iStorage FIPS 140-2 User Manual

FIPS 140-2 LEVEL 3

English User Manual - Table of Contents ...............................................4

Deutsch Benutzerhandbuch - Inhaltsverzeichnis ...................................32

iStorage diskAshur PRO

Français Manuel d’utilisation - Table des matières ...............................60

www.istorage-uk.com

Manual / Handbuch / Manuel – v5.3F

User Manual

HDD & SSD Range

Manual / Handbuch / Manuel – v5.3F

Please make sure you remember your PIN (password), without it there is no way to access the data on the drive.

If you are having difﬁculty using your diskAshur PRO2 drive please contact our technical department

iStorage diskAshur PRO

by email - support@istorage-uk.com or by phone on +44 (0) 20 8991 6260.

www.istorage-uk.com

All other trademarks and copyrights referred to are the property of their respective owners. Distribution of modiﬁed versions of this document is prohibited without the explicit permission of the copyright holder. Distribution of the work or derivative work in any standard (paper) book form for commercial purposes is prohibited unless prior permission is

obtained from the copyright holder. DOCUMENTATION IS PROVIDED AS IS AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND

WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID

All trademarks and brand names are the property of their respective owners

Trade Agreements Act (TAA) Compliant

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

www.istorage-uk.com

Table of Contents

Introduction ....................................................................................................................................5

Box contents ..................................................................................................................................5

1. diskAshur PRO2 LED States .....................................................................................................6

2. How to use the diskAshur PRO2 for the ﬁrst time .....................................................................6

3. Unlocking the diskAshur PRO2 ............................................................................................... 7

4. Locking the diskAshur PRO2 ...................................................................................................7

5. Entering Admin Mode .............................................................................................................7

6. Changing the Admin PIN .........................................................................................................8

7. Setting a User PIN Policy ........................................................................................................9

8. How to check the User PIN Policy ...........................................................................................10

9. Adding a new User PIN in Admin Mode .................................................................................. 11

10. Changing the User PIN in Admin Mode ..................................................................................11

11. Deleting the User PIN in Admin Mode ....................................................................................11

12. Set Read-Only in Admin Mode ................................................................................................ 12

13. Enable Read/Write in Admin Mode .........................................................................................12

14. How to create a Self-Destruct PIN ...........................................................................................12

15. How to delete the Self-Destruct PIN ........................................................................................13

16. How to Unlock with the Self-Destruct PIN ............................................................................... 13

17. How to Create an Admin PIN after a Brute Force attack or Reset ............................................14

18. Setting the Unattended Auto-Lock Clock ................................................................................. 14

19. Turn off the Unattended Auto-Lock Clock ................................................................................ 15

20. How to check the Unattended Auto-Lock Clock ........................................................................ 15

21. How to Unlock diskAshur PRO2 with User PIN ........................................................................16

22. Changing the User PIN in User Mode .....................................................................................16

23. Set Read-Only in User Mode ................................................................................................... 17

24. Enable Read/Write in User Mode ............................................................................................17

25. Brute Force Protection .............................................................................................................18

26. How to perform a complete reset ............................................................................................ 18

27. Initialising and formatting the diskAshur PRO2 .......................................................................19

28. diskAshur PRO2 Setup for Mac OS ......................................................................................... 21

29. diskAshur PRO2 Setup for Linux (Ubuntu 17.10) ....................................................................23

30. Hibernating, Suspending or Logging off from the Operating System .....................................26

Manual / Handbuch / Manuel – v5.3F

31. How to check Firmware in Admin Mode .................................................................................. 26

32. How to check Firmware in User Mode ..................................................................................... 27

33. Technical Support ...................................................................................................................28

34. Warranty and RMA information ...............................................................................................28

iStorage diskAshur PRO

www.istorage-uk.com

Introduction

Tamper Proof and Evident Design

DESK LOCK SLOT CONNECTION

LED LIGHTS

- Standby State/Locked

- User Mode/Unlocked

- Admin Mode

Alphanumeric Keypad

LOCK SHIFT UNLOCK Integrated USB 3.1 Cable

The diskAshur PRO2 is an easy to use, ultra-secure, hardware encrypted portable drive with capacities of up to 5TB. Simply connect the integrated USB 3.1 cable to any computer and enter a 7-15 digit PIN, if the correct PIN is entered, all data stored on the drive will be decrypted and accessible. To lock the drive and encrypt all data, simply eject the diskAshur PRO2 from the host computer and the entire contents of the drive will be encrypted (full disk encryption) using military grade AES 256-bit hardware encryption (XTS mode). If the drive is lost or stolen and an incorrect PIN is entered 15 consecutive times, the drive will reset, the encryption key will be deleted and all data previously stored on the drive will be lost forever.

One of the unique and underlying security features of the GDPR compliant diskAshur PRO2 is the dedicated hardware based secure microprocessor (Common Criteria EAL4+ ready), which employs built-in physical protection mechanisms designed to defend against external tamper, bypass attacks and fault injections. Unlike other solutions, the diskAshur PRO2 reacts to an automated attack by entering the deadlock frozen state, which renders all such attacks as useless. In plain and simple terms, without the PIN there’s no way in!

Box Contents

1. diskAshur PRO2 Drive with integrated USB Cable

2. Elegant Travel Case

3. Quick Start Guide

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

www.istorage-uk.com

1. diskAshur PRO2 LED States

When the diskAshur PRO2 is plugged in, there are three possible behaviours for the LED indicators as shown in the table below.

RED GREEN BLUE diskAshur PRO2 State

Solid Off Off Factory Reset Solid Solid Solid Brute Force Solid Off Off Standby

1. In Factory Reset State, the drive is waiting for the operation to set up an Admin PIN.

2. In Brute Force state, the drive is waiting for an operation to get more PIN entry attempts.

3. In Standby state, the drive is waiting for an operation to unlock the drive, or enter Admin mode, or reset the drive.

2. How to use the diskAshur PRO2 for the ﬁrst time

The diskAshur PRO2 is shipped with a default Admin PIN of 11223344 and although it can be used straight out of the box with the default Admin PIN, for security reasons we by following the instructions under section 6

‘Changing the Admin PIN’.

highly recommend a new Admin PIN be created immediately

Please follow the instructions in the table below to unlock the diskAshur PRO2 for the ﬁrst time with the default Admin PIN.

Instructions - ﬁrst time use LED LED State

1. Connect the diskAshur PRO

Standby State

2. In Standby State (solid

RED LED), press and hold

down “UNLOCK + 1” buttons

to a USB port -

RED LED will be solid awaiting PIN entry

Solid

RED LED will change to blinking GREEN

and BLUE LEDs

GREEN and BLUE LEDs blink rapidly together

3. Enter the Admin PIN (default - 11223344) and press “UNLOCK” button

4. Press the “UNLOCK” button once to unlock

diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

and access drive contents

Note: Once the diskAshur PRO2 has been successfully unlocked, the GREEN LED will remain on and in a solid

state and will only blink when data is being transferred. It can be locked down immediately by pressing the ‘LOCK’ button once or by (

strongly recommended) clicking the ‘Safely Remove Hardware/Eject’ icon within your

for a few seconds then to a solid ﬁnally a solid diskAshur PRO

BLUE LED will change to a blinking

Solid

BLUE LED indicating the

is in “Admin Mode”

GREEN and ﬁnally solid GREEN LED indicating

the diskAshur PRO2 is unlocked

GREEN and

operating system.

iStorage diskAshur PRO

www.istorage-uk.com

3. Unlocking the diskAshur PRO

The diskAshur PRO2 can be unlocked with either an Admin or User PIN whilst in standby state (solid RED LED).

1. To unlock as the Administrator, in Standby state (

BLUE LEDs will blink together), next, enter the Admin PIN and press the “UNLOCK” button, LED will change to a solid

and

RED LED) press and hold down both ‘UNLOCK + 1’ buttons (GREEN

BLUE and ﬁnally press the ‘UNLOCK’ button again - LED changes to GREEN indicating the drive is unlocked.

2. To unlock as a User, in standby state (RED LED) ﬁrst press the “UNLOCK” button (all LEDs, blink on and off) and then enter the User PIN and press the “UNLOCK” button again.

3. If correct User PIN is entered, both GREEN and BLUE LEDs will blink alternately and then return to a solid GREEN LED.

4. If correct Admin PIN is entered, both GREEN and BLUE LEDs will rapidly blink together, then to a solid BLUE and then to the unlocked state, a solid GREEN LED.

5. If correct PIN is entered, the drive displays as “iStorage diskAshur PRO2 USB Device” under “Computer Management/ Device Manager”.

In an unlocked state (GREEN LED), there are two possible behaviours for the LED indicators, shown in the table below.

RED GREEN BLUE diskAshur PRO

Off Off

4. Locking the diskAshur PRO

Solid Off No data transfer Blink Off Data transfer in progress

To lock the drive, press the “LOCK” button once or by clicking the ‘Safely Remove Hardware/Eject’ icon within your operating system. If data is still being written to the drive, please wait until all data has been written to the drive before pressing the ‘LOCK’ button or safely ejecting from the Operating System. When the unattended Auto-Lock timeout is activated, the drive will automatically lock after a predetermined amount of time.

Note: The diskAshur PRO2 cannot be recognized by the operating system in standby state.

5. Entering Admin Mode

To enter the Admin Mode, do the following:

1. In standby state (solid RED LED), press and hold down “UNLOCK + 1” buttons

2. Enter the Admin PIN (default - 11223344) and press “UNLOCK” button

Solid

RED LED will change to blinking GREEN

and BLUE LEDs

GREEN and BLUE LEDs blink rapidly together

for a few seconds then to a solid ﬁnally a solid diskAshur PRO

BLUE LED indicating the

is in “Admin Mode”

GREEN and

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

To exist Admin mode, press the “LOCK” button.

www.istorage-uk.com

6. Changing the Admin PIN

PIN requirements:

• Must be between 7-15 digits in length

• Must not contain only repetitive numbers, e.g. (3-3-3-3-3-3-3)

• Must not contain only consecutive numbers, e.g. (1-2-3-4-5-6-7), (7-8-9-0-1-2-3-4), (7-6-5-4-3-2-1)

Password Tip: You can create a memorable word, name, phrase or any other Alphanumerical PIN combination

by simply pressing the key with the corresponding letters on it.

Examples of these types of Alphanumerical PINs are:

• For “ 7 (

Password” you would press the following keys:

pqrs) 2 (abc) 7 (pqrs) 7 (pqrs) 9 (wxyz) 6 (mno) 7 (pqrs) 3 (def)

• For “iStorage” you would press: 4 (gh

i) 7 (pqrs) 8 (tuv) 6 (mno) 7 (pqrs) 2 (abc) 4 (ghi) 3 (def)

Using this method, long and easy to remember PINs can be created.

Note: The SHIFT key can be used for additional combinations. SHIFT + 1 is a separate value than just 1.

To create a PIN using additional combinations, press and hold down the SHIFT button whilst entering your 7-15 digit PIN. e.g. SHIFT + 26756498.

To change the Admin PIN, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode (solid

BLUE LED) proceed with the following steps.

1. In Admin mode, press and hold down “UNLOCK + 2” buttons

2. Enter NEW Admin PIN and press “UNLOCK” button

Manual / Handbuch / Manuel – v5.3F

3. Re-enter the NEW Admin PIN and press “UNLOCK” button

Solid

BLUE LED will change to blinking GREEN

and solid BLUE LEDs

Blinking switch to a single back to blinking

GREEN and solid BLUE LEDs will

GREEN LED blink and then

GREEN and solid BLUE LEDs

Blinking GREEN and solid BLUE LEDs change to a rapidly blinking solid

BLUE LED indicating the Admin PIN has

BLUE LED and ﬁnally to a

been successfully changed

iStorage diskAshur PRO

www.istorage-uk.com

7. Setting a User PIN Policy

The Administrator can set a restriction policy for the User PIN. This policy includes setting the minimum length of the PIN (from 7 to 15 digits), as well as requiring or not the input of a 'Special Character'. The “Special Character” functions as 'Shift + digit'.

To set a User PIN Policy (restrictions) you will need to enter 3 digits, for instance '091', the ﬁrst two digits (09) indicate the minimum PIN length (in this case, 9) and the last digit (1) denotes that a 'Special Character' must be used, in other words 'Shift + digit'. In the same way, a User PIN Policy can be set without the need of a 'Special Character', for instance '120', the ﬁrst two digits (12) indicate the minimum PIN length (in this case,12) and the last digit (0) meaning no Special Character is required.

Once the Administrator has set the User PIN Policy, for instance '091', a new User PIN will need to be created. If the Administrator creates the User PIN as '247688314' with the use of a 'Special Character' (Shift+digit), this can be placed anywhere along your 7-15 digit PIN during the process of creating the User PIN as shown in the examples below.

A. 'Shift + 2', '4', '7', '6', '8', '8', '3', '1', '4', B. '2', '4', 'Shift + 7', '6', '8', '8', '3', '1', '4', C. '2', '4', '7', '6', '8', '8', '3', '1', 'Shift + 4',

Note:

• If a 'Special Character' was used during the creation of the User PIN, for instance, example 'B' above, then the drive can only be unlocked by entering the PIN with the 'Special Character' entered precisely in the order created, as per example 'B' above - (‘2’, ‘4’, ‘Shift + 7’, ‘6’, ‘8’, ‘8’, ‘3’, ‘1’, ‘4’).

• Users are able to change their PIN but are forced to comply with the set 'User PIN Policy' (restrictions), if and when applicable.

• Setting a new User PIN Policy will automatically delete the User PIN if one exists.

• This policy does not apply to the ‘Self-Destruct PIN’. The complexity setting for the Self-Destruct PIN and Admin PIN is always 7-15 digits, with no special character required.

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

www.istorage-uk.com

To set a User PIN Policy, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode (solid

BLUE LED) proceed with the following steps.

1. In Admin mode, press and hold down “UNLOCK + 7” buttons

2. Enter your 3 digits, remember the ﬁrst two digits denote minimum PIN length and last digit (0 or 1) whether or not a special character has been used.

3. Press the "SHIFT" (

) button once

Solid

BLUE LED will change to blinking GREEN

and solid BLUE LEDs

Blinking

GREEN and solid BLUE LEDs will

continue to blink

Blinking a solid

GREEN and Solid BLUE will change to

GREEN LED and ﬁnally to a solid BLUE

LED indicating the User PIN Policy has been successfully set.

8. How to check the User PIN Policy

The Administrator is able to check the User PIN Policy and can identify the minimum PIN length restriction and whether or not the use of a Special Character has been set by noting the LED sequence as described below.

To check the User PIN Policy, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode (solid

BLUE LED) proceed with the following steps.

1. In Admin mode press and hold down SHIFT (

) + 7

Solid

BLUE LED will change to blinking GREEN

BLUE LEDs

and

2. Press the “UNLOCK” button and the following happens;

a. All LED’s (

RED LED blink equates to ten (10) units of a PIN.

b. A c. Every

BLUE blink indicates that a 'Special Character' was used.

d. A e. All LED’s ( f. LEDs return to solid

RED, GREEN & BLUE) become solid for 1 second.

GREEN LED blink equates to a single (1) unit of a PIN

RED, GREEN & BLUE) become solid for 1 second.

BLUE

The table below describes the LED behaviour whilst checking the User PIN Policy, for instance if you have set a 12 digit User PIN with the use of a Special Character, the

BLUE LED blink indicating that a Special Character must be used.

single

Manual / Handbuch / Manuel – v5.3F

PIN Description 3 digit Setup RED GREEN BLUE

RED LED will blink once (1) and the GREEN will blink twice (2) followed by a

12 digit PIN with use of a Special Character 121 1 Blink 2 Blinks 1 Blink 12 digit PIN with NO Special Character used 120 1 Blink 2 Blinks 0 9 digit PIN with use of a Special Character 091 0 9 Blinks 1 Blink

iStorage diskAshur PRO

9 digit PIN with NO Special Character used 090 0 9 Blinks 0

#10

www.istorage-uk.com

9. Adding a new User PIN in Admin Mode

To add a New User, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode

BLUE LED) proceed with the following steps.

(solid

1. In Admin mode, press and hold down “UNLOCK + 3” buttons

2. Enter New User PIN and press “UNLOCK” button

3. Re-enter the New User PIN and press “UNLOCK” button

Solid

BLUE LED will change to blinking GREEN

and solid BLUE LEDs

Blinking switch to a single back to blinking

GREEN and solid BLUE LEDs will

GREEN LED blink and then

GREEN and solid BLUE LEDs

GREEN LED rapidly blinks for a few seconds

then changes to a solid

BLUE LED indicating the

User PIN has been successfully created

10. Changing the User PIN in Admin Mode

To change an existing User PIN, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode (solid

1. In Admin mode, press and hold down “UNLOCK + 3” buttons

2. Enter New User PIN and press “UNLOCK” button

3. Re-enter the New User PIN and press “UNLOCK” button

BLUE LED) proceed with the following steps.

Solid

BLUE LED will change to blinking GREEN

and solid BLUE LEDs

Blinking switch to a single back to blinking

GREEN and solid BLUE LEDs will

GREEN LED blink and then

GREEN and solid BLUE LEDs

GREEN LED rapidly blinks for a few seconds

then changes to a solid

BLUE LED indicating the

User PIN has been successfully changed

11. Deleting the User PIN in Admin Mode

To delete a User PIN, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode

BLUE LED) proceed with the following steps.

(solid

1. In Admin mode, press and hold down “SHIFT (

2. Press and hold down “SHIFT (

) + 3” buttons

again.

Solid

www.istorage-uk.com

BLUE LED will change to blinking RED

LED Blinking

LED and then to a solid

RED LED will change to solid RED

BLUE LED indicating

the User PIN was successfully deleted

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

#11

12. Set Read-Only in Admin Mode

Important: If data has just been copied to the diskAshur PRO2, make sure to properly disconnect the drive

ﬁrst by clicking ‘Safely Remove Hardware/Eject’ the diskAshur PRO2 from the Operating System before reconnecting and setting the diskAshur PRO2 as ‘Read-Only/Write-Protect’.

When Admin writes content to the diskAshur PRO2 and restricts access to read-only, the User cannot change this setting in User mode. To set the diskAshur PRO2 to Read-Only, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode (solid

BLUE LED) proceed with the following steps.

1. In Admin mode, press and hold down “7 + 6” buttons. (7=

Read + 6=Only)

Solid

BLUE LED will change to blinking GREEN

BLUE LEDs

and

GREEN and BLUE LEDs will change to a solid

2. Release 7+6 buttons and press “UNLOCK”

GREEN LED and then to a solid BLUE LED

indicating the drive is conﬁgured as Read-Only

13. Enable Read/Write in Admin Mode

To set the diskAshur PRO2 to Read/Write, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode (solid

1. In Admin mode, press and hold down “7 + 9” buttons. (7=

Read + 9=Write)

BLUE LED) proceed with the following steps.

Solid

BLUE LED will change to blinking GREEN

BLUE LEDs

and

GREEN and BLUE LEDs change to a solid

2. Release 7+9 buttons and press “UNLOCK”

GREEN LED then to a solid BLUE LED

indicating the drive is conﬁgured as Read/Write

14. How to create a Self-Destruct PIN

The self-destruct feature allows you to set a PIN which can be used to perform a crypto-erase on the entire drive. When used, the self-destruct PIN will delete ALL data, Admin/User PINs and then unlock the drive. Activating this feature will cause the Self-Destruct PIN to become the new User PIN and the diskAshur PRO2 will need to be partitioned and formatted before any new data can be added to the drive.

To set the Self-Destruct PIN, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode (solid BLUE LED) proceed with the following steps.

1. In Admin mode, press and hold down “UNLOCK + 6” buttons

Manual / Handbuch / Manuel – v5.3F

2. Create a 7-15 digit Self-Destruct PIN and press the

“UNLOCK” button

Solid

BLUE LED will change to blinking GREEN

and solid

BLUE LEDs

Blinking GREEN and solid BLUE LEDs will switch to a single back to blinking

GREEN LED blink and then

GREEN and solid BLUE LEDs

GREEN LED will rapidly blink for several

3. Re-enter the PIN and press the “UNLOCK” button

iStorage diskAshur PRO

seconds and then changes to a solid BLUE LED to indicate the Self-Destruct PIN has been successfully conﬁgured

#12

www.istorage-uk.com

15. How to Delete the Self-Destruct PIN

To delete the Self-Destruct PIN, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode

BLUE LED) proceed with the following steps.

(solid

1. In Admin mode, press and hold down “SHIFT (

2. Press and hold down “SHIFT (

) + 6” buttons

again

Solid

BLUE LED will change to a blinking RED

LED Blinking

change to a solid

RED LED will become solid and then

BLUE LED indicating the

Self-Destruct PIN was successfully deleted

16. How to Unlock with the Self-Destruct PIN

When used, the self-destruct PIN will delete ALL data, Admin/User PINs and then unlock the drive. Activating this feature will cause the Self-Destruct PIN to become the new User PIN and the diskAshur PRO2 will need to be partitioned and formatted before any new data can be added to the drive.

To activate the Self-Destruct mechanism, the drive needs to be in the standby state (solid

RED LED) and then proceed with the

following steps.

1. In standby state, press the “UNLOCK” button

RED LED switches to all LEDs, RED, GREEN &

BLUE blinking on and off

2. Enter the Self-Destruct PIN and press the “UNLOCK” button

Important: When the Self-Destruct mechanism is activated, all data, the encryption key and the Admin/User

PINs are deleted. The Self-Destruct PIN becomes the User PIN. No Admin PIN exists after the Self-Destruct mechanism is activated. The diskAshur PRO

perform a complete reset

Admin privileges including the ability to create a User PIN.

RED, GREEN and BLUE blinking LEDs will

change to

GREEN and BLUE LEDs alternating

on and off for approximately 15 seconds and ﬁnally shifts to a solid

will need to be reset (see ‘

GREEN LED

How to

’ Section 26, on page 17) ﬁrst in order to create an Admin PIN with full

www.istorage-uk.com

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

#13

17. How to Create an Admin PIN after a Brute Force attack or Reset

It will be necessary after a Brute Force attack or when the diskAshur PRO2 has been reset to create an Admin PIN before the drive can be used. If the drive has been brute forced or reset, the drive will be in a standby state (solid RED LED). to create an Admin PIN proceed with the following steps.

PIN requirements:

• Must be between 7-15 digits in length

• Must not contain only repetitive numbers, e.g. (3-3-3-3-3-3-3)

• Must not contain only consecutive numbers, e.g. (1-2-3-4-5-6-7), (7-8-9-0-1-2-3-4), (7-6-5-4-3-2-1)

Note: The SHIFT key can be used for additional combinations. SHIFT + 1 is a separate value than just 1.

To create a PIN using additional combinations, press and hold down the SHIFT button whilst entering your 7-15 digit PIN. e.g. SHIFT + 26756498.

1. In Standby state, press and hold down “Shift (

) + 1” buttons

2. Enter NEW Admin PIN and press “UNLOCK” button

3. Re-enter the NEW Admin PIN and press “UNLOCK” button

Solid

RED LED will change to blinking GREEN

and solid BLUE LEDs

Blinking switch to a single back to blinking

Blinking change to seconds and then to a solid

GREEN and solid BLUE LEDs will

GREEN LED blink and then

GREEN and solid BLUE LEDs

GREEN LED and solid BLUE LED

BLUE LED rapidly blinking for a few

BLUE LED indicat-

ing the Admin PIN was successfully conﬁgured.

18. Setting the Unattended Auto-Lock Clock

To protect against unauthorised access if the drive is unlocked and unattended, the diskAshur PRO2 can be set to automatically lock after a pre-set amount of time. In its default state, the diskAshur PRO2 Unattended Auto Lock feature is

turned off. The Unattended Auto Lock can be set to activate between 5 - 99 minutes. To set the Unattended Auto Lock, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin

Mode (solid

1. In Admin mode, press and hold down “UNLOCK + 5” buttons

BLUE LED) proceed with the following steps.

Solid BLUE LED will change to blinking GREEN

BLUE LEDs

and

2. Enter the amount of time that you would like to set the Auto-Lock timeout feature for, the minimum time that can be set is 5 minutes and the maximum being 99 minutes (5-99 minutes). For example enter:

Manual / Handbuch / Manuel – v5.3F

05 for 5 minutes 20 for 20 minutes 99 for 99 minutes

3. Press the “SHIFT” (

iStorage diskAshur PRO

) button

Blinking a solid GREEN for a second and then ﬁnally to a solid

GREEN and BLUE LEDs will change to

BLUE LED indicating the Auto-Lock time

out is successfully conﬁgured

#14

www.istorage-uk.com

19. Turn off the Unattended Auto-Lock Clock

To turn off the Unattended Auto Lock, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode (solid

BLUE LED) proceed with the following steps.

1. In Admin mode, press and hold down “UNLOCK + 5” buttons

2. Enter “00” and press the “SHIFT” (

) button

Solid BLUE LED will change to blinking GREEN and

BLUE LEDs

Blinking a solid solid

GREEN and BLUE LEDs will change to

GREEN for a second and then ﬁnally to a

BLUE LED indicating the Auto-Lock time

out has been successfully switched off

20. How to check the Unattended Auto-Lock Clock

The Administrator is able to check and determine the length of time set for the unattended auto-lock clock by simply noting the LED sequence as described on the table at the bottom of this page.

To check the unattended auto-lock, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode (solid

1. In Admin mode press and hold down SHIFT (

BLUE LED) proceed with the following steps.

) + 5

Solid

BLUE LED will change to blinking GREEN

and

BLUE LEDs

2. Press the “UNLOCK” button and the following happens;

a. All LED’s ( b. Each c. Every d. All LED’s ( e. LEDs return to solid

RED, GREEN & BLUE) become solid for 1 second.

RED LED blink equates to ten (10) minutes.

GREEN LED blink equates to one (1) minute.

RED, GREEN & BLUE) become solid for 1 second.

BLUE

The table below describes the LED behaviour whilst checking the unattended auto-lock, for instance if you have set the drive to automatically lock after 26 minutes, the

RED LED will blink twice (2) and the GREEN LED will blink six (6) times.

Auto-Lock in minutes RED GREEN

8 minutes 0 8 Blinks 15 minutes 1 Blink 5 Blinks 26 minutes 2 Blinks 6 Blinks 40 minutes 4 Blinks 0

www.istorage-uk.com

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

#15

21. How to Unlock diskAshur PRO

with User PIN

1. In a standby state (solid RED LED) Press the “UNLOCK” button

RED LED switches to all LEDs, RED, GREEN &

BLUE blinking on and off

RED, GREEN and BLUE blinking LEDs will

GREEN and BLUE LEDs

GREEN LED and

Green LED indicating

2. Enter User PIN and press the “UNLOCK” button

change to alternating then to a rapidly blinking ﬁnally shifts to a solid drive successfully unlocked in User mode

22. Changing the User PIN in User Mode

To change the User PIN, ﬁrst unlock the diskAshur PRO2 with a User PIN as described above in section 21. Once the drive is in User Mode (solid

1. In User mode press and hold down “UNLOCK + 4”

GREEN LED) proceed with the following steps.

Solid

GREEN LED will change to a blinking

GREEN LED and a solid BLUE LED

Blinking GREEN and solid BLUE LEDs will

2. Enter New User PIN and press the “UNLOCK” button

3. Re-enter New User PIN and press the “UNLOCK” button

switch to a single back to blinking

Blinking

GREEN and solid BLUE LEDs will

GREEN LED blink and then

GREEN and solid BLUE LEDs

switch to a rapidly blinking then to a solid

GREEN LED indicating

GREEN LED and

successful User PIN change

Manual / Handbuch / Manuel – v5.3F

iStorage diskAshur PRO

#16

www.istorage-uk.com

23. Set Read-Only in User Mode

Important: If data has just been copied to the diskAshur PRO2, make sure to properly disconnect the drive

ﬁrst by clicking ‘Safely Remove Hardware/Eject’ the diskAshur PRO2 from the Operating System before reconnecting and setting the diskAshur PRO2 as ‘Read-Only/Write-Protect’.

To set the diskAshur PRO2 to Read-Only, ﬁrst enter the “User Mode” as described in section 21. Once the drive is in User Mode (solid

GREEN LED) proceed with the following steps.

1. In User mode, press and hold down “7 + 6” buttons. (7=

Read + 6=Only)

Solid

GREEN LED will change to blinking

GREEN and BLUE LEDs GREEN and BLUE LEDs will change to a solid

2. Release 7+6 buttons and press “UNLOCK”

GREEN LED indicating the drive is conﬁgured

as Read-Only

Note: 1. This setting is activated the next time the drive is unlocked.

2. If a User set the drive as Read-Only, Admin can override it by setting the drive as Read/Write in Admin mode.

3. If Admin set the drive as Read-Only, the User cannot set the drive as Read/Write

24. Enable Read/Write in User Mode

To set the diskAshur PRO2 to Read/Write, ﬁrst enter the “User Mode” as described in section 21. Once the drive is in User Mode (solid

GREEN LED) proceed with the following steps.

1. In User mode, press and hold down “7 + 9” buttons. (7=

Read + 9=Write)

2. Release 7+9 buttons and press “UNLOCK”

Note: 1. This setting is activated the next time the drive is unlocked.

2. If a User set the drive as Read-Only, Admin can override it by setting the drive as Read/Write in Admin mode.

3. If Admin set the drive as Read-Only, the User cannot set the drive as Read/Write

www.istorage-uk.com

GREEN LED will change to blinking

Solid

GREEN and BLUE LEDs GREEN and BLUE LEDs will change to a solid

GREEN LED indicating the drive is conﬁgured

as Read/Write

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

#17

25. Brute Force Protection

If an incorrect PIN is entered 15 (3 x 5 PIN clusters) consecutive times, then all Admin/User PINs, the encryption key and all data will be deleted and lost forever. The diskAshur PRO2 will then need to be formatted and partitioned before it can be reused.

1. If a PIN is entered incorrectly 5 (ﬁve) consecutive times, all LEDs -

RED, GREEN, BLUE will light up and become solid.

2. Unplug the drive and re-plug it into the host to get ﬁve more PIN attempts. If PIN is incorrectly entered 5 more times, (10 in total - 5 from step 1 and 5 from step 2) all LEDs -

3. Unplug the drive, hold down the “SHIFT” button and replug it into the host, all LEDs -

RED, GREEN, BLUE will light up and become solid again.

RED, GREEN, BLUE will light up

and blink together.

4. With all LEDs blinking, enter “47867243” and press the “UNLOCK” button to get 5 ﬁnal attempts.

Caution: After 15 consecutive incorrect PIN entries the Brute Force Defence Mechanism activates and deletes

all Admin/User PINs, the encryption key and data. A new Admin PIN must be created, refer to Section 17 on page 13 on ‘

will also need to be partitioned and formatted before any new data can be added to the drive.

PRO

How to Create an Admin PIN after a Brute Force attack or Reset’, the diskAshur

26. How to perform a complete reset

To perform a complete reset, the diskAshur PRO2 must be in a standby state (solid RED LED). Once the drive is reset then all Admin/User PINs, the encryption key and all data will be deleted and lost forever and the drive will need to be formatted and partitioned before it can be reused.

To reset the diskAshur PRO2 proceed with the following steps.

1. In standby state, press and hold down “0” button until all LEDs blink alternately on and off

2. Press and hold down “2 + 7” buttons until all LEDs become solid for a second and then to a solid

Manual / Handbuch / Manuel – v5.3F

RED LED

Important: After a complete reset a new Admin PIN must be created, refer to Section 17 on page 13 on ‘How to

Create an Admin PIN after a Brute Force attack or Reset

partitioned and formatted before any new data can be added to the drive.

iStorage diskAshur PRO

#18

www.istorage-uk.com

Solid

RED LED will change to all LEDs, RED,

GREEN and BLUE blinking alternately on and

off

RED, GREEN and BLUE alternating LEDs will

change to all solid for a second and then to a solid

RED LED indicating the drive has been

reset

’, the diskAshur PRO2 will also need to be

27. Initialising and formatting the diskAshur PRO2

After a ‘Brute Force Attack’ or a complete reset of the diskAshur PRO2 will delete all data, encryption key and partition settings. You will need to initialise and format the diskAshur PRO2 before it can be used.

To initialise your diskAshur PRO2, do the following:

1. Attach the diskAshur PRO2 to the computer.

2. Create a new Admin PIN - see page 13, section 17, ‘How to create an Admin PIN after a Brute Force attack or reset’.

3. With the diskAshur PRO

Windows 7: Right click Computer and then click Manage and then select Disk Management

in standby state (

RED LED) enter New Admin PIN to unlock (GREEN LED).

Windows 8: Right-click left corner of desktop and select Disk Management Windows 10: Right click on the start button and select Disk Management

5. In the Computer Manage window, click Disk Management. In the Disk Management window, the diskAshur PRO2 is recognised as an unknown device that is uninitialised and unallocated.

Note: If the Initialise Disk Wizard window opens, click Cancel.

iStorage diskAshur PRO

6. Right-click Unknown Disk, and then select Initialise Disk.

www.istorage-uk.com

Manual / Handbuch / Manuel – v5.3F

#19

7. In the Initialise Disk window, click OK.

8. Right-click in the blank area under the Unallocated section, and then select New Simple Volume. The Welcome to the New Simple Volume Wizard window opens.

9. Click Next.

10. If you need only one partition, accept the default partition size and click Next.

11. Assign a drive letter or path and click Next.

12. Create a volume label, select Perform a quick format, and then click Next.

Manual / Handbuch / Manuel – v5.3F

13. Click Finish.

14. Wait until the format process is complete. The diskAshur PRO2 will be recognised and it is available for use.

iStorage diskAshur PRO

#20

www.istorage-uk.com

28. diskAshur PRO

Setup for Mac OS

Your diskAshur PRO2 is preformatted exFAT. To reformat the drive to a Mac compatible format please read below. Once the drive is unlocked, open Disk Utility from Applications/Utilities/Disk Utilities.

To format the diskAshur PRO2:

1. Select diskAshur PRO2 from the list of drives and volumes. Each drive in the list will display its capacity, manufacturer, and product name, such as ‘iStorage diskAshur PRO2 Media’ or 232.9 diskAshur PRO2.

2. Click the ‘Erase’ button (ﬁgure 1).

ﬁgure 1

3. Enter a name for the drive (ﬁgure 2). The default name is Untitled. The name of the drive will eventually appear on the desktop.

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

ﬁgure 2

www.istorage-uk.com

#21

4. Select a scheme and volume format to use. The Volume Format dropdown menu (ﬁgure 3) lists the available drive formats that the Mac supports. The recommended format type is ‘Mac OS Extended (Journaled).’ The scheme format dropdown menu lists the available schemes to use (ﬁgure 4). We recommend using ‘GUID Partition Map’ on drives larger than 2TB.

ﬁgure 3

ﬁgure 4

5. Click the ‘Erase’ button. Disk Utility will unmount the volume from the desktop, erase it, and then remount it on the desktop.

Manual / Handbuch / Manuel – v5.3F

iStorage diskAshur PRO

#22

www.istorage-uk.com

29. diskAshur PRO

Setup for Linux (Ubuntu 17.10)

If your diskAshur PRO2 has been initialised and formatted exFAT, you can directly use the drive on Ubuntu. If not, please read below. To format the diskAshur PRO

as FAT ﬁlesystem:

1. Open ‘Show Application’ and type ‘Disks’ in the search box. Click on the ‘Disks’ utility when displayed.

2. Click to select the drive (500 GB Hard Disk) under ‘Devices’. Next click on the gears icon under ‘Volumes’ and then click on ‘Format’.

3. Select ‘Compatible with all systems and devices (FAT)’ for the ‘Type’ option. And enter a name for the drive,

e.g: diskAshur PRO2. Then, click the ‘Format’ button.

www.istorage-uk.com

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

#23

4. Click ‘Format’ again.

5. The drive will start to be formatted.

6. After the format process is ﬁnished, click to mount the drive to Ubuntu.

Manual / Handbuch / Manuel – v5.3F

iStorage diskAshur PRO

#24

www.istorage-uk.com

7. Now the drive should be mounted to Ubuntu and ready to use.

8. A disk icon will be shown as seen in the image below. You can click the disk icon to open your drive.

Lock diskAshur PRO

strongly recommended to right click your drive icon and then click ‘Safely Remove’ in the OS to eject (lock) your

It is

for Linux (Ubuntu 17.10)

diskAshur PRO2, especially after data has been copied or deleted from the drive.

www.istorage-uk.com

iStorage diskAshur PRO

Manual / Handbuch / Manuel – v5.3F

#25

30. Hibernating, Suspending, or Logging off from the Operating System

Be sure to save and close all the ﬁles on your diskAshur PRO2 before hibernating, suspending, or logging off from the operating system.

It is recommended that you lock the diskAshur PRO2 manually before hibernating, suspending, or logging off from your system.

To lock, simply press the ‘LOCK’ button on the diskAshur PRO2 or by clicking the ‘Safely Remove Hardware/Eject’ icon within your operating system.

Attention: To ensure your data is secure, be sure to lock your diskAshur PRO2 if you are away from your

computer.

31. How to check Firmware in Admin mode

To check the ﬁrmware revision number, ﬁrst enter the “Admin Mode” as described in section 5. Once the drive is in Admin Mode (solid

1. In Admin mode press and hold down “3 + 8” until

GREEN and BLUE LEDs blink together

BLUE LED) proceed with the following steps.

Solid

BLUE LED will change to blinking GREEN

BLUE LEDs

and

2. Press the “UNLOCK” button and the following happens;

a. All LED’s ( b.

RED LED blinks indicating the integral part of the ﬁrmware revision number.

GREEN LED blinks indicating the fractional part.

c. d. All LED’s ( e. LEDs return to solid

RED, GREEN & BLUE) become solid for 1 second.

BLUE

For example, if the ﬁrmware revision number is ‘1.2’, the RED LED will blink once (1) and the GREEN LED will blink two (2) times. Once the sequence has ended the

Manual / Handbuch / Manuel – v5.3F

LED.

RED, GREEN & BLUE LED’s will blink together once and then return to a solid BLUE

iStorage diskAshur PRO

#26

www.istorage-uk.com

+ 59 hidden pages

iStorage FIPS 140-2 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual