functionality of ThinC-VAULT. Admin can modify Read/Write access control to Read Only access rights by configuring the partition using the tool. Once any partition is changed from Read/Write to Read only no changes can be made to the content of the partition. It is a best practice to first perform all operations (e.g: copy documents to the drive) in Read/Write mode then change the mode to Read only.

Step 1

[Only for new / reset devices without any partitions, skip to step 2 for others]

• Using ThinC Manager tool, create the partition.

• The drive gets automatically initialized. Now choose to format the drive follow the steps

provided in Formatting Partitions.

Step 2:

The following is the process for changing the partition access.

• Upload / copy the content to the required partition/ drive.

• After successfully copying / uploading content. Open ThinC Manager Tool and goto Partition

tab

Page 46

ThinC–VAULT

• In the tool go to Partition tab, click on the desired Partition to change the Access Rights. Click

on permissions for a given user, click on to change the partition Access rights to "Read only"

Page 47

ThinC–VAULT

A user's access rights cannot be removed unless the user is removed from the device. If the user is deleted, the associated partition will not be deleted.

Set / Edit / Manage Passwords

Setting Password

• Admin can also set the password for the partition after the partition is created. In the partition

management tab, select the partition and click on 'Set Password' to set the password to the selected partition.

• Please enter "Enter Password" and "Re-enter Password", click on Enable button to enable

password to the partition. The password will be effective only when the device is disconnected and reconnected to the computer.

Page 48

ThinC–VAULT

Change Password

• Admin has the privileges to modify the existing password for the partition. Launch ThinC-

Manager, click on Partitions tab. Select the partition to modify the password and click on Change Password. Enter the Old password, new password and click on Change to modify the password and the tool displays a prompt "Password has been changed successful" else click on "Cancel" to abort the operation.

Page 49

ThinC–VAULT

Clearing Password

• Admin has the privileges to remove existing password for the partition. Launch ThinC-Manager,

click on Partitions tab. Select the partition to clear the password and click on Clear Password. When prompted click on "Clear" to remove the password else click on "No, keep it!" to abort the operation.

Page 50

ThinC–VAULT

Reassign Partition

Once the partition is assigned to the user, the admin can reassign the partition to another user without deleting the user’s fingerprints.

• To reassign the partition, select the partition and click on Reassign. The tool prompts the user

to confirm the reassigning the partition, click on "Yes, reassign” and select the user/group from the drop-down and click on Add Access else click on No, keep it to discard the changes.

Page 51

ThinC–VAULT

• After successfully modifying the partition access rights, the tool displays a prompt "Assign

Partition User successful".

Page 52

ThinC–VAULT

Binding

Binding a security function that couples ThinC-VAULT device to given computer (Laptop/Desktop), IP address, MAC address, Network Binding. Adding Computer will trigger and enable the binding security function in the device. Admin has the flexibility of activating multiple binding rules however when a Network Binding rule is enabled, rest of the rules can't be activated for the connected ThinC-VAULT device. ThinC-VAULT device has the capability of combination of IP, MAC and PC Binding can be combined as a single rule or can work independently. Admin can add upto 10 Binding rule to any given ThinC-VAULT device.

PC Binding

It’s a security function that binds ThinC-VAULT device to given computer (Laptop/Desktop). If any ThinC-VAULT is binded to computer then it can only be used in that computer and it does not work / function with any other computer machines. Adding Computer will trigger and enable the binding security function in the device.

Adding PC/Laptop to ThinC-VAULT Binding list To enable bindings, navigate to Binding tab. The bindings tab lists all the available Binding features. Check the checkbox PC Binding and the tool will automatically read the computers name and populate the name under PC Name. Click on Add and a pop up warning window will be displayed requesting the permission to add the binding rule, choose "Yes, Add" and "Cancel" to abort.

Page 53

ThinC–VAULT

After successfully adding the computer to Device Binding Rule list the, tool displays a notification stating "Binding rule has been added successfully" message and the screen would get updated.

Page 54

ThinC–VAULT

To add a different system to the binding list, click on the toggle the slider "Other PC" and enter the PC/Laptop name and PC Fingerprint Value obtained from the ThinC SystemID Generator ID tool and click on Add.

Removing PC/Laptop from ThinC-VAULT Binding list

In the Device Binding section click on to delete the selected PC from the Binding Rules. Click on "Delete" to proceed with the deletion or click on "Cancel" to abort the operation.

After successful deletion of the device from the binding list "Delete computer from device successful" notification will be displayed by the tool.

Page 55

ThinC–VAULT

Deleting the computer will unbound all the bound partitions and also removes the computer

binding.

Binding ThinC-VAULT to PC/Laptop

After adding the PC/Laptop to the Binding list, check the check-box under Device Binding section to bind the computer to ThinC-VAULT device. Click on "Bind" to proceed with the Binding or click on "Cancel" to abort the operation.

After successfully adding the computer to the binding list the, tool displays a notification stating "Computer has been bound to the device successfully."

Page 56

ThinC–VAULT

Unbinding ThinC-VAULT from PC/Laptop

In the Device Binding section click on to delete the selected PC from the binding list. Click on "Yes, Unbind" to proceed with the unbinding or click on "No, keep" to abort the operation.

• After successful unbinding the tool will display a notification stating "Binding rule has been

deactivated successfully".

Page 57

ThinC–VAULT

IP Binding

It’s an security function that binds ThinC-VAULT device to given IP address. If any ThinC-VAULT is binded to the IP address, then it can only be used in a computer with that IP address and it does not work / function with any other IP based PC/Laptops. Adding IP will trigger and enable the binding security function in the device.

Adding IP Address to ThinC-VAULT Binding list To enable Add IP Address to the binding list, navigate to Binding tab. The bindings tab lists all the available Binding features. Check the checkbox IP Binding and the tool will provide a text area to enter the IP Address of the system that needs to be binded. Click on Add and a pop-up warning window will be displayed requesting the permission to add the binding rule, choose "Yes, Add" and "Cancel" to abort.

Page 58

ThinC–VAULT

After successfully adding the rule to Device Binding Rule list the, tool displays a notification stating "Binding rule has been added successfully" message and the screen would get updated.

Removing PC/Laptop from ThinC-VAULT Binding list

In the Device Binding Rule section click on to delete the selected IP Address from the Binding rules. Click on "Delete" to proceed with the deletion or click on "Cancel" to abort the operation.

Page 59

ThinC–VAULT

After successful deletion of the device from the binding list "Binding rule has been deleted successfully" notification will be displayed by the tool.

Deleting the computer will unbound all the bound partitions and also removes the computer

binding.

Binding ThinC-VAULT to IP Address After adding the IP Address to the Binding list, check the check-box under Device Binding Rules section to bind the IP address to ThinC-VAULT device. Click on "Yes, Bind" to proceed with the Binding or click on "Cancel" to abort the operation.

Page 60

ThinC–VAULT

After successfully adding the IP Address to the binding list the, tool displays a notification stating "Binding rule has been activated successfully."

Unbinding ThinC-VAULT from IP Address In the Device Binding section click on to delete the selected PC from the binding list. Click on

"Yes, Unbind" to proceed with the unbinding or click on "No, keep" to abort the operation.

Page 61

ThinC–VAULT

• After successful unbinding the tool will display a notification stating, "Binding rule has been

deactivated successfully".

MAC Binding

It’s a security function that binds ThinC-VAULT device to a computer using the MAC. If any ThinCVAULT is binded to a computers MAC address, then it can only be used in a computer with that MAC address and it does not work / function with any other computer machines. Adding MAC address will trigger and enable the binding security function in the device.

Page 62

ThinC–VAULT

Adding MAC Address to ThinC-VAULT Binding list To add the MAC Address to the binding list, navigate to Binding tab. The bindings tab lists all the available Binding features. Check the checkbox MAC Binding and enter the MAC address of the computer that needs to be added. Click on Add and a pop-up warning window will be displayed requesting the permission to add the binding rule, choose "Yes, Add" and "Cancel" to abort.

After successfully adding the MAC address to Device Binding Rule list the, tool displays a notification stating "Binding rule has been added successfully" message and the screen would get updated.

Page 63

ThinC–VAULT

Removing MAC Address from ThinC-VAULT Binding list

In the Device Binding section click on to delete the selected MAC Address from the Binding list. Click on "Delete" to proceed with the deletion or click on "Cancel" to abort the operation.

After successful deletion of the device from the binding list "Binding rule has been deleted successfully" notification will be displayed by the tool.

Page 64

ThinC–VAULT

Deleting the computer will unbound all the bound partitions and also removes the computer

binding.

Binding MAC address to ThinC-VAULT

After adding the MAC Address to the computer list, check the check-box under Device Binding section to bind the computer to ThinC-VAULT device. Click on "Bind" to proceed with the Binding or click on "Cancel" to abort the operation.

After successfully adding the MAC Address to the binding list, the tool displays a notification stating "Binding rule has been activated successfully."

Page 65

ThinC–VAULT

Unbinding MAC Address from ThinC-VAULT In the Device Binding section click on to delete the selected PC from the binding list. Click on

"Yes, Unbind" to proceed with the unbinding or click on "No, keep" to abort the operation.

• After successful unbinding the tool will display a notification stating "Binding rule has been

deactivated successfully".

Page 66

ThinC–VAULT

Network Binding

It’s a security function that binds ThinC-VAULT device to a computer using the Network address range and Subnet Mask. If any ThinC-VAULT is binded to the Network range then it can only be used in a computer with in the network range and it does not work / function with any other computer machines. Adding MAC address will trigger and enable the binding security function in the device.

Adding Network information to ThinC-VAULT Binding list To add a network range to the binding list, navigate to Binding tab. The bindings tab lists all the available Binding features. Check the checkbox PC Binding and enter the Network Address and Subnet Mask. Click on Add and a pop-up warning window will be displayed requesting the permission to add the binding rule, choose "Yes, Add" and "Cancel" to abort.

Page 67

ThinC–VAULT

After successfully adding the Network Address to Device Binding Rule list the, tool displays a notification stating "Binding rule has been added successfully" message and the screen would get updated.

Removing Network information from ThinC-VAULT Binding list

In the Device Binding section click on to delete the selected Network Address from the Binding list. Click on "Delete" to proceed with the deletion or click on "Cancel" to abort the operation.

Page 68

ThinC–VAULT

After successful deletion of the Network Address from the binding list "Delete computer from device successful" notification will be displayed by the tool.

Deleting the computer will unbound all the bound partitions and also removes the computer

binding.

Binding ThinC-VAULT to Network

After adding the Network Address to the binding list, check the check-box under Device Binding section to bind the Network Address to ThinC-VAULT device. Click on "Bind" to proceed with the Binding or click on "Cancel" to abort the operation.

Page 69

ThinC–VAULT

After successfully adding the Network Address to the binding list the, tool displays a notification stating "Binding rule has been activated successfully."

Unbinding ThinC-VAULT from Network In the Device Binding section click on to delete the selected Network Address from the binding

list. Click on "Yes, Unbind" to proceed with the unbinding or click on "No, keep" to abort the operation.

Page 70

ThinC–VAULT

• After successful unbinding the tool will display a notification stating "Binding rule has been

deactivated successfully".

Page 71

ThinC–VAULT

Operating ThinC Device in Microsoft® Windows®

ThinC-VAULT by default creates partitions and allocates storage space with in the device. After creating the partition using the tool, the partitions must be formatted as per choice using respective OS formatting tools. This section of the document explains typical procedure to format (initialize and erase) partitions in Microsoft Windows and Apple macOS.

Only Read-Write access rights assigned partition can be formatted. The partitions with Read

/ Write access rights can be formatted. In case there is an error in formatting partitions kindly recheck assigned access rights.

• Connect ThinC-VAULT device and authenticate to automatically initialize the drive. After

initialization the partitions associated with authenticated user will be enumerated to OS.

• Goto File Explorer / Windows Explorer and select the drive to be formatted.

Alternatively drive can be managed by opening Disk Management application.

• Right click on the unformatted partition and choose "Format.." from the list of options.

Page 72

ThinC–VAULT

Typically Microsoft Windows pops up the below screen requesting the user to format the

drive before using the partition.

The drive name will be different according to the device you are using. For instance, if your

device is displayed as E: in your computer, the error message will be “You need to format the disk

in drive E: before you can use it”.

• Enter required name for the partition and then select disk file format and choose the

allocation unit size.

To avoid confusion, it is suggested to enter the same name that is mentioned in ThinC Manager tool while creating the partition.

Choose the file system NTFS - FAT32 - exFAT or default option

Page 73

ThinC–VAULT

Bad sectors will be scanned when “Quick Format” check-box is checked. Select the “Quick Format” check-box will not scan for bad sectors.

• Once necessary options are selected, click the "Start" to begin formatting the drive. Once the

formatting is completed, a message will be displayed on the screen. Click OK when prompted.

All pictures shown in this document are for illustration purpose only. Actual pictures may

vary with different operating systems.

Alternate procedure to format the drive using Disk Management

• Disk Management can be opened by typing diskmgmt.msc in the Run dialog box or the Start

menu.

• Right-click on the disk and choose Format...

An unformatted drive will show RAW disk format.

Page 74

ThinC–VAULT

• Enter required name for the partition and then select disk file format and choose the

allocation unit size

• Select the check box Perform a quick format and click "OK" to apply the format operation.

Choose the file system as default or NTFS - FAT32 - exFAT

• Click on "Ok" to continue formatting and "Cancel" the formatting.

Formatting the drive can take few seconds to few minutes, depending on the size of the

volume.

For Partitions with PIN based access control, it is mandatory to unlock the partition and then perform formatting process. Refer to the following brief steps to quickly unlock, for detailed procedure kindly follow steps provided in Partition Creation with PIN section of this document.

• Launch ThinC Agent tool. Click on the partition tab, select the required partition and click on

"Unlock Partition PIN".

Page 75

ThinC–VAULT

• Enter the partition PIN and click on Unlock to enable the partition in explorer