IronKey Secure Flash Drive Enterprise User's Manual
Contents
1. VIT Secure Files 2 Updating device firmware soft The IronKey can securely update its software and ware firmware through signed updates that are verified in hardware This allows users to keep their devices up Pe to date and protect themselves from future malware w Settings and online threats To check for available updates click the Check for Up dates button If an update is available you can choose to download and install it by clicking the Download Update button Software U pates IRONKEY ENTERPRISE USER GUIDE PAGE 13 3 Configuring device settings The Settings menu allows you to configure preferences to your liking such as Enabling Disabling the Password Manager Preferences Enabling Disabling the Secure Sessions Configuring Password Manager options Select which web browser your IlronKey should use Reformat Secure Volume As well as some important drive maintenance features Restore IronKey Applications Reformatting your secure volume Restoring your lronKey applications if they are erased or corrupted 4 Configure your lronKey s Click on Network Settings to configure how your network and proxy settings lronKey connects to the Internet Direct Connection Does not use a proxy Use System Settings import the proxy settings from Network Settings Windows Internet Options Use WPAD Enter the URL to where your Web Proxy Auto Detect file is located Manual P2. gt lt gt USB device filesystem DeviceDrivers gt lt gt EHCI HCD USB 2 0 support DeviceDrivers gt lt gt UHCI HCD most Intel and VIA support DeviceDrivers gt lt gt USB Mass Storage Support The kernels that are included by default in most major distributions already have these features so if you are using the default kernel that comes with a supported distribution you do not need to take any other action Also on 64 bit linux systems the 32 bit libraries will have to be installed in order to run the ironkey program 2 Mounting problems Make sure you have permissions to mount external SCSI amp USB devices Some distributions do not mount automatically and require the following command to be run mount dev lt name of the device gt media lt name of the mounted device gt The name of the mounted device varies depending on the distribution The names of the lronKey devices can be discovered by running 1ronkey show 3 Permissions You must have permissions to mount external usb flash devices You must have permissions to run executables off the lronKey CD ROM in order to launch the IronKey Unlocker You may need root user permissions 4 Supported distributions Not all distributions of Linux are supported Please visit https support ironkey com linux for the latest list of supported distributions 5 The lronKey Unlocker for Linux only supports x86 systems at this time NOTE In lronKey Enterprise you
3. 7 Product Walkthrough Your lronKey Enterprise Secure Flash Drive consists of the following components lronKey Unlocker Windows Mac and Linux lronKey Control Panel Windows only lronKey Virtual Keyboard Windows only Mozilla Firefox amp lronKey s Secure Sessions Service Windows only lronKey Password Manager Windows XP amp Vista only lronKey Secure Backup Windows only RSA SecurlID Windows only my ironkey com Windows only NOTE Some of these components may not be available depending on how your System Admin con figured your lronKey Standard Usage Requires Windows 2000 SP4 XP SP2 Vista Mac 10 4 or Linux 2 6 computer USB 2 0 port for high speed data transfer An Internet connection for the online services An email from your System Admin with an Activation Code ACTIVATION AND INITIALIZATION WINDOWS ONLY When you open the package you will find one lronKey Secure Flash Drive one lanyard with keyring and a Quick Start Guide Your IronKey can only be setup on a Windows computer Below is a brief description of the standard way of setting up an lronKey Step Description Plug the lronKey into your Your IronKey needs to be activated on a Windows Windows computer s USB port 2000 XP or Vista computer To use the full speed of the lronKey plug it into a USB 2 0 port 2 The Activate Your lronKey The IronKey autoruns as a virtual CD ROM screen will appear This screen may not appe
4. IRONKEY MALWARE SCANNER WINDOWS ONLY Normal flash drives can inadvertently spread malware from one computer to another Your lronKey however includes built in anti malware features including A read only virtual CD from which the most important lronKey files run Autorun protection from worms and viruses that spread just by plugging in a USB drive A Read Only Mode for the IronKey Secure Drive Cryptographic operations in IronKey hardware completely protected from malware And if enabled by your System Administrator the IronKey Malware Scanner The IronKey Malware Scanner is a self cleaning technology that helps keep your lronKey secure by detecting and removing malware that gets on your lronKey from an infected file or machine It is powered by the McAfee Anti Virus and Anti Malware signature database which is constantly updated to combat the latest malware threats It works by first checking for the latest updates scanning your lronKey and report ing and cleaning any malware that is found Keeping your IronKey Malware Scanner Up to Date It is important to keep your IronKey Malware Scanner up to date to protect against the latest malware threats As long as you have an Internet connection the IronKey Malware Scanner will update itself before each scan The date it was last updated is displayed onscreen Your first update may take a long time to download depending on your Internet connection If your lronKey Malware Scanner become
5. SP4 XP SP2 Vista USE FE CG A aas lronKey Unlocker for Linux 2 6 x86 lronKey Unlocker for Mac 10 4 PPC and Intel Speeds tested with 4GB device in a laboratory environment with lometer software Actual speeds may vary Advertised capacity is approximate and not all of it will be available for storage Some space is required for onboard software IRONKEY ENTERPRISE USER GUIDE PAGE 29 In many ways that s up to you We are focused on building not only the world s most secure flash drive but also enabling technologies that are DO O simple and enjoyable to use Your feedback really matters to us and we carefully review all feature requests and customer feedback for prioritiza tion of our next great features and products Have a cool idea or suggestion Please let us know You can open a thread on the IronKey Forum forum ironkey com or submit feedback to feedback ironkey com Let us know if you would like to be a beta tester of new functionality Where can go for more info We are endeavoring to be very open about the security architecture and technology that we use in designing and building the lronKey devices and online services A great deal of information can be found online on our websites forum ironkey com User forum with thousands of lronKeyologists www ironkey com General Information learn ironkey com Technical Information such as whitepapers amp FAQs support ironkey com Customer support in
6. accessing your account If you find your IronKey later you can also mark it as found again 3 Recovering device passwords People sometimes forget passwords lronKey gives you the option to back up your device pass word to your Online Security Vault at my ironkey com That way you can log into Safe Mode or with another lronKey and recover the password or have your System Administrator email you help Last Device Password Backup 08 8 07 7 43 pm PST 4 Deleting your Password Manager If you wish to delete your encrypted Password backup data Manager data that you backed up to your Online Security Vault simply click the Delete Password Manager Data button IRONKEY ENTERPRISE USER GUIDE PAGE 24 5 Monitoring account activities The Account Dashboard shows you the recent activities on your account such as logins failed os password attempts and when your device pass word has been recovered 6 Enabling Account Alerts for real time You can enable a number of Account Alerts for account monitoring additional insight into what activities are occur ring on your my ironkey com account An email will Account Dashboar be sent to you with details on the security event x such as the time and IP address of the event All emails regarding your account will have part of your Secret Phrase in the subject line for addi tional anti phishing protection 7 Changing account credentials You can cha
7. it to your Portable Bookmark list when you created the login you can select the website from your Portable Bookmarks in the IronKey Toolbar and the lronKey Password Manager will automatically log you into that website IRONKEY ENTERPRISE USER GUIDE PAGE 18 3 Editing deleting logins and Por table Bookmarks 4 Backing Up and Restoring Pass word Manager Data 5 Using the Form Filler nn Cc https www ironkey com 5 F Add Website Form Filler Settings onkey com 6 Generating strong and random passwords 7 Automatically logging into online accounts b m SU o Welsfargo eBay MySpace com Google Yahoo Password Manager Secure Sessions IronKey Control Panel Secure Browser Secure Files Lock IronkKey m EDE Mm IRONKEY ENTERPRISE USER GUIDE You can manage your Password Manager accounts from within the IronKey Control Panel Each website will have a set able name a URL a username logins only and a password logins only Your passwords are not shown unless you click the Show checkbox You can securely back up your encrypted Password Manager data to your Online Security Vault Simply click the corresponding buttons from within the Iron Key Control Panel This procedure will back up your Portable Bookmarks logins and Form Filler data Synchronizing IronKeys or setting up Master Slave relationships is easy since you can restore password backups to your other lron
8. to securely access your files on multiple operating systems lt prompts you for your password securely validates it and then mounts your secure volume where all of your files are stored on the lronKey Here is how to unlock your IronKey on Windows 2000 SP4 XP SP2 and Vista Step Description Plug in your lronKey and unlock When you plug your IronKey in the Unlock Your Iron it with your password Key window appears if it does not you can go to My Computer and double click on the IronKey drive SB IRONKEY Unlock Tour ronka Entering your password correctly will mount your se cure volume with all your secure applications and files Entering the wrong password too many times will permanently erase all of your data After every three attempts you must unplug and reinsert the lronKey TI nee Ge RE A P a ie ey a Eiaon Siren NOTE Some operations require that your lronKey connect to the Internet before unlocking If it cannot connect click on Edit Proxy Settings to configure how your lronKey connects to the Internet 2 Choose which action to take By selecting the corresponding checkboxes before when you unlock it unlocking your lronKey you can view your secure files launch the IronKey Control Panel unlock your Iron a a ll T P Key in Read Only Mode and or securely log into your DES di all d ae eae my ironkey com account CT inst ney i Kerdin Wade Log nto ovine ro Kes accou
9. your online passwords from an encrypted online backup Waterproof amp Tamper Resistent The lronKey was designed to survive the extremes The lronKey s rugged metal casing is injected with an epoxy compound that makes it not only tamper resistent but waterproof to military specifications MIL STD 8 OF p ai 4 i BTERP p IRONKEY ENTERPRISE USER GUIDE PAGE 4 Rugged metal case filled solid with epoxy Multi color LED Drilled hole for keyring lanyard Area to engrave your name code Stamped unique serial number Device Diagrams The IronKey has been designed from the ground up with security in mind A combination of advanced security technologies are used to ensure maximum protection of your data Additionally the lronKey has been designed to be physically secure to prevent hardware level attacks and tampering as well as to make the device rugged and long lasting You can rest assured that your data is secured when you carry an lronKey elie ee aaa USB 2 0 Connector This lronKey Cryptochip is hardened against physical attacks such as pow er attacks and bus sniffing It is physically impossible to tamper with its protected data or reset the password counter If the Cryptochip detects a physical attack from a hacker it will destroy the encryption keys making the stored encrypted files inaccessible r 0 The World s Most Secure Flash Drive FAST SAFE RUGGED Transfers data up to 8
10. D ONLY MODE WINDOWS MAC LINUX You can unlock your lronKey in a read only state such that files on your lronKey cannot be ed ited An example of when this is useful is when you want to access a file on your IronKey while using an untrusted or unknown computer If you unlock your IronKey in Read Only Mode you need not fear that malware on that machine will infect your IlronKey or modify your files When you unlock your IronKey in Read Only Mode you will remain in Read Only Mode until you lock your IronKey Note that some features are not available in Read Only Mode because they require modifying files on your IronKey Examples of unavailable features include the onboard Firefox reformat ting updating and restoring applications and files to your lronKey and using the Applications List On Windows and Mac OS X Computers Step Description When unlocking your IronKey select the Unlock lronKey in Read Only Pessword EEeer an Mode checkbox Se hee Fr aie ara l i er T gi i s d 2 You will see a message in the lronKey Control Panel that confirms you are in G IRONKEY READ ONLY MODE CONTROL Pate FILES CANNOT BE EDITED Read Only Mode MIE On Linux Computers Step Description To unlock your IronKey in Read Only ironkey read only Mode on Linux use 2 To return to a normal state where you ironkey I1ock can edit files again lock your lronKey IRONKEY ENTERPRISE USER GUIDE PAGE 26 USING THE
11. IRONKEY User Guide lronKey Enterprise Secure Flash Drive IRONKEY Thank you for your interest in lronKey lronKey is committed to creating and developing the best security technologies and making them simple to use affordable and available to every one Years of research and millions of dollars of development have gone into bringing this tech nology to you in the IlronKey For a quick product overview you can also view our online demos at https www ironkey com demo We are very open to user feedback and would greatly appreciate hearing about your comments Suggestions and experiences with the lronKey Standard Feedback feedback ironkey com Anonymous Feedback https www ironkey com feedback User Forum https forum ironkey com IRONKEY ENTERPRISE USER GUIDE PAGE CONTENTS What is it Meet the lronKey Enterprise Core Components Device Diagrams Technical amp Security Notes lronKey Device Security How Does it Work Product Walkthrough Activation and Initialization Using the IronKey Unlocker on Windows Using the lronKey Unlocker on a Mac Using the IronKey Unlocker on Linux Using the IronKey Control Panel Using the IronKey Virtual Keyboard Using the Onboard Firefox amp Secure Sessions Service Using the IronKey Password Manager Using the Secure Backup Software Using RSA SecurlD on your lronKey Importing a Digital Certificate into the lronKey Using my ironkey com Using You
12. Keys You can have the IronKey Password Manager automati cally fill in your webform data such as names phone numbers addresses credit card data and email ad dresses First set up this information by clicking on the Set tings button in the lronKey Toolbar Then to fill a webform simply click the Form Filler button You can use the Password Generator located within the IronKey Control Panel to create long random passwords Then you can have the IronKey Password Manager remember then for you Simply copy and paste them into a webform when logging into an online account When you add a login to your Portable Bookmarks that login will appear not only in your Portable Book marks list but also in the lronKey System Tray Menu Simply right click on the IronKey icon in the System Tray and then click on the Secure Login The onboard Firefox web browser will launch and automatically log you into the account Safely logging into your online accounts has never been easier PAGE 19 TE USING THE SECURE BACKUP GIRONKEY SOFTWARE WINDOWS ONLY If your lronKey is lost or stolen you have peace of mind knowing that your Back Up confidential information cannot be seen PAPI i ee ee BEL Lic My Eat baise fon My Conger Crea in encrypted backup on your IC computer Dennes Browne Heer by anyone but you And getting your se _ data back is simple with IronKey s Se ar entres cure Backup software wh
13. UIDE PAGE 22 4 Note that lronKey s certificate is available here Now you can add your own Click the Import button Certificate Manager 1064 Your Certhitates Other People s Viet Sites Authorities You have certificates fram these orgenibatarns that dently you ss aicr hame Security Gie Purposes Serial Humr Epines On a ug Maii Monkey FECSA TU PSO 6 BY G Backup All impart i Le 5 Browse to the PKCS 12 for You will be prompted for the location of the PKCS 12 mat certificate file and open it format certificate file file extension will be p12 in UNIX Linux pfx in Windows 6 A window will appear ask ing you to confirm where to store the certificate Choose IronKey PKCS 1 7 Enter the password that was used to protect the certifi cate If no password was used sim ply leave the text field blank 8 Your certificate is now stored securely in the lronKey Cryptochip and is available for use in the onboard Mozilla Firefox IRONKEY ENTERPRISE USER GUIDE Please choose a token Password Entry Dialog E3 Please enter the password that was used to encrypt this certificate backup Password Alert x Successfully restored your security certificate s and private key s PAGE 23 USING MY IRONKEY COM WINDOWS ONLY NOTE Depending on how your System Administrator has configured your IronKey you many not have an online lronKey account and
14. and Bookmarks lronKey s Password Manager also allows you to back up your encrypted Password Manger data to your Online Security Vault synchronize password data between lronKeys or if your lronKey is ever lost or stolen securely restore all your passwords to a new IronKey Only you can access and decrypt your passwords The IronKey Password Manager does not store your passwords in a file on the file system of the flash drive so malware will not be able to simple copy off your password database Step Description Adding Portable Bookmarks To make a bookmark work in both the onboard oh a S https nww sronkey com Firefox and the local PC s Internet Explorer simply narks I Add Website B Form Filler Fl Settings click the Add Website button on the Iron Key Toolbar This will add it to your Portable Bookmarks list which you can access by clicking Portable Bookmarks Maas Bookmark this website 2 Adding online accounts The IronKey Password Manager uses a self learning approach to capturing your logins to your online ac G inonxey HE counts To store a login simply log into a site as you normally would The lronKey Password Manager will prompt you to ask if you want to store this password E Ada io my Portacie Bookmarks securely on your lronKey Save Password to Four monkey Chance The next time you return to that website you will be asked if you want to log in with that username or if you added
15. ar if your computer does not allow devices to auto run You can start it manually by double clicking on the IronKey icon in My Computer and running lronKey exe IRONKEY ENTERPRISE USER GUIDE PAGE 8 3 Retrieve the email with your Your System Admin has setup your lronKey ahead of Activation Code Copy and paste time to abide by your organization s security standards it into the lronKey window You will receive an email with an Activation Code that is needed to use your IronKey Enter your email address and your Activation Code into the fields provided on the IronKey window Click Continue when you are ready If your lronKey cannot connect to the Internet click Edit Proxy Settings to adjust its network settings 4 Create Since you can have multiple IronKeys associated with a device Sera Rouen ome one IronKey account the nickname helps you distin password FETE 4 guish between different lronKey devices and a r nickname a The threat of brute force password attacks is removed for your by the lronKey s self destruct feature Your password lronKey is case sensitive and must match your organization s password policy 5 Back up your password to your If enabled you have the option to back up your pass online lronKey account word online to your my ironkey com account That way if you ever forget your password your System Admin can email you a reminder Backup my password online in case I forg
16. are threats targeting USB flash drives It will prevent autorun execution of unap proved programs can be unlocked in a Read Only Mode and can scan and clean malware from your lIronKey with the lronKey Malware Scanner IRONKEY ENTERPRISE USER GUIDE PAGE 3 Simple Device Management Your lronKey includes the IronKey Control Panel a central launchpad for launching your applications editing your preferences and safely locking your lronKey Portable amp Cross Platform Data Access The IronKey Unlocker allows you to access your encrypted files on Win dows 2000 XP Vista Mac OS X and numerous distributions of Linux Secure Local Backup amp Data Recovery Securely back up the data on your lronKey using lronKey s Secure Backup software It allows you to recover your data to a new IronKey in case your lronKey is ever lost or stolen or synchronize data between IronKeys Stealth Browsing Technology Surf the Web safely and privately through almost any network even across unsecured wireless hotspots with lronKey s Secure Sessions Service It can be easily toggled through the onboard Mozilla Firefox web browser Self Learning Password Management Securely store and backup all your online passwords as you go with the lronKey Password Manager It allows you to automatically log into your online accounts to avoid keylogging spyware and phishing attacks Online Security Vault If your IronKey is ever lost or stolen you can easily restore
17. ce not in the file system being first locally encrypted with 256 bit AES using randomly generated keys encrypted with a SHA 256 hash of your device password All of this data is then doubly encrypted with 28 bit AES hardware encryption This is the strongest password protection we have ever seen in the industry When you back up your passwords online lronKey performs a complicat ed public key cryptography handshake with lronKey s services using RSA 2048 bit keys After successful authentication your encrypted block of password data is securely transmitted over SSL to your encrypted Online Security Vault Making Tor Faster and More Secure lronKey has extended the public Tor network with its own high perfor mance servers This improves the overall security in at least two ways Since lronKey controls the exit node in your encrypted Tor circuit we can ensure that no one is injecting unwanted or malicious content into your online communications such as advertisements or spyware You are not assured this level of security with other publicly run exit nodes lronKey can also make sure that no exit node is redirecting your web traffic by providing addition DNS protections This anti pharming measure can also help mitigate phishing attacks and other online threats Find lots more technical information at https learn ironkey com IRONKEY CRYPTOCHIP _ i MILITARY GRADE ENCRYPTION IRONKEY ENTERPRISE USER GUIDE PAGE
18. date of publication This document is for information purposes only lronKey makes no warranties expressed or implied in this document lronKey and the lronKey logo are trademarks of lronKey Inc in the United States and other countries All other trademarks are the properties of their respective owners 2008 IronKey Inc All rights reserved IK0010883 IRONKEY ENTERPRISE USER GUIDE PAGE 31
19. et it 6 The lronKey will initialize During this process it will generate the AES encryption keys create the file system for the secure volume and copy over secure applications and files to the secure volume 7 Set up your personalized login in If enabled you continue the setup process online formation for your my ironkey com my ironkey com is a secure site where you can man account by clicking the Login to age your lronKey account and devices Accessing my ironkey com button my ironkey com requires two factor authentication your lronKey and your password 8 Follow the onscreen directions to Depending on your organization s settings you will cre setup your my ironkey com account ate a unique username password confirm your email address for out of band authentication and answer Secret Questions for supplemental authentication You will also select a Secret Image that you will see whenever you log in as well as a Secret Phrase that is used as an anti phishing measure when communicating with you via email 9 You may need to respond to a lronKey must verify your email address because it is confirmation email by entering used with important services related to your online the confirmation code online account At this point your lronKey is ready to protect your data identity and online privacy IRONKEY ENTERPRISE USER GUIDE PAGE 9 USING THE IRONKEY UNLOCKER ON WINDOWS The IronKey Unlocker allows you
20. formation Who is the IronKey Team The IronKey Team consists of security fraud and industry experts with many years of background at companies such as Visa RSA Security PayPal Authenex Nokia Cisco Lexar Netscape Tumbleweed Valicert Apple and the Department of Homeland Security IronKey CEO Dave Jevans is also the chairman of the Anti Phishing Working Group www antiphishing org We have spent years and millions of dollars of research and development to create the lronKey Simple accessible and of great value now you can carry the world s most secure flash drive to protect your digital life online and on the go IRONKEY ENTERPRISE USER GUIDE PAGE 30 Contact Information Product Feedback feedback ironkey com lronKey Online https my ironkey com https learn ironkey com https support ironkey com https forum ironkey com Feature Requests featurerequest ironkey com Support For support please contact your Helpdesk or System Admin Note lronKey is not liable for technical or editorial errors and or omissions contained herein nor for inci dental or consequential damages resulting from the furnishing or use of this material The information provided herein is subject to change without notice The information contained in this document represents the current view of lronKey on the issue discussed as of the date of publication IronKey can not guarantee the accuracy of any information presented after the
21. ich if enabled CR tr aout securely restores your data to a new a 4 Marios Trends ds GAL motes be lronKey Ge Te Deja Af Te Telja Back up your data on a regular basis Step Description Backing up your lronKey You can create an encrypted backup of a single file or your entire lronKey to your local comput er Click on the Secure Backup button in the IF vs secure Backu a Pir P lronKey Control Panel select a destination folder and select which files to back up It s that simple 2 Restoring encrypted backups If you ever lose your lronKey you can restore your data from an encrypted backup Open the Secure Backup client select the location on your local computer where the backup is located and select which files folders to restore If the data is coming from a different lronKey you will have to supply the device password for that lronKey i ia 1a Re fa a a p SR ee all lo YTlOt00010101001010001010tt OOO r TOO T Restore your data to a eee new or existing IronKey h fl i LA LI LJ T EN i E L E EURE EF iP Pee LJ 1 YU j AD al A1 p LOU DOLL AAA WE T ra k OL OO LD 5 oi LE ET Ep i a LT IRONKEY ENTERPRISE USER GUIDE PAGE 20 USING RSA SECURID ON YOUR IRONKEY WINDOWS ONLY lf enabled your lronKey can provide additional strong PA authentication capabilities by generating RSA SecurlD p SYAN Sec u rl D one time passwords Your System Ad
22. may not be allowed to change the device password or un lock your IronKey on a Mac depending on your System Administrator s configuration See https support ironkey com linux for more information IRONKEY ENTERPRISE USER GUIDE PAGE 12 USING THE IRONKEY CONTROL PANEL WINDOWS ONLY The IronKey Control Panel is a central BE location for 0 IRONKEY CONTROL PANEL er Launching secure applications Applications Securely logging into my ironkey com FR secure Files Morina Firefox Configuring your lronKey settings RTC CNN ERY RSA SecuriD One Time Passwords Updating your device Password Mgr Changing your lronKey password cabins gt Editing Password Manager data Safely locking your device Getting online help _ Lock Drive Most of the Control Panel s options are located in the Settings menu Step Description Creating editing deleting secure When you click on Secure Files in the lronKey files Control Panel Windows Explorer will open directly to your secure volume Management All files on your lronKey are strongly encrypted with military grade AES encryption Encrypting files is as simple as moving them into the secure volume Dragging files onto your desktop will decrypt them on the fly in hardware The IronKey gives you the convenience of working as you normally would with a regular flash drive while at the same time providing strong and always on security
23. ministrator will need to provide a file to import your token s and Ready will likely be the one importing your tokens Step Description Open the RSA SecurlD application Click on the icon in the lronKey Control Panel s application list RSA RSA SecuriE 2 Import a stdid file This may be done I Click the Options button by your System Admin for you 2 Click the Add button 3 Browse on your computer to the stdid file 4 A password may be required to unlock the file Your token s will then be added 3 If you prefer rename your tokens Click the Rename button to create a name for the selected token 4 In the Options window you can also Be careful when deleting tokens as this operation delete tokens by clicking the Delete or cannot be undone Delete All button 5 To generate a one time password select a token from the dropdown list EN RSA SecuriD One Time Passwords YA SecurlD Token Website 1 w Ifa PIN is required enter the PIN into Ready the space provided and press Enter You can optionally save a PIN for each token PIN Save PIN Periodically a new one time password will be generated To copy your pass 3 IRONKEY SECURED Options word to the clipboard click Copy IRONKEY ENTERPRISE USER GUIDE PAGE 21 IMPORTING A DIGITAL CERTIFICATE INTO THE IRONKEY WINDOWS ONLY The lronKey Cryptochip includes a limited am
24. n in Read Only Mode lf an infection is found the file will automatically be clean A window will also appear with a report of the event NOTE The lronKey Malware Scanner is not a replacement for Anti Virus or Anti Spyware software on your computer it is not designed to clean your registry or do real time malware pre vention It is designed specifically for scanning and cleaning your lronKey A popular use for the IronKey Malware Scanner is to use it in Read Only Mode to detect if malware on a computer you suspect is infected The lronKey provides a secure convenient and portable way of detecting malware making it a valuable addition to your security toolbelt IRONKEY ENTERPRISE USER GUIDE PAGE 28 Product Specifications CAPACIT Y GB 2GB 4GB 8GB SPEED Up to 30 MB per second read speed Up to 20 MB per second write speed DIMENSIONS 75mm X 19mm X Imm WEIGHT 0 8 oz WATERPROOF MIL STD 810F OPERATING TEMPERATURE 40 C 85 C OPERATING SHOCK 16G rms ENCRYPTION Hardware 28 bit AES CBC Mode Hashing 256 bit SHA PKI 2048 bit RSA FIPS CERTIFICATIONS Designed and Assembled in the U S A FIPS 140 2 Level 2 Certificate Number 938 FIPS 186 2 Certificate Numbers 305 and 380 lronKey devices do not require any FIPS 197 Certificate Numbers 655 and 689 software or drivers to be installed HARDWARE Z f USB 2 0 High Speed amp USB 1 1 oa A nd at OS COMPATIBILITY rapa Windows 2000
25. nge your password Secret Questions k EARE Secret Image and Phrase as well as your email ad dresses from within my ironkey com as often as you wish to ensure that no one else may access your account Update Profile Creating a secondary email address gives you a fail safe in case your primary email address is no longer available In the event that you ever lose your lronKey or forget your IronKey device password you can still access the site in Safe Mode a restricted mode with limited functionality This is useful for marking your lronKey as lost or recovering a forgotten password Step Description Go to https my ironkey com Here you will log into Safe Mode without your lronKey 2 Enter your email address or user Your Secret Image will be displayed so that you name and your online account pass know you are at the correct site word Click Submit Do not enter your device password in this screen If you have forgotten your online account pass word click the Reset Password link 3 An email will be sent to you with a Copy and paste that login code into the page that Login Code asks for it Depending on the configuration of your account you may need to answer your Secret Questions 4 You are now logged into Safe Mode If you had forgotten your device password and have backed it up to your Online Security Vault you can recover it now IRONKEY ENTERPRISE USER GUIDE PAGE 25 USING YOUR IRONKEY IN REA
26. nsfer files from and between Windows and Linux computers Depending on your Linux distribution you may need root privileges to use the program iron key found in the Linux folder of the mounted virtual CD ROM If you have only one lronKey attached to the system simply run the program from a command shell with no arguments e g ironkey If you have multiple IronKeys you will have to specify the device name of the one you wish to unlock Note that ironkey only unlocks the secure volume it must then be mounted Many modern Linux distributions will do this automatically if not run the mount program from the command line using the device name printed by ironkey ironkey may also be used to lock the device Use 1ronkey lock devicename to lock the IronKey named devicename and 1ronkey read only to unlock the IronKey in Read Only Mode Note that simply unmounting the device will not automatically lock the secure volume To lock the device you will have to either unmount and physically remove unplug it or else run ironkey Lock IRONKEY ENTERPRISE USER GUIDE PAGE l Please note the following important details for using your IronKey on Linux I Kernel Version must be 2 6 or higher If you compile your own kernel you must include the following in it DeviceDrivers gt SCSIDeviceSupport gt lt gt SCSICDROMSupport DeviceDrivers gt lt gt Support for Host side USB DeviceDrivers
27. nt USING THE IRONKEY UNLOCKER ON A MAC 10 4 Step Description Plug in your IronKey and unlock When you plug in your lronKey go to lronKey Mac IK it with your password Unlocker and double click on the IronKey drive C3 IRONKEY Untock Your renitey Entering your password correctly which is verified in hardware will mount your secure volume with all or mit your secure files etme cee lea Entering the wrong password too many times will Sl Untock tronitey in Rand Cnly Mode permanently erase all of your data After every three attempts you must unplug and reinsert the lronKey IRONKEY ENTERPRISE USER GUIDE PAGE 10 2 Choose which action to take By selecting the corresponding checkbox before un when you unlock it locking your lronKey you can view your secure files and or unlock your IlronKey in Read Only Mode 3 Locking amp unplugging the IronKey Clicking Lock Drive will exit open IronKey applica tions and lock the device It is then safe to unplug it IRONKEY Lock Your tronKey from your computer NOTE In IronKey Enterprise you may not be allowed to change the device password or unlock your lronKey ton on a Mac depending on your System Administrator s Te configuration USING THE IRONKEY UNLOCKER ON LINUX lronKey has extended its core platform compatibility to include Linux systems If enabled you can manage your secure files on Linux 2 6 allowing you to securely tra
28. ount of extremely secure hardware storage space which can be used for storing the private key associated with a digital certificate This provides you with additional strong authentication capabilities For example you could store a self signed certificate used for internal systems that will allow you to automatically log in when using the lronKey s onboard Firefox web browser The import process uses lronKey s PKCS I interface and requires Mozilla Firefox Note that there is only space for one additional private key in the IronKey Cryptochip though that key will receive the security benefits of the Cryptochip s tamperproof hardware and self destruct mechanisms Step Description Open the onboard Firefox Click on the icon in the lronKey Control Panel s applica tion list on your user s device 2 Open Firefox s Options menu Click the Tools in the menu bar to the Encryption tab 2 Click on Options 3 Click the Advanced icon 4 Click on the Encryption tab 9 3 Click the View Certificates button Options X w GO a A This will open the Firefox Main Tabs Content Feeds Privacy Security Advanced Certificate Manager General Network Update Encryption Protocols Use SSL 3 0 Use TLS 1 0 Certificates When a web site requires a certificate Select one automatically Ask me every time View Certificates Revocation Lists Security Devices IRONKEY ENTERPRISE USER G
29. r lronKey in Read Only Mode Using the IronKey Malware Scanner Product Specifications What s Next Where can go for more Information Who is the lronKey Team Contact Information IRONKEY ENTERPRISE USER GUIDE NO DW UW W W 10 10 lI 13 5 l6 18 20 21 22 24 26 27 29 30 30 30 3l PAGE 2 Meet the lronKey The lronKey Enterprise Secure Flash Drive designed to be the world s most secure USB flash drive protects your data passwords and Internet privacy with some of today s most advanced security technologies Your lronKey includes a suite of security software and online services many of which are described in this User s Guide Depending on how your Sys tem Administrator has configured your lronKey some of these features may not be included on your lronKey Core Features Hardware Encrypted Flash Drive Your IronKey can safely store 2 4 or 8 gigabytes of documents applica tions files and other data The IronKey Cryptochip inside the lronKey protects your data to the same level as highly classified government infor mation and cannot be disabled or accidently turned off Self Destruct Sequence If the lronKey Cryptochip detects any physical tampering by a hacker it will self destruct Similarly after too many consecutive invalid password attempts your lronKey will self destruct using flash trash technology Anti Malware Protection Your lronKey helps protect you from many of the latest malw
30. rding your web traffic and current session PETE aaisen tA The Network Map will show all of your available Bandwidth Meter a nr circuits and where in the world your traffic will be Change Identity a SC Settings ORATU coming from Secure Files Lock IronKey amS The Bandwidth Meter will show you your current bandwidth metrics You can easily change your apparent online identity which creates a new random circuit and changes the path of your encrypted web traffic As you will be coming from a different IP address it will likely appear to websites that you are a different person IRONKEY ENTERPRISE USER GUIDE PAGE 17 USING THE IRONKEY PASSWORD MANAGER WINDOWS XP amp VISTA ONLY The IronKey Password Manager if enabled connects to the onboard Firefox browser or to Internet Explorer versions 6 or 7 on your computer automatically filling in your saved pass words so you can log directly into your online accounts The lronKey Password Manager can securely store your sensitive online identity information including usernames passwords credit card numbers and addresses It can even gener ate strong passwords for you so that you can really lock down your online accounts Not having to type out your passwords provides Internet Explorer Mozilla Firefox added protection from keyloggers local computer on the lronKey and other crimeware lronKey Password Manager Portable Passwords
31. roxy Enter the URL and port number for your proxy server If proxy authentication is required you can enter your username and password in the appropriate fields 5 Creating a Lost amp Found Message If editing is enabled this feature allows you to create a message that will appear on the IronKey Unlocker win Lost and Found dow In the event that you lose your lronKey someone can return it to you if you provide your contact infor mation 6 Changing your device password You can change your device password and if enabled optionally back it up online to your Online Security Vault at my ironkey com lronKey Password Changing your password on a regular basis is a good security practice However be especially careful to remember your lronKey password IRONKEY ENTERPRISE USER GUIDE PAGE 14 7 Adding renaming and removing To manage the items in the Application List of the applications to the Applications lronKey Control Panel simply right click anywhere in List Application List A menu will appear allowing you to Browse to a new application to add it to the list 2 Rename existing applications in the list GB vozia Firefox 3 Delete an application from the list 4 Modify the way the list is presented Applications RSA SecurID One Time Passwords Add Applicati ME Please note that Items in the list are shortcuts to actual files Manag View as i is kons ing the items in the list will not alter
32. s too far out of date it will need to download a large file to bring it back up to date Step Description If enabled the IronKey Malware Scan The IronKey Malware Scanner is a feature that is ner runs automatically when you configured by your System Administrator unlock your lronKey You can bring the IronKey Malware 3 4 33PM Scanner to the foreground at any time by clicking on the IronKey Malware Scanner system tray icon 2 The lronKey Malware Scanner will Checking for updates requires an Internet con automatically check for updates nection Make sure there is at least 135 MB of free space on your IronKey for downloading and This is an important step in ensuring storing the latest malware signature files your are protect from the latest mal ware threats Your first update may take a long time to down load depending on your Internet connection IRONKEY ENTERPRISE USER GUIDE PAGE 27 3 The IronKey Malware Scanner will au tomatically scan your lronKey including onboard files compressed and uncom pressed files and any running system processes 4 The lronKey Malware Scanner will report and clean any malware that is found 5 You can also scan your computer drives by selecting the drive you would like to scan from the IronKey Malware Scanner system tray menu A window opens in the background that shows you the scanning progress NOTE The lronKey Malware Scanner does not scan your lronKey whe
33. the actual file Tile Items are automatically sorted alphabetically Any file can be added to the list including docu ments images and batch files For items that are not applications Windows will open the item with the default program associated with that filetype 8 Locking amp unplugging the lronKey Clicking Lock Drive will exit open lronKey applica tions and lock the device It is then safe to unplug it from your computer Lock Drive Do not unplug your IronKey while applications are still running This could result in data corruption USING THE IRONKEY VIRTUAL KEYBOARD WINDOWS ONLY If you are using your lronKey on an unfamiliar computer and are concerned about keylogging and screenlogging spyware use the lronKey Virtual Keyboard which helps protects your pass words by letting you click out letters and numbers The underlying techniques in the lronKey Virtual Keyboard will bypass many trojans keyloggers and screenloggers The lronKey Virtual Keyboard can be launched in a couple of ways In places where you enter a password into the lronKey e g the IronKey Unlocker changing your device password initializing your device click on the Virtual Keyboard icon Use the keyboard shortcut of CTRL ALT V The IronKey Virtual Keyboard can be used in a number of other applications when you need extra security typing out information e g email documents etc IRONKEY ENTERPRISE USER GUIDE PAGE I5 Step Descrip
34. this section may not apply to you Your lronKey supports advanced cryptographic authentication using strong PKI key pairs gen erated in the IronKey Cryptochip When you log into my ironkey com from your device it uses these unique keys as your digital identity credentials This locks down your account so that you must have both your IronKey and your password in order to gain access In other words only you can access your online lronKey account even if someone stole your lronKey or your pass word Step Description Securely logging into your account If enabled you can securely log into your my ironkey com by clicking the my ironkey com but ton in the lronKey Control Panel This will initiate E my ironkey com a complex PKI handshake thus logging you in with strong multi factor authentication If you ever lose your lronKey you can log into Safe Mode by going to https my ironkey com log ging in the account credentials you created when you activated your account This will allow you to mark an lronKey as lost or recover a forgotten device password This depends on how your Sys tem Administrator has configured your lronKey Ask your System Administrator for information 2 Marking lronKeys as lost If you ever lose your lronKey you can rest as sured that no one will ever get your data As an additional precaution you can mark an IronKey as lost from within my ironkey com which will prevent that device from ever
35. times lronKey Cryptochip with Waterproof amp tamper faster than ordinary flash drives military grade cryptography proof metal casing RELIABLE SMART INCLUDES Stores data up to 10 times Flash Trash technology Up to 8 gigabytes longer than ordinary flash drives for complete data erasure of secure storage b_n IRONKEY ENTERPRISE USER GUIDE PAGE 5 Technical amp Security Notes We are endeavoring to be very open about the security architecture and technology that we use in designing and building the lronKey devices and online services There is no hocus pocus or handwaving here We use established cryptographic algorithms we develop threat models and we perform security analyses internal and third party of our systems all the way through design development and deployment Your IronKey is FIPS 140 2 Level 2 validated Certificate 938 IRONKEY DEVICE SECURITY Data Encryption Keys AES keys generated by onboard Random Number Generator FIPS 186 2 AES keys generated by user at initialization time and encrypted AES keys never leave the hardware and are not stored in NAND flash Self Destruct Data Protection Secure volume does not mount until password is verified in hardware Password try counter implemented in tamper resistent hardware Once password try count is exceeded all data is erased by hardware Additional Security Features USB command channel encryption to protect device communications Firmware and software securel
36. tion Click the lronKey Virtual Key board icon The IronKey Virtual Keyboard will appear Alternatively you can press CTRL ALT V 2 Click on the keys to type out your password Click on Enter when you are finished 3 You can optionally click the Randomize button to random ize where the keys are This helps protect against screenloggers Randomize DI ronke Vertue Keyboard Chris Alta W a i amie ai ett laurech for passevord felis a kalakal nn SIRONKEY Unlock Your ls BE rentes Yoo Gris ri ite AB i i Note that you can use the IronKey Virtual Keyboard in conjunction with the actual keyboard if you wish so that some characters are typed and some are clicked Notice that when you click on a key in the Virtual Key board all of the keys will go blank This is a protection that prevents screenloggers from capturing what you clicked on If you do not wish to use this protection simple dis able it in the options menu next to the close button You can also have the Virtual Keyboard automatically launch when it encounters password fields This too is configured in the options menu USING THE ONBOARD FIREFOX amp SECURE SESSIONS SERVICE WINDOWS If enabled a Firefox web browser is already onboard your lronKey so none of your cookies his tory files bookmarks add ons or online passwords is stored on the local computer Now you can carry your personalized
37. web experience with you to other computers without worry Step Description Launch the onboard Firefox web browser for portable surfing Applications M Mozilla Firefox IRONKEY ENTERPRISE USER GUIDE lf enabled clicking on the Mozilla Firefox icon in the Applications list of the IronKey Control Panel will launch the onboard Firefox You cannot have a local version of Firefox running at the same time if you do you will be prompted to close it PAGE 16 2 Toggle Secure Sessions for secure If enabled clicking the IronKey button on the bottom and private surfing right of the onboard Firefox will silently turn lronKey s Secure Sessions Service on off This will create an encrypted tunnel directly from your lronKey out to a www jrankey com amp secured lronKey web server where it is then decrypt ed and sent out to the destination site Click to enable Secure Sessions This security gives you anti phishing and anti pharm ing protection for example we do our own DNS checking as well as enhanced privacy protection for example your IP address will not be available to other websites and ISPs You can check this out by going to a site such as whatismyip com or ipchicken com 3 Using the Secure Sessions Tools At any point while using Secure Sessions you can Network Map Bandwidth Meter launch additional tools form the IronKey System Tray and Changing Identities Menu that show you more information rega
38. y updateable over the Internet Updates verified by digital signatures in hardware Physically Secure Solid rugged metal case Encryption keys stored in the tamper resistent IronKey Cryptochip All chips are protected by epoxy based potting compound Exceeds military waterproof standards MIL STD 810F Device Password Protection The device password is hashed using salted SHA 256 before being trans mitted to the IronKey Secure Flash Drive over a secure and unique USB channel It is stored in an extremely inaccessible location in the protected hardware The hashed password is validated in hardware there is no get Password function that can retrieve the hashed password and only after the password is validated is the AES encryption key unlocked The pass word try counter is also implemented in hardware to prevent memory rewind attacks Typing your password incorrectly too many times initi ates a patent pending flash trash self destruct sequence which is run in hardware rather than using software ensuring the ultimate protection for your data IRONKEY ENTERPRISE USER GUIDE PAGE 6 Password Manager Protection The IronKey Password Manager and my ironkey com work together giving you the ability to back up your online passwords to your Online Security Vault First you must unlock your lronKey device which requires two factor authentication Your passwords are securely stored in a hidden hardware encrypted area inside the devi
Download Pdf Manuals
Related Search