USB-flashstation Kingston Technology 512GB USB Type-A IronKey 200

FIPS 140-3 Level 3 Validated with XTS-AES 256-bit hardware encryption
The Kingston® IronKey™ Keypad 200 series are OS-independent hardware-encrypted USB Type-A and USB Type-C®* drives with an alphanumeric keypad for easy-to-use PIN access. The KP200 series is FIPS 140-3 Level 3 Validated for military-grade security with enhancements that elevate the bar for data protection and incorporates XTS-AES 256-bit hardware-based encryption. Its circuitry is covered by a layer of special epoxy that makes it virtually impossible to remove components without damaging them; this tough epoxy stops attacks against the semiconductor components.

The drive is designed to be tamper evident to alert owners. It also incorporates brute force password attack protection, and BadUSB protection with digitally signed firmware. The alphanumeric keypad is coated with a layer of polymer that protects the keys and hides key usage through analysis of fingerprints on the keys.
Fast dual-channel performance is offered on KP200 drives with 512GB and on KP200C drives with 64GB-512GB capacities.

The KP200 series utilises a built-in rechargeable battery that can be used to unlock the drive first without using any software, and then plug it into any device that supports USB Type-A or USB Type-C mass storage device. This gives users the most flexibility across different platform types and operating systems.
With the Multi-PIN option (Admin/User), the keypad can be used to set up an easy-to-remember but hard-to guess alphanumeric PIN for the Admin or User accounts. Admin can restore a User PIN and provide access to the drive should the User PIN be forgotten, or if the drive is locked after reaching the maximum of 10 User login attempts. With both Admin and User PINs enabled, KP200 will lock the User PIN after 10 failed login attempts; if the Admin PIN is entered incorrectly 10 times in a row, brute force attack protection will crypto-erase the drive, destroy the data forever, and reset it.

The drive also provides two levels of Read-Only (or Write-Protect) modes – a Global mode that can be set by Admin, and a session-only mode that can be set by User. Read-Only modes can protect the drive from malware on untrusted systems. In addition, Admin can load content and set Global Read-Only mode, so that User can access the data but not make any changes.

Fast dual-channel performance is offered on KP200 drives with 512GB and on KP200C drives with 64GB-512GB capacities.

FIPS 140-3 Level 3 Validated, Certificate #5133
KP200 meets FIPS 140-3 Level 3 military-grade security specifications published by NIST. This is an enhanced version of the FIPS 140-2 specifications that further enhances the drive’s security capabilities and tamper-resistance. It includes XTS-AES 256-bit encryption along with Brute Force and [BadUSB] attack protection with digitally signed firmware. Its circuitry is covered by a layer of special epoxy that makes it virtually impossible to remove components without damaging them; this tough epoxy stops attacks against the semiconductor components.

OS and device independent
With KP200 utilising a rechargeable battery, the keypad can be used to unlock the drive without using any software, then plug it into any system that supports USB Type-A or USB Type-C mass storage device. This gives users the most flexibility across different platform types and operating systems.

Multi-PIN option
Users have the option to set up a User or an Admin/User mode. Admin can be used to restore a User PIN and provide access to the drive should User PIN be forgotten or if the drive is locked after reaching the maximum of 10 User login attempts.

Global and Session Read-Only (write protect) modes
Both Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. Admin can also set a Global Read-Only mode that sets the drive in Read-Only mode until reset."

Kingston Technology IronKey 512GB Keypad 200, FIPS 140-3 Lvl 3 AES-256 Encrypted. Capacity: 512 GB, Device interface: USB Type-A, USB version: 3.2 Gen 1 (3.1 Gen 1), Read speed: 280 MB/s, Write speed: 200 MB/s. Form factor: Sleeve. Keypad integrated, Password protection. Weight: 25 g. Product colour: Blue

How to use

Set up an Admin PIN and optionally a separate User PIN using the alphanumeric keypad. Use the keypad and built-in battery to unlock the drive without connecting it to a host, then plug the drive into a USB Type-A or Type-C port to access files as a standard mass storage device. To protect data on untrusted systems, enable session Read-Only mode before connecting; to lock the drive for all users until reset, the Admin can enable Global Read-Only mode. If the User PIN is forgotten, the Admin PIN can restore access; repeated incorrect Admin PIN attempts will trigger the drive’s brute-force protection and crypto-erase the device.

Recommendations

Use the Admin/User Multi-PIN option to separate administrative access from daily use, enable Global Read-Only mode when distributing data to untrusted environments, and keep the Admin PIN stored securely offline. Charge the internal battery periodically so the keypad can unlock the drive when needed.