User Guide IronKey Personal Secure Flash Drive IRONKEY USER GUIDE PAGE
Thank you for your interest in IronKey. IronKey is committed to creating and developing the best security technologies and making them simple-to-use, affordable, and available to everyone. Years of research and millions of dollars of development have gone into bringing this technology to you in the IronKey. For a quick product overview, you can also view our online demos at https://www.ironkey.com/demo.
CONTENTS What is it? Meet the IronKey Core Features Device Diagrams Technical & Security Notes IronKey Device Security IronKey Services Security 3 3 3 5 6 6 7 How Does it Work? Product Walkthrough Initializing and Activating Your IronKey on Windows Using the IronKey Unlocker on Windows Initializing Your IronKey on a Mac Using the IronKey Unlocker on a Mac Initializing Your IronKey on Linux Using the IronKey Unlocker on Linux Using the IronKey Control Panel Using the IronKey Virtual Keyboard Using the Onbo
What is it? Meet the IronKey The IronKey Personal Secure Flash Drive, designed to be the world’s most secure USB flash drive, protects your data, passwords, and Internet privacy with some of today’s most advanced security technologies. Even if your IronKey is lost or stolen, your data remains protected and can even be restored to a new IronKey from an encrypted backup. While the underlying security technologies are complex, the IronKey is simple to use and you only need to remember a password to unlock it.
Portable Cross-Platform Data Access The IronKey Unlocker allows you to access your encrypted files on Windows 2000, XP, Vista, Mac OS X and numerous distributions of Linux. Simple Device Management Your IronKey includes the IronKey Control Panel, a central launchpad for launching your applications, editing your preferences, and safely locking your IronKey. Secure Data Recovery Securely back up the data on your IronKey using IronKey’s Secure Backup software.
Device Diagrams The IronKey has been designed from the ground up with security in mind. A combination of advanced security technologies are used to ensure maximum protection of your data. Additionally, the IronKey has been designed to be physically secure, to prevent hardware-level attacks and tampering, as well as to make the device rugged and long-lasting. You can rest assured that your data is secured when you carry an IronKey.
Technical & Security Notes We are endeavoring to be very open about the security architecture and technology that we use in designing and building the IronKey devices and online services. There is no hocus-pocus or handwaving here. We use established cryptographic algorithms, we develop threat models, and we perform security analyses (internal and third party) of our systems all the way through design, development and deployment. Your IronKey is FIPS 140-2 Level 2 validated (Certificate #938).
Password Manager Protection The IronKey Password Manager and my.ironkey.com work together, giving you the ability to back up your online passwords to your Online Security Vault at my.ironkey.com. First, you must unlock your IronKey device, which requires two-factor authentication.
Secure Sessions: Making Tor Faster and More Secure IronKey maintains a secure, private Tor network with its own, high-performance servers (separate from the public Tor network). This improves the overall security in at least two ways: Since IronKey controls the “exit-node” in your encrypted Tor circuit, we can ensure that no one is injecting unwanted or malicious content into your online communications, such as advertisements or spyware.
How does it work? Product Walkthrough Your IronKey Personal Secure Flash Drive consists of the following components: » IronKey Unlocker (Windows, Mac and Linux) » IronKey Control Panel (Windows only) » IronKey Virtual Keyboard (Windows only) » Mozilla Firefox & IronKey’s Secure Sessions Service (Windows only) » IronKey Password Manager (Windows XP & Vista only) » IronKey Secure Backup (Windows only) » my.ironkey.
3 Create a device password and a nickname for your IronKey. 4 Back up your password to your online IronKey account 5 Agree to the License Agreements 6 The IronKey will initialize. Since you can have multiple IronKeys associated with one IronKey account, the nickname helps you distinguish between different IronKey devices. Your password is case-sensitive and must be at least 4 characters in length. The threat of brute-force password attacks is removed by the IronKey’s self-destruct feature.
Using the IronKey UNLOCKER on Windows The IronKey Unlocker allows you to securely access your files on multiple operating systems. It prompts you for your password, securely validates it, and then mounts your secure volume where all of your files are stored on the IronKey. Here is how to unlock your IronKey on Windows 2000 (SP4), XP (SP2), and Vista: 1 Step Plug in your IronKey and unlock it with your password.
Initializing your Ironkey On A Mac If you prefer to use a Mac, you can choose to initialize your IronKey on a Mac OS X computer: Step 1 Plug the IronKey into your computer’s USB port. 2 Launch the IronKey Unlocker. The “Initialize Your IronKey” screen will appear. Description Your IronKey will run on Mac OS X (10.4 or 10.5), PowerPC or Intel computers. It can also be setup and used on Windows and Linux. To use the full speed of the IronKey, plug it into a USB 2.0 port. The IronKey has a virtual CD-ROM.
Using the IronKey UNLOCKER on a Mac The IronKey Unlocker for Mac will allow you to access your files and change your device password on a Mac. You can use the other IronKey applications and services on a Windows computer. Step Description 1 Plug in your IronKey and unlock When you plug in your IronKey, go to “IronKey:Mac: it with your password. IronKey Unlocker” and double-click on the IronKey icon.
3 Create a device password and a nickname for your IronKey. 4 Agree to the license agreement 5 The IronKey will initialize. Since you can have multiple IronKeys, the nickname helps you distinguish between different IronKey devices. Your password is case-sensitive and must be at least 4 characters long . The threat of brute-force password attacks is removed by the IronKey’s self-destruct feature. IronKey’s End-User License Agreement will appear. This can also be found online at: https://www.ironkey.
Note that simply unmounting the device will not automatically lock the secure volume. To lock the device you will have to either unmount and physically remove (unplug) it, or else run: ironkey --lock Please note the following important details for using your IronKey on Linux: 1. Kernel Version must be 2.
Using the IronKey Control Panel (Windows Only) The IronKey Control Panel is a central location for: » Launching secure applications » Securely logging into my.ironkey.com » Configuring your IronKey settings » Updating your device » Changing your IronKey password » Editing Password Manager data » Safely locking your device » Getting online help Most of the Control Panel’s options are located in the “Settings” menu.
3 Configuring device settings The Settings menu allows you to configure preferences to your liking, such as: » Enabling/Disabling the Password Manager » Enabling/Disabling the Secure Sessions » Configuring Password Manager options » Select which web browser your IronKey should use » Enabling an automatic check for device updates on a weekly basis As well as some important drive maintenance features: » Reformatting your secure volume » Restoring your IronKey applications if they are ever 4 Configure yo
7 Adding, renaming, and removing applications to the Applications List To manage the items in the Application List of the IronKey Control Panel, simply right-click anywhere in Application List. A menu will appear allowing you to: 1. Browse to a new application to add it to the list 2. Rename existing applications in the list 3. Delete an application from the list 4. Modify the way the list is presented Please note that: » Items in the list are shortcuts to actual files.
Step 1 Click the IronKey Virtual Keyboard icon. Description The IronKey Virtual Keyboard will appear. Alternatively, you can press CTRL + ALT + V 2 Click on the keys to type out your password. Click on ‘Enter’ when you are finished. 3 You can optionally click the “Randomize” button to randomize where the keys are. This helps protect against screenloggers.
2 Toggle Secure Sessions for secure Clicking the IronKey button on the bottom right of and private surfing the onboard Firefox will silently turn IronKey’s Secure Sessions Service on/off. This will create an encrypted tunnel directly from your IronKey, out to a secured IronKey web server, where it is then decrypted and sent out to the destination site.
Using The IronKey Password Manager (Windows XP and Vista Only) The IronKey Password Manager connects to the onboard Firefox browser, or to Internet Explorer (versions 6 or 7) on your computer, automatically filling in your saved passwords so you can log directly into your online accounts. The IronKey Password Manager can securely store your sensitive online identity information, including usernames, passwords, credit card numbers and addresses.
3 Editing/deleting logins and Portable Bookmarks You can manage your Password Manager accounts from within the IronKey Control Panel. Each website will have a set-able name, a URL, a username (logins only), and a password (logins only). Your passwords are not shown unless you click the “Show” checkbox. 4 Backing Up and Restoring Password Manager Data You can securely back up your encrypted Password Manager data to your Online Security Vault.
Using The Secure Backup Software (Windows Only) If your IronKey is lost or stolen, you have peace of mind knowing that your confidential information cannot be seen by anyone but you. And getting your data back is simple with IronKey’s Secure Backup software, which securely restores your data to a new IronKey. Back up your data on a regular basis and always before an update.
IMPORTING a Digital Certificate into the Ironkey (Windows Only) The IronKey Cryptochip includes a limited amount of extremely secure hardware storage space, which can be used for storing the private key associated with a digital certificate. This provides you with additional strong authentication capabilities. For example, you could store a self-signed certificate used for internal systems that will allow you to automatically log in when using the IronKey’s onboard Firefox web browser.
4 Note that IronKey’s certificate is available here. Now you can add your own. Click the ‘Import’ button. 5 Browse to the PKCS#12-for- You will be prompted for the location of the PKCS#12mat certificate file and open it. format certificate file (file extension will be .p12 in UNIX/ Linux, .pfx in Windows). 6 A window will appear asking you to confirm where to store the certificate. Choose “IronKey PKCS#11” 7 Enter the password that was used to protect the certificate.
Using my.ironkey.com (Windows ONLY) Your IronKey supports advanced cryptographic authentication using strong PKI key pairs generated in the IronKey Cryptochip. When you log into my.ironkey.com from your device, it uses these unique keys as your digital identity credentials. This locks down your account so that you must have both your IronKey and your password in order to gain access. In other words, only you can access your online IronKey account, even if someone stole your IronKey or your password.
4 Monitoring account activities 5 Enabling Account Alerts for real-time account monitoring 6 Changing account credentials The Account Dashboard shows you the recent activities on your account, such as logins, failed password attempts, and when your device password has been recovered. You can enable a number of Account Alerts for additional insight into what activities are occurring on your my.ironkey.com account.
Using your IronKey in Read-Only Mode (Windows, Mac, Linux) You can unlock your IronKey in a read-only state such that files on your IronKey cannot be edited. An example of when this is useful is when you want to access a file on your IronKey while using an untrusted or unknown computer. If you unlock your IronKey in Read-Only Mode, you need not fear that malware on that machine will infect your IronKey or modify your files.
Product Specifications CAPACITY* 1GB, 2GB, 4GB, 8GB SPEED* Up to 30 MB per second read speed Up to 20 MB per second write speed DIMENSIONS 75mm X 19mm X 9mm WEIGHT 0.
What’s next? In many ways, that’s up to you. We are focused on building not only the world’s most secure flash drive, but also enabling technologies that are simple and enjoyable to use. Your feedback really matters to us, and we carefully review all feature requests and customer feedback for prioritization of our next great features and products. Have a cool idea or suggestion? Please let us know. You can open a thread on the IronKey Forum (forum.ironkey.com) or submit feedback to feedback@ironkey.com.
Contact Information Product Feedback feedback@ironkey.com Feature Requests featurerequest@ironkey.com IronKey Online https://my.ironkey.com https://learn.ironkey.com https://support.ironkey.com https://forum.ironkey.com https://store.ironkey.com IronKey Support https://support.ironkey.com support@ironkey.
