USB Flash Drive Kingston 16GB USB Type-A IronKey Keypad 200

FIPS 140-3 Level 3 Validated with XTS-AES 256-bit hardware encryption
The Kingston® IronKey™ Keypad 200 series are OS-independent hardware-encrypted USB Type-A and USB Type-C®* drives with an alphanumeric keypad for easy-to-use PIN access. The KP200 series is FIPS 140-3 Level 3 Validated for military-grade security with enhancements that elevate the bar for data protection and incorporates XTS-AES 256-bit hardware-based encryption. Its circuitry is covered by a layer of special epoxy that makes it virtually impossible to remove components without damaging them; this tough epoxy stops attacks against the semiconductor components.

The drive is designed to be tamper evident to alert owners. It also incorporates brute force password attack protection, and BadUSB protection with digitally signed firmware. The alphanumeric keypad is coated with a layer of polymer that protects the keys and hides key usage through analysis of fingerprints on the keys.
Fast dual-channel performance is offered on KP200 drives with 512GB and on KP200C drives with 64GB-512GB capacities.

The KP200 series utilises a built-in rechargeable battery that can be used to unlock the drive first without using any software, and then plug it into any device that supports USB Type-A or USB Type-C mass storage device. This gives users the most flexibility across different platform types and operating systems.
With the Multi-PIN option (Admin/User), the keypad can be used to set up an easy-to-remember but hard-to guess alphanumeric PIN for the Admin or User accounts. Admin can restore a User PIN and provide access to the drive should the User PIN be forgotten, or if the drive is locked after reaching the maximum of 10 User login attempts. With both Admin and User PINs enabled, KP200 will lock the User PIN after 10 failed login attempts; if the Admin PIN is entered incorrectly 10 times in a row, brute force attack protection will crypto-erase the drive, destroy the data forever, and reset it.

The drive also provides two levels of Read-Only (or Write-Protect) modes – a Global mode that can be set by Admin, and a session-only mode that can be set by User. Read-Only modes can protect the drive from malware on untrusted systems. In addition, Admin can load content and set Global Read-Only mode, so that User can access the data but not make any changes.

Fast dual-channel performance is offered on KP200 drives with 512GB and on KP200C drives with 64GB-512GB capacities.

FIPS 140-3 Level 3 Validated, Certificate #5133
KP200 meets FIPS 140-3 Level 3 military-grade security specifications published by NIST. This is an enhanced version of the FIPS 140-2 specifications that further enhances the drive’s security capabilities and tamper-resistance. It includes XTS-AES 256-bit encryption along with Brute Force and [BadUSB] attack protection with digitally signed firmware. Its circuitry is covered by a layer of special epoxy that makes it virtually impossible to remove components without damaging them; this tough epoxy stops attacks against the semiconductor components.

OS and device independent
With KP200 utilising a rechargeable battery, the keypad can be used to unlock the drive without using any software, then plug it into any system that supports USB Type-A or USB Type-C mass storage device. This gives users the most flexibility across different platform types and operating systems.

Multi-PIN option
Users have the option to set up a User or an Admin/User mode. Admin can be used to restore a User PIN and provide access to the drive should User PIN be forgotten or if the drive is locked after reaching the maximum of 10 User login attempts.

Global and Session Read-Only (write protect) modes
Both Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. Admin can also set a Global Read-Only mode that sets the drive in Read-Only mode until reset."

How to use

Set an alphanumeric PIN on the keypad for Admin and/or User accounts. Use the built-in battery to enter the PIN and unlock the drive before connecting it to any computer that supports USB Type-A or USB Type-C mass storage. If User PIN is forgotten or locked after 10 failed attempts, the Admin PIN can restore access. If the Admin PIN is entered incorrectly 10 times, the drive will crypto-erase according to brute-force protection settings. Admins can also enable Global Read-Only mode; users can set a session-only Read-Only mode when needed.

Recommendations

Use strong alphanumeric PINs and store the Admin PIN securely. Enable Global Read-Only mode when distributing sensitive files for read-only access, and ensure the battery is charged before attempting pre-boot unlock on systems without supporting software.