iStorage datAshur Personal Manual
User Manual
personal
personal
Remember to save your PIN in a safe place.
If lost or forgotten, there is no way to access the drive.
If you are having difficulty using your datAshur Personal® drive please contact our technical department at
email address - support@istorage-uk.com or by phone on +44 (0) 20 8991 6260.
www.istorage-uk.com
iStorage datAshur Personal
®
Manual – v 31
#1
personal
Copyright © iStorage Limited 2014. All rights reserved.
Windows™ is a registered trademark of Microsoft Corporation.
All other trademarks and copyrights referred to are the property of their respective owners.
Distribution of modied versions of this document is prohibited without the explicit permission of the copyright holder.
Distribution of the work or derivative work in any standard (paper) book form for commercial purposes is prohibited
unless prior permission is obtained from the copyright holder.
DOCUMENTATION IS PROVIDED AS IS AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND
WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE
OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE
LEGALLY INVALID.
Manual – v 31
®
N30732
iStorage datAshur Personal® is developed and manufactured by
iStorage Ltd. and is based on DataLock® technology licensed from
iStorage datAshur Personal
All trademarks and brand names are the
property of their respective owners
ClevX, LLC
#2
www.istorage-uk.com
personal
Table of Contents
Introduction.............................................................................................................................. 4
Package contents ..................................................................................................................... 4
Layout ...................................................................................................................................... 5
LED indicators and their actions............................................................................................... 5
Customer delivery .................................................................................................................... 5
How to change the User PIN .................................................................................................... 6
How to create a New User PIN - when all cryptographic parameters have been zeroed ............ 6
Unlocking the drive with the User PIN ...................................................................................... 8
Locking the drive...................................................................................................................... 8
Configuring the Admin PIN ...................................................................................................... 8
How to unlock the drive with the Admin PIN ............................................................................ 10
Changing the Admin PIN.......................................................................................................... 11
Administrator Privilege Commands ......................................................................................... 12
i. Clear the User PIN: ..................................................................................................... 12
ii. Enable write protect - read only mode: ....................................................................... 12
iii. Disable write protect - read only mode: ...................................................................... 12
iv. Show security controller firmware version: ................................................................ 13
How to reset the drive .....................................................................................................14
Configuring the drive with Windows OS after a complete reset ....................................... 14
Configure the drive with Mac OS ....................................................................................20
Brute Force Hacking Detection ........................................................................................ 22
Booting from the datAshur Personal
FAQ’s - Frequently Asked Questions
Technical support & Warranty
.........................................................................................
...............................................................................
...............................................................................
22
23
27
iStorage datAshur Personal
www.istorage-uk.com
#3
®
Manual – v 31
personal
Introduction
Thank you for purchasing the iStorage datAshur Personal® drive, an ultra secure and easy to use,
hardware encrypted USB PIN activated ash drive.
The datAshur Personal® drive uses military grade AES 256-bit CBC hardware encryption, which
encrypts all data stored on the drive in real-time. The datAshur Personal® drive requires no software
and is OS and host independent.
The datAshur Personal® drive
incorporates a rechargeable battery allowing the user to enter a 7-15
digit PIN (Personal Identication Number) onto the on-board keypad before connecting the drive to a
USB port.
Should the drive be lost or stolen, the user can rest assured that all data held on the
datAshur Personal® drive is safe and cannot be accessed by any unauthorised person.
The datAshur Personal® drive can be congured with both a User and Admin PIN, making it perfect
for corporate and government deployment. As the datAshur Personal® drive is unlocked via the
onboard keypad and not a host computer, it is not vulnerable to software/hardware based key-loggers
or brute force attacks.
Package contents
Manual – v 31
• datAshur Personal® USB ash drive
®
• Quick Start Guide
iStorage datAshur Personal
#4
www.istorage-uk.com
1. Layout
personal
LOCK LED, stand by while the drive is locked
UNLOCK LED, drive is unlocked when ashing
Keypad
Key Button, used to activate the drive and to enter PIN codes
BLUE LED, when solid, the drive is connected to the computer, when
ashing data is being transferred.
2. LED indicators and their actions
When all LEDs are OFF the datAshur Personal
is locked and secure.
blink Drive is unlocked in User Mode solid No User PIN is congured
double
blink
solid Drive is connected to a powered
solid Drive is connected to host computer
blink Data exchange with host computer blink
Drive is unlocked in Admin Mode blink
USB port
and is idle
3. Customer delivery
• datAshur Personal® is shipped with a default User PIN 1-1-2-2-3-3-4-4
• Rechargeable battery installed and charged
• Admin PIN is not set
blink Drive is locked and secure
Accepting User PIN verication when
together
double
blink
illuminate
together
alternately
setting / changing the PIN
Accepting Admin PIN verication when
setting / changing the PIN
Accepting new PIN
Error
iStorage datAshur Personal
www.istorage-uk.com
#5
®
Manual – v 31
personal
4. How to change the User PIN
PIN requirements:
• Must be between 7-15 digits in length
• Must not contain only repetitive numbers e.g. 3-3-3-3-3-3-3
• Must not contain only consecutive numbers e.g. (1-2-3-4-5-6-7),(7-8-9-0-1-2-3-4),(7-6-5-4-3-2-1)
• Drive must NOT be connected to a host
INSTRUCTIONS LED ACTIVITY
Press KEY Button
Enter User PIN to unlock drive
(Factory default PIN 1,1,2,2,3,3,4,4)
and press KEY Button
Press and hold KEY Button for 3 seconds will illuminate together
While illuminated enter New User PIN
and press KEY Button
Re-enter New User PIN
and press KEY Button
Insert datAshur Personal into USB port
Note: If a mistake was made while dening a new PIN or the procedure was aborted,
the drive will retain the old PIN.
will blink together
will illuminate together for approximately
4 seconds and then:
will blink indicating correct PIN entry
will blink in unison
will illuminate and then
change to blinking
N.B.
blink alternately if PIN entry incorrect
blinks if 1st and 2nd entries match
5. How to create a new User PIN
when all cryptographic parameters have been zeroed
All cryptographic parameters (including User PIN and Admin PIN) are zeroed after hacking detection
has been triggered by 10 consecutive failed attempts to unlock, or when the drive has been manually
reset (see section No. 12)
Manual – v 31
®
iStorage datAshur Personal
#6
This state is evident by a solid lit RED LED indicator. It will be necessary to set a New User PIN by
following these instructions.
Once the User PIN has been dened, a new encryption key is generated using the on-board random
number generator.
Conguring a New User PIN overleaf
www.istorage-uk.com
personal
5. How to create a new User PIN - continued
PIN requirements:
• Must be between 7-15 digits in length
• Must not contain only repetitive numbers e.g. 3-3-3-3-3-3-3
• Must not contain only consecutive numbers e.g. (1-2-3-4-5-6-7),(7-8-9-0-1-2-3-4),(7-6-5-4-3-2-1)
• Drive must NOT be connected to a host
INSTRUCTIONS LED ACTIVITY
Press and hold KEY Button for 3 seconds will illuminate together
While are illuminated enter a
New User PIN and press KEY Button
Re-enter New User PIN
and press KEY Button
Insert datAshur Personal into USB port
Note:
It becomes necessary to format
the drive at this point as all
previous data is obscured with the
previous encryption key (including
the le allocation table).
will blink in unison
4 seconds and then:
will blink indicating correct PIN entry
blink alternately if PIN entry incorrect
will illuminate together for approximately
will illuminate in a constant state
A User PIN can only be created when the
RED LED is lit in a constant state (datAshur
Personal® reset) or changed when the
GREEN LED is blinking (datAshur Personal®
unlocked).
Neither User nor Admin PIN can be created
while the drive is connected to a host computer.
www.istorage-uk.com
iStorage datAshur Personal
®
Manual – v 31
#7
personal
6. Unlocking the drive with User PIN
All data stored on the drive is encrypted using AES 256-bit CBC encryption. In order to access, the
drive must rst be unlocked. A locked drive is not accessible by the host computer.
INSTRUCTIONS LED ACTIVITY
Press KEY Button
Enter User PIN to unlock drive
(Factory default PIN 1,1,2,2,3,3,4,4)
and press KEY Button
Note that at this point the
following occurs:
Insert your datAshur Personal into USB port
Note: Once unlocked, the GREEN LED will blink for 30 seconds, within which time
the drive needs to be connected to a USB port.
If no connection has been detected within 30 seconds the drive will lock.
7. Locking the drive
The datAshur Personal® drive automatically locks when unplugged from the host computer or power
to the USB port is turned off.
will blink together
will illuminate together for
approximately 4 seconds and then:
will blink indicating correct PIN entry
will blink indicating the correct PIN entry
will blink indicating the incorrect PIN entry
will illuminate in a constant state
will illuminate and icker
8. Configuring the Admin PIN
PIN requirements:
• Must be between 7-15 digits in length
• Must not contain only repetitive numbers e.g. 3-3-3-3-3-3-3
• Must not contain only consecutive numbers e.g. (1-2-3-4-5-6-7),(7-8-9-0-1-2-3-4),(7-6-5-4-3-2-1)
• Drive must NOT be connected to a host
Manual – v 31
®
iStorage datAshur Personal
#8
If a User PIN exists, the datAshur Personal® drive must be unlocked with the User’s PIN rst.
If the drive is in a reset state (solid RED indicator), an Admin PIN can be set at any time.
For details please see the table overleaf.
www.istorage-uk.com
personal
The following table depicts the possible actions when the drive is in different states:
User PIN Admin PIN Possible Actions
Can set either User or Admin PIN
NOT SET NOT SET
Cannot access drive until User or Admin PIN is dened
Can change User PIN when unlocked as User
SET NOT SET
NOT SET SET
SET SET
The drive has to be unlocked in user mode in order to proceed with conguring an Admin PIN.
It is set by following the instructions below:
INSTRUCTIONS LED ACTIVITY
Can set Admin PIN when unlocked with User PIN
Can access data when unlocked as User
Can set User PIN when drive is locked
Can unlock drive with Admin PIN
Can change Admin PIN when unlocked as Administrator
Can perform Administrator commands
Can unlock drive with either User or Admin PIN
Can change User PIN when unlocked as User
Can change Admin PIN when unlocked as Administrator
Double press the KEY Button
and
hold on the 2nd press for 3 seconds
Enter the New Admin PIN
and press KEY Button
Re - Enter the New Admin PIN
and press KEY Button
Note that at this point the
following occurs:
Insert your datAshur Personal into USB port
Note: A double blink indicates the drive is unlocked in Admin mode.
A single blink indicates the drive is unlocked in User mode.
www.istorage-uk.com
will double blink once and then turn solid
will illuminate together for approximately
2 seconds and then:
will double blink indicating correct PIN entry
will blink alternately if PIN entry incorrect
will illuminate in a constant state
will double blink if correct PIN entry or
will blink alternately if PIN entry incorrect
will double blink if 1st and 2nd entries match
will illuminate and icker
iStorage datAshur Personal
®
Manual – v 31
#9
Loading...