USB-flashdrive Apricorn 128 GB USB Type-A 3.2 Gen 1 ASK3-NX

The Apricorn Aegis Secure Key 3NX (ASK3-NX-128GB) is a hardware-encrypted USB flash drive offering 128 GB of storage with a USB Type-A 3.2 Gen 1 interface. It uses 256-bit AES XTS encryption implemented entirely in hardware and authenticates users via an onboard polymer-coated keypad and optional fingerprint reader. The device is cross-platform compatible (Windows, macOS, Linux, Android, Chrome and embedded systems) and features a rugged aluminum housing with IP67 dust and water resistance.

Advantages

The drive provides software-free, on-the-fly encryption with no host-side drivers required, protecting PIN entry by using an onboard keypad to avoid host keyloggers. Its FIPS-relevant security design, epoxy-protected internal components, locked-down firmware, and configurable brute-force defense enhance protection against both remote and physical attacks. Additional features include separate Admin and User modes, programmable PIN lengths, read-only modes, unattended auto-lock, and the ability to configure the device as fixed disk or removable media for compatibility with various systems.

Suitable for

• Secure transport of sensitive files between Windows, macOS, Linux, Android and embedded systems
• Use in environments that require hardware-based encryption and tamper resistance (fieldwork, travel, medical, industrial)
• IT asset deployment and mass configuration using Aegis Configurator
• Situations requiring enforced user PIN enrollment or recoverable access via admin-programmed recovery PINs

Key specifications

• Capacity: 128 GB
• Interface: USB Type-A, USB 3.2 Gen 1 (backward compatible with USB 3.1/3.0)
• Encryption: 100% hardware 256-bit AES XTS
• Authentication: Onboard polymer-coated keypad and fingerprint reader
• Read speed: up to 77 MB/s; Write speed: up to 72 MB/s
• Weight: 0.022 kg
• Housing: aluminum, IP67 rated
• MPN/EAN: ASK3-NX-128GB / 0708326914673

How to use

At first use the Admin must set a unique Admin PIN via the onboard keypad to initialize the device; there are no factory default PINs. After Admin setup the device can be configured to require User Forced Enrollment so each user creates their own PIN before accessing data. Unlock the drive by entering the PIN on the device keypad; while locked it remains invisible to the host system. Use the Aegis Configurator (Windows app) for bulk provisioning and to set policies such as PIN length, brute-force threshold, read-only modes and fixed/removable media reporting.

Recommendations

Set a minimum PIN length and enable User Forced Enrollment for each user to reduce brute-force risk. Program recovery PINs and configure the brute-force defense threshold according to your operational security policy. When deploying to embedded systems or legacy equipment, choose fixed disk or removable media reporting to ensure host compatibility.